Skip to main content
evgenymornex
New Member
December 10, 2020
Question

Fortigate VM ipsec network speed slow issue

  • December 10, 2020
  • 0 replies
  • 1925 views

Hello everyone,

We have an interesting “challenge” with Fortigate VM ipsec internet speed.

We have VPN Site to Site between Fortigate VM 1 in privet cloud A and Fortigate VM 2 in privet cloud B.

Also, we have windows server 2019 VMs are connected to Fortigate VM 1 in cloud A, they are going to internet via VPN tunnel S2S to Fortigate VM 2 in cloud B.

We have ISP line 1 Gb speed on both clouds.

The issue is that internet speed via VPN tunnel is getting maximum 450 mbps.

We tested a speed test on both Fortigate VMs via WAN port (not via VPN tunnel), and we got speed 1Gb Full-Duplex.

One thing we paid attention that when the speed got to 450 mbps via VPN tunnel, one of CPU core got to 90% usage on Fortigate VM. It looks like Fortigate is using only one core for VPN traffic \ usual traffic (I am not sure).

 

Fortigate VM 1 - CPU 2 cores, RAM 4G

Fortigate VM 2 - CPU 4 cores, RAM 10G

 

Do you have any idea?

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.