# MT3000 4.11.0 Beta WireGuard WiFi issues **URL:** \ **Category:** Router\ **Created:** [September 27, 2026, 9:00am UTC](https://forum.gl-inet.com/t/mt3000-4-11-0-beta-wireguard-wifi-issues/71614 "2026-09-27T09:00:05Z")\ **Posts on this page:** 15\ **Page:** 2
**Author:** ![will.qiu](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/w/b38774/32.png) [@will.qiu](https://forum.gl-inet.com/u/will.qiu)\ **Post date:** [September 29, 2026, 6:20am UTC](https://forum.gl-inet.com/t/mt3000-4-11-0-beta-wireguard-wifi-issues/71614/22 "2026-09-29T06:20:02Z")
Hi, Thank you for conducting further tests. This does seem somewhat peculiar. Could you please follow the guide and share your device with us via GoodCloud so we can check it remotely? > **[Technical Support via GoodCloud - GL.iNet Router Docs 4](https://docs.gl-inet.com/router/en/4/tutorials/technical_support_via_goodcloud/)** > > Documentation for GL.iNet Router Productions Kindly note to send us the MAC address and the router password via private message so we can access it ![image](https://forum-static.gl-inet.com/original/3X/1/0/10705d4a12191adc9fba880b69bfea7853d44efe.png) ---
**Author:** ![Slighting](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/f1d935/32.png) [@Slighting](https://forum.gl-inet.com/u/Slighting)\ **Post date:** [September 29, 2026, 9:56am UTC](https://forum.gl-inet.com/t/mt3000-4-11-0-beta-wireguard-wifi-issues/71614/23 "2026-09-29T09:56:23Z")
Hi Will, thanks I've sent the details. I've removed my home network VPN config for privacy but left you a protonvpn tunnel which exhibits the same behaviour / throughput. MTU has been set back to default of 1420 and network acceleration back on. Currently my clients are sharing the same 5g radio as splitting over the two radios made minimal difference either. Let me know how you get on. ---
**Author:** ![will.qiu](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/w/b38774/32.png) [@will.qiu](https://forum.gl-inet.com/u/will.qiu)\ **Post date:** [September 29, 2026, 11:44am UTC](https://forum.gl-inet.com/t/mt3000-4-11-0-beta-wireguard-wifi-issues/71614/24 "2026-09-29T11:44:32Z")
Hi, Thank you for providing remote access. We performed an initial check and found the following: 1. The path MTU is `1492`. Considering the WireGuard MTU and the previous lower-MTU tests, MTU is unlikely to be the cause. ![image](https://forum-static.gl-inet.com/original/3X/9/c/9c986094518b76de48b4bf17e6db77fea82e7813.png) 2. An OpenVPN UDP profile in the same geographic region can achieve much higher speeds on this connection—over `80 Mbps` download—so this does not appear to be a general upstream UDP limitation. 3. During the speed tests, both CPU cores remained at only around 30% utilization, so CPU saturation is not the cause. 4. A direct `iperf3` test to a server we control reaches over `80 Mbps`, while the same test through the WireGuard tunnel reaches only around `13 Mbps`. 5. We could not reproduce the issue locally using another MT3000 running v4.11.0 release, the same WireGuard profile, and a 5 GHz repeater connection. This suggests that the issue may depend on this device’s configuration or its current network environment, rather than being a general firmware issue. Could you please help us with two further tests? 1. Connect the MT3000 to another network, such as your phone’s hotspot, and check whether the issue still occurs. 2. [Export a configuration backup](https://forum.gl-inet.com/t/how-to-export-import-backup-configuration-files-via-luci/68190), [factory-reset](https://docs.gl-inet.com/router/en/4/faq/repair_network_or_reset_firmware/) the MT3000, and configure only the Internet connection and WireGuard profile. Please test the speed before restoring the backup. ---
