10% speed with airvpn trying to figure out why

[Stack of computer parts 9]

I have lovely comcast cable 150mbps. Without AirVpn I am getting 105~mbps with airvpn I am getting 14-15mbps on all ports tcp or udp. With SSH I got 28mbps out of the tunnel and 10-11 mbps in the tunnel. I am using a netgear wndr3700v3 router with a motorolla sb6121 modem.

 

Some issues I have noted in diagnosing it was the wiring of the cable lines in my house was done by a true genius, I have removed all of the hardwork of the previous owner and now have one cable line going from outside my house to the modem using 2 splices that I am aware of, and a signal amp(drop amp?). I dont have COAX cable laying around to run a new one right now.

When I look at the network adapters on my computer the TAP adapter(which I assume is the vpn connection) lists itself as a 10mbps connection. My Ethernet controller is a 1000mbps unit. Is this a choke point?

Also, as my log shows, the buffer size is much much smaller then is recommended by the forums but I cant find where to adjust the buffer size. I doubt this is the extent of my issues but I tried combing the forums first to see if I could fix this myself.

 

I have comodo firewall setup the way the forum posts here would have you set it up to prevent leaks, and there is no difference in speed if it is off or on.

 

All help is greatly appreciated. No complaints about the service, privacy over speed keeps me happy, I just want to make things better.

 

Here is my log for today

Mon Aug 03 18:02:02 2015 OpenVPN 2.3.2 x86_64-w64-mingw32 [sSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [iPv6] built on Apr  8 2014
Mon Aug 03 18:02:02 2015 Control Channel Authentication: tls-auth using INLINE static key file
Mon Aug 03 18:02:02 2015 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 03 18:02:02 2015 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 03 18:02:02 2015 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Aug 03 18:02:02 2015 UDPv4 link local: [undef]
Mon Aug 03 18:02:02 2015 UDPv4 link remote: [AF_INET]199.241.147.34:443
Mon Aug 03 18:02:02 2015 TLS: Initial packet from [AF_INET]199.241.147.34:443, sid=2fe2fd7a f3aba6e1
Mon Aug 03 18:02:02 2015 VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org
Mon Aug 03 18:02:02 2015 Validating certificate key usage
Mon Aug 03 18:02:02 2015 ++ Certificate has key usage  00a0, expects 00a0
Mon Aug 03 18:02:02 2015 VERIFY KU OK
Mon Aug 03 18:02:02 2015 Validating certificate extended key usage
Mon Aug 03 18:02:02 2015 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Mon Aug 03 18:02:02 2015 VERIFY EKU OK
Mon Aug 03 18:02:02 2015 VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org
Mon Aug 03 18:02:03 2015 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Aug 03 18:02:03 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 03 18:02:03 2015 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Aug 03 18:02:03 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 03 18:02:03 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 4096 bit RSA
Mon Aug 03 18:02:03 2015 [server] Peer Connection Initiated with [AF_INET]199.241.147.34:443
Mon Aug 03 18:02:05 2015 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Mon Aug 03 18:02:06 2015 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.4.0.1,comp-lzo no,route-gateway 10.4.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.4.13.123 255.255.0.0'
Mon Aug 03 18:02:06 2015 OPTIONS IMPORT: timers and/or timeouts modified
Mon Aug 03 18:02:06 2015 OPTIONS IMPORT: LZO parms modified
Mon Aug 03 18:02:06 2015 OPTIONS IMPORT: --ifconfig/up options modified
Mon Aug 03 18:02:06 2015 OPTIONS IMPORT: route options modified
Mon Aug 03 18:02:06 2015 OPTIONS IMPORT: route-related options modified
Mon Aug 03 18:02:06 2015 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon Aug 03 18:02:06 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Aug 03 18:02:06 2015 open_tun, tt->ipv6=0
Mon Aug 03 18:02:06 2015 TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{D8C13E82-E33F-4A33-B71A-6362E2AC4307}.tap
Mon Aug 03 18:02:06 2015 TAP-Windows Driver Version 9.9
Mon Aug 03 18:02:06 2015 Set TAP-Windows TUN subnet mode network/local/netmask = 10.4.0.0/10.4.13.123/255.255.0.0 [sUCCEEDED]
Mon Aug 03 18:02:06 2015 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.4.13.123/255.255.0.0 on interface {D8C13E82-E33F-4A33-B71A-6362E2AC4307} [DHCP-serv: 10.4.255.254, lease-time: 31536000]
Mon Aug 03 18:02:06 2015 Successful ARP Flush on interface [16] {D8C13E82-E33F-4A33-B71A-6362E2AC4307}
Mon Aug 03 18:02:11 2015 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
Mon Aug 03 18:02:11 2015 C:\Windows\system32\route.exe ADD 199.241.147.34 MASK 255.255.255.255 192.168.1.1
Mon Aug 03 18:02:11 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Mon Aug 03 18:02:11 2015 Route addition via IPAPI succeeded [adaptive]
Mon Aug 03 18:02:11 2015 C:\Windows\system32\route.exe ADD 192.168.1.1 MASK 255.255.255.255 192.168.1.1 IF 10
Mon Aug 03 18:02:11 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
Mon Aug 03 18:02:11 2015 Route addition via IPAPI succeeded [adaptive]
Mon Aug 03 18:02:11 2015 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.4.0.1
Mon Aug 03 18:02:11 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Mon Aug 03 18:02:11 2015 Route addition via IPAPI succeeded [adaptive]
Mon Aug 03 18:02:11 2015 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.4.0.1
Mon Aug 03 18:02:11 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Mon Aug 03 18:02:11 2015 Route addition via IPAPI succeeded [adaptive]
Mon Aug 03 18:02:11 2015 Initialization Sequence Completed
 

