IPSEC Tunnel Performance

[CiscoPurpleBelt]

I am basically looking for best ways to gauge the performance of an IPSEC VPN tunnel. What are some general key data to look at as well as any tools or techniques one can use? I am using ASA 4100 Firerpower and just IPSEC VPN not over GRE.

[Philip D'Ath]

I would use a tool like iperf3 to measure how much data you can push through the VPN.

https://iperf.fr/iperf-download.php

If you indicate the platform you are using (ASA, IOS, IOS-XE, etc), and the type of VPN (crypto map, VTI, GRE over IPSec, DMVPN, etc) then others may be able to suggest some show commands you can try out.

[CiscoPurpleBelt]

Hi sorry I am using ASA 4100 Firerpower and just IPSEC VPN not over GRE.

Spoiler

[Dennis Mink]

can you give some details. Are you looking at response times between peers? Response between remote and local interesting traffic? Thruput

[CiscoPurpleBelt]

Yes in addition to details you just stated, I am looking to learn what other things to look at or methods (applications, commands, etc.) to use to gauge performance.