ARTICLE: Encrypted Throughput on Minisforum MS-01 (21.3Gbps using ZeroTier)

[L0crian]

I know a lot of people have been looking at the MS-01 as a routing/firewall platform. I wanted to test how much I could scale a site-to-site VPN between 2 MS-01s. I was able to hit 21.3Gbps of encrypted throughput using a site-to-site routed solution. The article also contains some results for WireGuard, OpenVPN, and IPsec.

Chasing Performance in ZeroTier - VyOS on Minisforum - Level Zero Networking

I’ve done a lot of posts featuring ZeroTier in this Blog. There’s a lot of different overlay solutions that I could feature. There’s ZeroTier, Tailscale, NetBird, Nebula, TwinGate…just to name a few. The reason I feature ZeroTier so heavily is it is uniquely suited for site-to-site networking...

lev-0.com

 

[Fazio]

Great content!
Are you using VyOS on bare metal for specific reasons rather than as guest VM? Do you use some DNS container as well or just DNS forwarder?
Thank you!

 

[blunden]

Great content!
Are you using VyOS on bare metal for specific reasons rather than as guest VM? Do you use some DNS container as well or just DNS forwarder?
Thank you!

If the intention was to benchmark the hardware, using it bare metal makes more sense. Also unlike pfSense/OPNsense, VyOS doesn't require snapshots to be able to easily revert to the previous OS version and config in case things don't work.

Now there are other reasons why someone might want to run it in a VM, if you don't mind your internet going down when you tinker with your hypervisor.

 

[L0crian]

Great content!
Are you using VyOS on bare metal for specific reasons rather than as guest VM? Do you use some DNS container as well or just DNS forwarder?
Thank you!

blunden already gave a pretty good answer. For me, I generally won't virtualize VyOS unless I need to couple it with other NFV functions, and then I do it on a dedicated box for NFV. VyOS has container support, so it has a good amount of extensibility from that. The optimal use of resources is less important to me than uptime when it comes to networking.

For DNS, I just run AdGuard in a container, nothing special.