Wireguard network with terrible bandwidth

Hi, I have two GL-AXT1800 and I'm facing really terrible bandwidth on my WireGuard network.
It is normal because of my latency? There is something to be done to improve it?
This is the test I did here in the client side:
image

And this is when I'm running the test on a virtual machine at the server site:
image

So seems to be that is not the ISP from the server side that is being limiting the bandwidth.

Someone have an idea?

Thank you.

Hi,

please check How to troubleshoot WireGuard for most common problems using WireGuard. Especially "The MTU Issue" and "UDP and its pitfalls"

For further troubleshooting we need more information about how your setup looks like, which ISP do you have, the connection speed on each end, etc. etc. See How to get support quickly

Ok thank you, I tried different MTU like 1420/1400/1380, all the same result.
I will try the OpenVpn to compare the results.

I tried OpenVpn in TCP mode, but it's worse, almost 500ms of latency and less than 1Mbps.
How low can I go with MTU to test?

One thing interesting is that yesterday, suddenly I got more than 10-15Mbps during some time. And this morning if around 7mbps. So seems that is changing along the day.

I check the cable connection on the server site via ssh, and the connecting is 1000Mbps, as well on the client side.

But I think is not related with the device itself, but with internet or configuration, I raised another WireGuard on the server side, and I got similar results.

I can try to change my ISP here in the client side going to some colleague to test, maybe this is the next step.

Depends. I would say 1200 is the lowest one that you can test (and that makes sense). So maybe start with 1280 and lower by 10 until you get better or worse results.

Which ISPs do you use on each side and what is the regular Up/Down there?

Server site: In Brazil I use Claro with 120/170Mbps (down/up).
Client site: In Switzerland I'm using a local provider Rii Seez Net, that give to me 170/50Mbps (down/up).

To change the MTU I need to change on both sides and turn on/off the server or I need to restart the device also on each change? Can I change only on cliente side?

Needs testing, can't tell for sure.
I would start with adjusting the client only and if this won't work, try to adjust both sides.

Another problem could be that the ISP interconnect between Brazil and Switzerland is just bad. Testing this is a bit more complicated and would involve speedtesting against each router without VPN.

ok, I will try.
I can ask someone to change the router in Brazil to another place with other ISP for testing.
Also, here in Switzerland I can move to a friend and test from there.

MTU did not solve, I tried the range, and a bit more up also.

Maybe it is related with the ISP.
I don't understand why I don't get symmetric speed at least on the VPN.
I'm getting 5Mbps/37Mbps on the client side, and my capabilities here would be of 170/50.
Also on the server side is 170/170.
There is an explanation why the download is worst on the WireGuard than the upload?

Mostly ISP-magic.

You could try to use a commercial VPN provider (and a nearby server) to check if the Upload is bad all the time or just if you try to connect to your server in Brazil.

yes, good point, do you recommend one that uses wireguard to be used?

I would recommend Mullvad.net - safe, secure, cheap.

Also a vpn is often shared, maybe you are just unfortunate and the vpn you use is too full with people downloading torrents or there is a ungoing attack to that vpn ip, or these cdn providers throttle, have you changed to a different vpn node which seem less populate like one from the middle of the list?

With mullvad i see sometimes the same things, but often will either restore on its own or changing helps, i also get alot of times greeted with captcha like i was using tor :upside_down_face:

Nothing much you can do with this type of phenomenon theres always bad apples using vpn for wrong reasons.

I run the test with Mullvad.
Connection to a server from Brazil is bad also, 6/30Mbps. Same latency, around 230ms.
Connecting to a server on Italy I got 33/46 with 17ms.

So I connected my mobile from Salt to the router as a repeater, and I got the same, 17/42 to Italy, 3/20 to Brazil. And 2/30Mbps when connecting to mine router VPN.

Seems that is related with the latency in the end, but does not explain why is asymmetric.

1 Like

Hi, on this case the VPN is mine, I have two routers GL-Inet.

This likely sound the isp doing something fancy here.

If they use DPI they can throttle the connection on purpose.

You might have to check for some ways to use shadowsocks or singbox but im not familar with these.

The biggest issue might be that Brazil has no direct connection to Europe*, as you can see here: Submarine Cable Map

So it's a bad place for VPN from Europe at all.

Portugal is Europe as well, but not like a big known exchange point.

1 Like

Shadowsocks or singbox can be installed on the GL-AXT1800?

Not officially supported, so it depends on how experienced you are with OpenWrt in general.

yes, maybe is a Geographic issue.
The problem is that my wife need to have an IP from Brazil to use some voip and websites.
Could be that with Starlink would be better?