Technical Tip: How to increase the SSL VPN tunnel mode bandwidth for small model (multi SSL VPN client)

[tonylin1]

Description	This article describes how to increase the SSL-VPN tunnel mode bandwidth for small model (multi SSL-VPN client). Topology: iperf server <--> FortiGate (SSL-VPN) <--> sslvpn client (iperf client) When SSL VPN tunnel mode is set up, the iPerf testing result of FortiGate-61E is around 80Mbps.   Even if two SSL-VPN client are setup to generate two SSL-VPN tunnel traffic, the total bandwidth is around 90Mbps.      # diag sys top shows only one sslvpnd process serving the SSL-VPN tunnel traffic.
Scope	Version 6.4.9.
Solution	Increase the sslvpnd worker account: config system global        set sslvpn-max-worker-count 2 end After the settings, when two SSL VPN client are setup to generate two SSL VPN tunnel traffic, the total bandwidth is around 150Mbps.   There are two sslvpnd processes serving the SSL-VPN tunnel traffic and increasing the bandwidth. Related articles: Troubleshooting Tip: SSL VPN Troubleshooting Technical Tip: FortiGate SSL VPN best practices guide Technical Tip: SSL VPN with external DHCP Server Technical Tip: Reasons for the 'iprope_in_check() failed' error in SSL VPN Troubleshooting Tip: Error 'SSL-VPN slow file transfer issue' Troubleshooting Tip: Checking maximum number of SSL VPN users using ‘diagnose vpn ssl statistics’ Technical Tip: FortiGate IPSec VPN Resource List Technical Tip: FortiGate Resource Lists