[FromtheWalls 83]

If you download the experimental client the buffer size has been increased by default and there is also a new option in it to increase it further. You download it by clicking on the Enter tab on this site while logged in, then clicking on the Windows icon, then clicking on "other versions" and then clicking on "Experimental". If the speed doesn't increase, or doesn't increase enough after testing the experimental client you can increase the buffer size further by right clicking on the AirVPN icon in the system tray, and then click on Preferences -> Advanced. I use the experimental client and it has been completely stable so I wouldn't worry about installing it.

 

I have no idea why the TAP driver would list itself as a 10Mbps connection since the duplex settings should be the same regardless of you using your regular connection or VPN connection, but your buffer setting is extremely low for such a fast line so I would definitely try my suggestion first.

[go558a83nk 364]

I say it in a lot of posts - try testing speed elsewhere.   https://www.dslreports.com/speedtest  is a good place to test

 

your buffers are the first place to start in fixing any problem as FromtheWalls said.

[Stack of computer parts 9]

I had been using several test sites, I had not used dsl repors site. That reported similar speeds and pings as the other sites with the vpn up. I will try and modify the buffers with the other client.

[Stack of computer parts 9]

With the experimental client, max buffer size, and lowest ping server available I did see an improvement in some tests.

 

The mystery TAP connection is now a 100mbps connection after the drivers updated. I still wonder if this affects the connection speeds at all.

 

comcasts speed test showed 58mbps down 11 up.

airvpns speed test showed 30mbps down and 10 up

dslreports 45 down 10 up

speedtest.net is 33 down 10 up

 

So there is still a significant loss in performance from my 100mbps baseline, which in itself is a lower amount then the 150 they claim they give me. I will play around with ports and protocols tomorrow, I like this new client, I had been using an older configuration when I started using air and never really thought to tweak it.

 

How much of a loss is a vpn under ideal conditions? 25 percent? more?

[eyes878 43]

The amount of speed lost from using a tunnel in an ideal world is 10%. Expect 75-90% of your original speed once you have everything configured appropriately.

[dj77 6]

Wheres your Location and which vpn Server Location you Try?

[Stack of computer parts 9]

I am in Seattle I usually pick the Fremont or LA servers based on them being physically close having low ping. This AirVpn experimental client keeps picking Toronto which is much further away but gets similar ping. Either way, the results are similar. Alehna? got me the best results so far on port 443 UDP with the comcast speed test of about 88mbps but the others I have been using posted similar results to above.

 

Is there anything I should look for? or log?