@robimarko Yes, I tested on the QSDK , OpenVPN is offloaded to NSS.
@quarky I just used two PCs to test again because one PC is a bottleneck for OpenVPN is single thread. I got about 383+478=861. It's excellent.
root@OpenWrt:/tmp/etc# cat run-two-iperf.sh
iperf -c 10.8.0.10 -t 30 &
iperf -c 10.8.0.14 -t 30
root@OpenWrt:/tmp/etc# ./run-two-iperf.sh
------------------------------------------------------------
Client connecting to 10.8.0.14, TCP port 5001
TCP window size: 45.0 KByte (default)
------------------------------------------------------------
[ 3] local 10.8.0.1 port 60504 connected with 10.8.0.14 port 5001
------------------------------------------------------------
Client connecting to 10.8.0.10, TCP port 5001
TCP window size: 45.0 KByte (default)
------------------------------------------------------------
[ 3] local 10.8.0.1 port 34274 connected with 10.8.0.10 port 5001
[ ID] Interval Transfer Bandwidth
[ 3] 0.0-30.0 sec 1.34 GBytes 383 Mbits/sec
[ ID] Interval Transfer Bandwidth
[ 3] 0.0-30.0 sec 1.67 GBytes 478 Mbits/sec
If I disabled NSS offload(remove "enable-dca" in the configuration file), it's just about 111Mbps.
root@OpenWrt:/tmp/etc# iperf -c 10.8.0.6 -t 30
------------------------------------------------------------
Client connecting to 10.8.0.6, TCP port 5001
TCP window size: 45.0 KByte (default)
------------------------------------------------------------
[ 3] local 10.8.0.1 port 37982 connected with 10.8.0.6 port 5001
[ ID] Interval Transfer Bandwidth
[ 3] 0.0-30.0 sec 397 MBytes 111 Mbits/sec
@quarky Do you think if it's possible to fetch IPQ807x OpenVPN NSS offload patches to IPQ806x?