Skip to content

Remove route-based VPN solution - #108

Merged
chinmaybaikar merged 2 commits into
crusoecloud:mainfrom
alexbozhenko:drop_routes
Sep 15, 2026
Merged

chinmaybaikar merged 2 commits into
crusoecloud:mainfrom
alexbozhenko:drop_routes

Conversation

@alexbozhenko

@alexbozhenko alexbozhenko commented Sep 11, 2026 •

Copy link
Copy Markdown

Remove "route" client transport that was added in #103
since it requires disabling port security.

Tested against 4 gateways + 6 clients in Iceland and 4 gateways and 6 clients in US-east:

solutions-library # cd bandwidth-test/ansible && ansible-playbook -i ../../strongswan-ipsec/ansible/vpn-test-rig/inventory-bandwidth.ini site.yml
       "==========================================================================",
        "BANDWIDTH TEST - 6 flow(s) measured at the receiver",
        "==========================================================================",
        "  flow                                  Gbps   secs   retrans",
        "  000-cl-ice-1-to-cl-use2-1             1.78   30.3     48593",
        "  001-cl-ice-2-to-cl-use2-2             1.92   30.3     39394",
        "  002-cl-ice-3-to-cl-use2-3             2.25   30.2         0",
        "  003-cl-ice-4-to-cl-use2-4             1.59   30.3    100600",
        "  004-cl-ice-5-to-cl-use2-5             1.39   30.2     29968",
        "  005-cl-ice-6-to-cl-use2-6             0.78   30.3      2747",
        "--------------------------------------------------------------------------",
        "  TOTAL                                 9.71 Gbps across 6 flow(s)",
        "  mean per flow                         1.62 Gbps",
        "  total retransmits                  221,302"

Same but with -e bw_mode=mesh -e bw_duration=15:

        "==========================================================================",
        "BANDWIDTH TEST - 39 flow(s) measured at the receiver",
        "==========================================================================",
        "  flow                                  Gbps   secs   retrans",
        "  000-cl-ice-1-to-cl-use2-1             0.41   15.8     60402",
        "  001-cl-ice-1-to-cl-use2-2             0.64   15.6     29016",
        "  001-cl-ice-2-to-cl-use2-2             1.92   30.3     39394",
        "  002-cl-ice-1-to-cl-use2-3             0.52   15.4     10835",
        "  002-cl-ice-3-to-cl-use2-3             2.25   30.2         0",
        "  003-cl-ice-1-to-cl-use2-4             0.46   15.1     34340",
        "  003-cl-ice-4-to-cl-use2-4             1.59   30.3    100600",
        "  004-cl-ice-1-to-cl-use2-5             0.03   15.5        20",
        "  004-cl-ice-5-to-cl-use2-5             1.39   30.2     29968",
        "  005-cl-ice-1-to-cl-use2-6             1.02   15.1     32263",
        "  005-cl-ice-6-to-cl-use2-6             0.78   30.3      2747",
        "  006-cl-ice-2-to-cl-use2-1             0.65   15.8     58318",
        "  007-cl-ice-2-to-cl-use2-2             0.88   15.6     73971",
        "  008-cl-ice-2-to-cl-use2-3             0.89   15.1         0",
        "  009-cl-ice-2-to-cl-use2-4             0.86   15.5     33426",
        "  010-cl-ice-2-to-cl-use2-5             0.42   15.1         0",
        "  011-cl-ice-2-to-cl-use2-6             0.58   15.5      6174",
        "  012-cl-ice-3-to-cl-use2-1             1.02   15.9     52532",
        "  013-cl-ice-3-to-cl-use2-2             0.48   15.4     18712",
        "  014-cl-ice-3-to-cl-use2-3             0.37   15.6      2458",
        "  015-cl-ice-3-to-cl-use2-4             0.74   15.3     53569",
        "  016-cl-ice-3-to-cl-use2-5             1.07   15.4      7512",
        "  017-cl-ice-3-to-cl-use2-6             0.40   15.1     25246",
        "  018-cl-ice-4-to-cl-use2-1             0.79   15.4     34416",
        "  019-cl-ice-4-to-cl-use2-2             0.52   15.5     13266",
        "  020-cl-ice-4-to-cl-use2-3             0.49   15.2       212",
        "  021-cl-ice-4-to-cl-use2-4             0.67   15.4     60628",
        "  022-cl-ice-4-to-cl-use2-5             0.85   15.3     39704",
        "  023-cl-ice-4-to-cl-use2-6             0.30   15.1     11789",
        "  024-cl-ice-5-to-cl-use2-1             0.94   15.3     59581",
        "  025-cl-ice-5-to-cl-use2-2             0.97   15.3     60573",
        "  026-cl-ice-5-to-cl-use2-3             0.26   15.3      1287",
        "  027-cl-ice-5-to-cl-use2-4             1.29   15.4     80114",
        "  028-cl-ice-5-to-cl-use2-5             0.55   16.0         0",
        "  029-cl-ice-5-to-cl-use2-6             1.08   15.1     40780",
        "  031-cl-ice-6-to-cl-use2-2             0.43   15.6     22541",
        "  032-cl-ice-6-to-cl-use2-3             1.06   15.7     38597",
        "  033-cl-ice-6-to-cl-use2-4             0.51   15.5     40673",
        "  035-cl-ice-6-to-cl-use2-6             1.31   15.2     13656",
        "--------------------------------------------------------------------------",
        "  TOTAL                                31.41 Gbps across 39 flow(s)",
        "  mean per flow                         0.81 Gbps",
        "  total retransmits                 1,189,320",

@alexbozhenko
alexbozhenko marked this pull request as ready for review September 15, 2026 00:07
@chinmaybaikar
chinmaybaikar merged commit 2fc96fa into crusoecloud:main Sep 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants