Hi Surya,
This is not an easy question, since there are so many things to consider that I may miss some of them.
1- In case you are planning to use an ASA, check this to find the ideal throughput for you:
Compare Models
2- What type of traffic? TCP or UDP?
If TCP
Make sure you avoid fragmentation, adjust the MSS value if necessary.
If UDP
If fragmentation must happen, then set the DF bit to clear to allow it.
3- Make sure the clients always negotiate DTLS (which is by default).
As mentioned in the document above:
"Maximum throughput measured under ideal test conditions.
VPN throughput and sessions count depend on the ASA device configuration and VPN traffic patterns. These elements should be taken into consideration as part of your capacity planning."
Thanks.
Portu.
Please rate any post you find useful.
