Wireguard VPN extremely slow (<1mb) on GL-inet travel routers

Technical Support for Routers VPN, DNS, Leaks
1

I have been through all of the documentation on the travel routers. This used to work a few months ago, but stopped working recently.

I've tried with both the Beryl and the Slate. I have tried connecting with multiple different laptops.

The AX1800 says Wireguard Server is running.

I've tried using a Cat6 cable from the travel router to the laptops.

The home Wifi gets 700mbps download. The travel routers can get internet fine, but when I connect them Wireguard VPN client, it drops to less than 1mbps. OpenVPN doesn't seem to work at all.

2

Did you try in the phone or laptop with the same profile, to directly connect the AX1800 WG server?

3

I get the same problem if I try to use Wireguard on my phone or laptop

4

Which country are you in (your ISP) and which VPN provider do you use?

5

Home ISP is AT&T in the USA. It's Wireguard VPN.

6

Try to reduce the WireGuard MTU until you get a better result. Maybe start with 1380. Reduce by 10 each try.

7

Just to clarify, you mean lowering the MTU setting in the Wireguard configuration file that's uploaded to the Wireguard client?

8

It depends on where the bottleneck is. You should try to lower MTU on both sides.
Starting by decreasing the MTU on the travel router that acts as a client, see here

1 Like
9

On the wireguard client, pls try changing mtu settings

image
image1342×887 54.2 KB

For "Openvpn does not work", can you check if you have set up all the port forward correctly?

Also try change tcp/udp and the port (from 1194 to others e.g. 443) to check.

10

The Wireguard client seems to be having trouble connecting now. I've tried different MTUs such as 1400, 1380, and all the way down to 1280. There was one time it connected after I reset the Wireguard server, but then when I went back it couldnt connect anymore. Now when I turn off and on the Wireguard server again, the client still cant seem to connect.

Would you recommend I try changing the port of the Wireguard server or client? I know the default is 51820.

On the AT&T Modem, I added this under NAT/GAMING Hosted Applications: Wireguard VPN UDP: 51820 GL-AX1800. I also have the following settings:

Firewall Status:
|Packet Filter|On|
|IP Passthrough|Off|
|NAT Default Server|Off|
|Firewall Advanced|On|

11

I was able to get the Wireguard VPN client to run again. I kept trying different MTU. I seem to be able to get ok download (100mbps) when I change MTU down to 1280. However, the upload is very slow, only 2mbps. What should I do ?

12

Can't really help with that, I am sorry.
Maybe @bruce has additional idea about it.

13

Where is the server and where is the client?

14

They are both in the same city.

15

Maybe you can check if you can make openvpn work as well.

Openvpn has tcp which has less restrictions.

1 Like
16

Will do. I thought Wireguard was faster though?

I tested again yesterday and internet did not work at all through travel router even with Wireguard client off. I used GoogleFi as hotspot for the Slate router. I was able to use Google Fi on my phone but it wouldn't work on the Slate. It worked the day prior though. Very strange.

17

OpenVPN is more resistant to UDP problems, that's why it works better sometimes.

18

I tried to connect today and when I went into the admin panel and selected wifi for the repeater, it said connected. But I couldn't load any web pages. I didn't even have VPN on. Just the travel router. I tried a 5G GoogleFi hotspot as well as regular coffee shop wifi. I tried using Wi-Fi on laptop and also tried plugging in Ethernet from the travel router to the laptop. Couldn't load any web pages.

This happened with both the Beryl and the Slate.

Why would this be?

19

Check this Repeater redesign from 4.6.2 and feedback

It just looks like there is a captive portal page that should pop up.

In the latest firmware you should have this automatically enabled.
In older firmware you should take care of vpn, encrypted dns etc.

You may also need to access non https website, e.g. http://neverssl.com

20

Make sure that the VPN killswitch is turned off, if you are used to enable it.

1 Like