**Author:** ![Slighting](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/f1d935/32.png) [@Slighting](https://forum.gl-inet.com/u/Slighting)\ **Post date:** [September 29, 2026, 2:10pm UTC](https://forum.gl-inet.com/t/mt3000-4-11-0-beta-wireguard-wifi-issues/71614/26 "2026-09-29T14:10:41Z")
Totally bizarre and unexpected results. I will not do reset config as I already did that 3 times when trying different firmware’s (I did not use keep settings). However I connected Beryl repeater mode to my 5g cellular hotspot. I immediately got 57mbps through WireGuard tunnel. After disconnecting and going back into hotel WiFi I am now getting same speed, approx 57mbps instead of 10mbps. What could be possible reason for this? Are you able to review logs and do more tests, I have left the same login and good cloud lease ---
**Author:** ![will.qiu](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/w/b38774/32.png) [@will.qiu](https://forum.gl-inet.com/u/will.qiu)\ **Post date:** [September 30, 2026, 3:32am UTC](https://forum.gl-inet.com/t/mt3000-4-11-0-beta-wireguard-wifi-issues/71614/27 "2026-09-30T03:32:32Z")
We have accessed the router remotely and reviewed the logs, but unfortunately, we did not find any information that could help identify the cause. Since the issue is no longer occurring, we may not be able to investigate it further at this time. If it happens again, please let us know. We’ll be happy to continue investigating. ---
**Author:** ![Slighting](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/f1d935/32.png) [@Slighting](https://forum.gl-inet.com/u/Slighting)\ **Post date:** [September 30, 2026, 6:00am UTC](https://forum.gl-inet.com/t/mt3000-4-11-0-beta-wireguard-wifi-issues/71614/28 "2026-09-30T06:00:32Z")
Hi FYI the issue has returned overnight and I am now getting approx 7mbps on wireguard tunnel ---
**Author:** ![Slighting](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/f1d935/32.png) [@Slighting](https://forum.gl-inet.com/u/Slighting)\ **Post date:** [September 30, 2026, 6:16am UTC](https://forum.gl-inet.com/t/mt3000-4-11-0-beta-wireguard-wifi-issues/71614/29 "2026-09-30T06:16:49Z")
Note, for timestamps, I just reconnected repeater to my cellular hotspot the back to hotel WiFi and wireguard tunnel throughput has returned to approx 50mbps again ---
**Author:** ![will.qiu](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/w/b38774/32.png) [@will.qiu](https://forum.gl-inet.com/u/will.qiu)\ **Post date:** [September 30, 2026, 7:41am UTC](https://forum.gl-inet.com/t/mt3000-4-11-0-beta-wireguard-wifi-issues/71614/30 "2026-09-30T07:41:00Z")
This is a little unexpected, as the connection was working normally when we ran speed tests during our earlier remote log review. If the issue occurs again, please let us know and, if practical, leave the router and network environment unchanged. This will give our R&D team the best opportunity to examine the issue while it is active. Our R&D availability will be limited during the national holiday over the coming week, so a deeper investigation may need to wait until October 8. We appreciate your patience and will continue checking this with you as soon as the team is available. ---
**Author:** ![Slighting](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/f1d935/32.png) [@Slighting](https://forum.gl-inet.com/u/Slighting)\ **Post date:** [September 30, 2026, 8:56am UTC](https://forum.gl-inet.com/t/mt3000-4-11-0-beta-wireguard-wifi-issues/71614/31 "2026-09-30T08:56:59Z")
Thanks will unfortunately I return home tomorrow but if it occurs again today I'll drop you a note ---
**Author:** ![Slighting](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/f1d935/32.png) [@Slighting](https://forum.gl-inet.com/u/Slighting)\ **Post date:** [October 1, 2026, 6:18am UTC](https://forum.gl-inet.com/t/mt3000-4-11-0-beta-wireguard-wifi-issues/71614/32 "2026-10-01T06:18:19Z")
Will the issue has returned again overnight I'm back to 7mbps. I leave in a couple hours any chance you can take another look before I turn off the router and depart ---
**Author:** ![will.qiu](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/w/b38774/32.png) [@will.qiu](https://forum.gl-inet.com/u/will.qiu)\ **Post date:** [October 1, 2026, 7:49am UTC](https://forum.gl-inet.com/t/mt3000-4-11-0-beta-wireguard-wifi-issues/71614/33 "2026-10-01T07:49:22Z")
Hi, Thank you for the update. After analyzing the packet captures, we found that the downstream WireGuard traffic coming from the upstream Wi-Fi network is marked with DSCP `0x80` / `CS4`. ![image](https://forum-static.gl-inet.com/original/3X/1/4/142e1ed010ead5c444624b0ec9e1883f3849df8d.png) In comparison, normal iPerf3 traffic and SpeedTest downstream traffic going directly through the WAN interface are marked with the DSCP `0x00` / `CS0`. ![image](https://forum-static.gl-inet.com/original/3X/a/d/adf0f00edc568929f1af6c9f60d90c1581d19b19.png) Therefore, we suspect that the hotel Wi-Fi may start identifying WireGuard traffic after some time and rate-limit it by applying a specific DSCP marking. If possible, please switch Wi-Fi networks and then reconnect to the hotel Wi-Fi. Once the WireGuard speed is back to normal, please run the following command to check whether the WireGuard traffic is then marked with the normal DSCP `0x00` / `CS0` value: ```sh # 2.4GHz tcpdump -ni apcli0 -vv host # 5GHz tcpdump -ni apclix0 -vv host ``` ---
**Author:** ![Slighting](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/f1d935/32.png) [@Slighting](https://forum.gl-inet.com/u/Slighting)\ **Post date:** [October 1, 2026, 9:16am UTC](https://forum.gl-inet.com/t/mt3000-4-11-0-beta-wireguard-wifi-issues/71614/34 "2026-10-01T09:16:00Z")
Hi I switched and switched back, throughout successfully returned. Managed to ssh in to router using termius, tcpdump starts listening but then never returns query on 2.4ghz On 5ghz it returns the traffic, largely all 0x0 and some 0x2 ---
**Author:** ![AI\_bot](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/ecccb3/32.png) [@AI\_bot](https://forum.gl-inet.com/u/AI_bot)\ **Post date:** [October 1, 2026, 9:16am UTC](https://forum.gl-inet.com/t/mt3000-4-11-0-beta-wireguard-wifi-issues/71614/35 "2026-10-01T09:16:45Z")
Because the hotel uplink is currently using 5 GHz, seeing no matching packets on `apcli0` (the 2.4 GHz interface) is expected. On `apclix0`, `0x02` means **DSCP 0 / CS0** with the two low bits used for ECN; it is not the earlier CS4 marking. Thus, the current capture is largely normal and provides a useful comparison with the `0x80 / CS4` marking observed while throughput was limited. Please keep the capture available for @will.qiu. If the slowdown returns before departure, capturing the same traffic without first switching networks would provide the direct before/after comparison. > **This reply was generated by AI. Please verify its accuracy.** > > GL.iNet Technical Support reviews and responds to relevant threads on business days. Please allow time for a staff response. ---
**Author:** ![elorimer](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/e/b77776/32.png) [@elorimer](https://forum.gl-inet.com/u/elorimer)\ **Post date:** [October 1, 2026, 10:52am UTC](https://forum.gl-inet.com/t/mt3000-4-11-0-beta-wireguard-wifi-issues/71614/36 "2026-10-01T10:52:54Z")
@Slighting You are doing all of us a service tracking this down! ---
**Author:** ![will.qiu](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/w/b38774/32.png) [@will.qiu](https://forum.gl-inet.com/u/will.qiu)\ **Post date:** [October 1, 2026, 2:52pm UTC](https://forum.gl-inet.com/t/mt3000-4-11-0-beta-wireguard-wifi-issues/71614/37 "2026-10-01T14:52:20Z")
Thank you for the update. Based on this, we can basically confirm that the issue is related to the hotel Wi-Fi — after some time, it appears to identify WireGuard traffic and apply rate limiting to it. [Previous page](https://forum.gl-inet.com/t/mt3000-4-11-0-beta-wireguard-wifi-issues/71614.md?page=1)