Wireguard slow between routers; quicker using PC client

Routers VPN, DNS, Leaks
1

When I connect a wireguard client on a GL-X3000 to the wireguard server on a GL-AR300M, I get about 25 % of the download speed I get if a use the PC WIN Wireguard client on my PC, which is connected to the GL-X3000, to connect the wireguard server on the same GL-AR300M.

It makes the router to router connection unworkable. Is there a setting I have missed or is the PC client implimentation substantially faster?

2

Hello,

  1. What is the DL/UL speed of PC WireGuard client connected to the AR300M WG server?

  2. What is the DL/UL speed of X3000 WG client connecting to AR300M WG server?

  3. On the above comparison test, are PC and X3000 the same Internet source? How to test the network speed?

4
  1. PC DL 23.05 Mbps UL 7.13 Mbps
  2. X3000 DL 5.24 Mbps UL 6.68 Mbps
  3. Same intenet source: the X3000 connected via SIM card. The netowrk speed is tested from the PC using Speedtest by Ookla.

I have just rerun the tests:

  1. PC UL 0.34 Mpbs UL 0.23 Mbps
  2. X3000 DL 0.24 mps UL 0.19 Mbps

I run one test, change the VPN clients, then run the other. Obviously the overall speed is dependent on the quality of the GSM connection. It appears to me that the DL speed is consistently significantly lower using the X3000 wireguard client, compared to the PC wireguard client.

5

Is it possible that the speed of the cellular network is limited?

You can try changing to another Internet source, such as repeater to connect to other WiFi, or WAN cable wired, etc., and do a comparison test.

6

With respect that makes no sense at all. The connection is at all times through the GSM connection. The speed of the GSM connection is roughly 100 Mbps. The difference is in the GliNet wireguard client and the PC wireguard client.

7

There could be a few scenarios:

  • The sim provider could potentially lower traffic if it is unknown traffic (meaning its not traffic what can be classified by their filter) or detected upon recently.
  • sometimes oaklas speedtest cannot be trusted, since you use SIM, you may appear behind a CGNAT which could be blacklisted, throthled, which happens to public vpns too, edit: nvm about this one, i doubt this is the issue because you vpn to home, speedtest will not be aware of this.

Now I'm not so sure about this:

So I understand you remotely tested the GL-X3000 to the GL-AR300M ?

How did you proceed the testing on that pc?, was that locally where the GL-AR300M resides or also remotely?

To be honest the GL-AR300M is a bottleneck compared to the GL-X3000, so the archived speeds as advertised may are not possible for the GL-X3000 remotely, on the product page of the AR300M i read it goes up to 50mbps.

Then you also have overhead + latency remotely which can result in very low speed, it is a corner case but if this is the situation then it is as expected.

Optionally:

You can try cranking up the mtu with 20 each time, but be aware that alot of isps also sim isps don't allow higher mtu, the higher the mtu the faster the internet can be, but the hardware also need to be able to handle it :sweat_smile:, alot of isps have a max of 1500 for sim providers it may be lower, aslong wireguard doesn't exceed wan mtu.

ipv4 headers of wireguard gives 60 bytes on overhead and ipv6 80, so if the max mtu of wan was 1500 you substract it.

9

I am connected for all test via the GL-X3000 i.e. GSN connection. I do not change the SIM/network.

I connect to the Wireguard server on the GL-AR300M which is connected to the Internet via fibre/Ethernet.

I connect via (a) a Wirguard client on the GL-X3000; and (b) a wireguard client on the PC (The Wirguard client on the GL-X3000 is not active)
I run the speedtest for both on the PC via Ookla in Chrome.
The only change between the 2 tests is the Wireguard client used.

The AR300M is not the bottleneck, in the sense that when connected to the PC client it is faster than when connected to the GL-X3000 client.

10

Hi,

Did you mind share the VPN profile (export form AR300M VPN server) with us to test in my local router and PC?

11

Are you asking me to share the wireguard client profile from the AR300M?
As you can imagine I'm not going to post it on the Forum. If you send me an email, or an upload link, I will let GLiNet support have a copy

12

Just PM @bruce and attach it that way. Click on his name. Also, remove your key(s), they should have no need for that.