speedtest comparison

[Flx 76]

2 hours ago, Shiver Me Whiskers said:

Here's another one, even faster:

I am impressed Congratz!!!
Out of sheer curiosity....What is your ISP line provided speed?

[Staff 10018]

@Shiver Me Whiskers

Hello!

The previous record did not last long, apparently. If you don't mind, which connection protocol, cipher and port did you pick?

Kind regards
 

[dr_kristau 5]

5 hours ago, Shiver Me Whiskers said:

@Staff Time to bring those 10gbit servers 😉
1.0gbit is not enough anymore... hehe !

Definitely! Coincidentally, in a completely different context, I've just had to check the connection speed from a DitigalOcean droplet in Frankfurt to a server in Barcelona (~700mi, ~1125km):



I nearly fell off my chair. Of course this is without any kind of encryption, but you're not going to get anywhere near these kind of figures on 1.0Gbps servers!

[Shiver Me Whiskers 15]

6 hours ago, Staff said:

@Shiver Me Whiskers

Hello!

The previous record did not last long, apparently. If you don't mind, which connection protocol, cipher and port did you pick?

Kind regards
 

Hello, I'm a bit of a noob when it comes to these things

I downloaded Eddie 2.19.5, installed it on Windows 10, connected, and started downloading...
It used "wintun", and I think connected via AES-256-GCM

. 2020.11.19 16:28:18 - Eddie version: 2.19.5 / windows_x64, System: Windows, Name: Windows 10 Enterprise, Version: Microsoft Windows NT 10.0.19042.0, Mono/.Net: v4.0.30319
. 2020.11.19 16:28:19 - Tun Driver - 0901: 9.24.3; wintun: 0.8
. 2020.11.19 16:28:19 - OpenVPN - Version: 2.5.0 - OpenSSL 1.1.1h  22 Sep 2020, LZO 2.10 (C:\Program Files\AirVPN\openvpn.exe)
. 2020.11.19 16:28:19 - SSH - Version: plink 0.73
. 2020.11.19 16:28:19 -     Build platform: 64-bit x86 Windows
. 2020.11.19 16:28:19 -     Compiler: clang 7.0.0 (tags/RELEASE_700/final), emulating Visual Studio 2013 (12.0), _MSC_VER=1800
. 2020.11.19 16:28:19 -     Source commit: 745ed3ad3beaf52fc623827e770b3a068b238dd5 (C:\Program Files\AirVPN\plink.exe)
. 2020.11.19 16:28:19 - SSL - Version: stunnel 5.56 (C:\Program Files\AirVPN\stunnel.exe)
I 2020.11.19 16:28:20 - Ready
. 2020.11.19 16:28:20 - Collect information about AirVPN completed
I 2020.11.19 16:28:22 - Session starting.
I 2020.11.19 16:28:22 - Checking authorization ...
! 2020.11.19 16:28:22 - Connecting to Tarazed (Netherlands, Alblasserdam)
. 2020.11.19 16:28:23 - OpenVPN > OpenVPN 2.5.0 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Oct 28 2020
. 2020.11.19 16:28:23 - OpenVPN > Windows version 10.0 (Windows 10 or greater) 64bit
. 2020.11.19 16:28:23 - OpenVPN > library versions: OpenSSL 1.1.1h  22 Sep 2020, LZO 2.10
. 2020.11.19 16:28:23 - OpenVPN > Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
. 2020.11.19 16:28:23 - OpenVPN > Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
. 2020.11.19 16:28:23 - OpenVPN > Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
. 2020.11.19 16:28:23 - OpenVPN > Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
. 2020.11.19 16:28:23 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]213.152.161.135:443
. 2020.11.19 16:28:23 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144]
. 2020.11.19 16:28:23 - OpenVPN > UDP link local: (not bound)
. 2020.11.19 16:28:23 - OpenVPN > UDP link remote: [AF_INET]213.152.161.135:443
. 2020.11.19 16:28:23 - OpenVPN > TLS: Initial packet from [AF_INET]213.152.161.135:443, sid=f7f5cc8d 3b14c77f
. 2020.11.19 16:28:23 - OpenVPN > VERIFY KU OK
. 2020.11.19 16:28:23 - OpenVPN > Validating certificate extended key usage
. 2020.11.19 16:28:23 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
. 2020.11.19 16:28:23 - OpenVPN > VERIFY EKU OK
. 2020.11.19 16:28:23 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Tarazed, emailAddress=info@airvpn.org
. 2020.11.19 16:28:23 - OpenVPN > Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, 4096 bit RSA
. 2020.11.19 16:28:23 - OpenVPN > [Tarazed] Peer Connection Initiated with [AF_INET]213.152.161.135:443
...
. 2020.11.19 16:28:23 - OpenVPN > Data Channel: using negotiated cipher 'AES-256-GCM'
. 2020.11.19 16:28:23 - OpenVPN > Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
. 2020.11.19 16:28:23 - OpenVPN > Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
...
. 2020.11.19 16:28:23 - OpenVPN > open_tun
. 2020.11.19 16:28:23 - OpenVPN > wintun device [WinTUN] opened
...
! 2020.11.19 16:28:31 - Connected.
. 2020.11.19 16:28:31 - OpenVPN > Initialization Sequence Completed

(removed some unimportant stuff especially at the end to keep the log to keep it short, I have over 10 NIC devices due to use of VMs, makes the log huge)

ISP is KPN (Netherlands), fiber, so I am pretty close to your VPN servers, 1 gbit plan ( 1000/500 )

Computer config: AMD Ryzen 7 3700X, DDR4-3733 CL16, 2.5 gbits LAN all the way to the KPN Router (that came with the plan, didn't use any fancy expensive router)
I think the AMD CPU has very good AES acceleration, because during those transfer I barely noticed any CPU utilization at all... like 20% on one single core ?
 

[Staff 10018]

28 minutes ago, Shiver Me Whiskers said:

Computer config: AMD Ryzen 7 3700X, DDR4-3733 CL16, 2.5 gbits LAN all the way to the KPN Router (that came with the plan, didn't use any fancy expensive router)
I think the AMD CPU has very good AES acceleration, because during those transfer I barely noticed any CPU utilization at all... like 20% on one single core ?

Hello!

Yes, of course, it's plausible. OpenVPN runs in a single core so you will see load on one core only AES New Instructions are nowadays well implemented in all desktop CPUs and SSL libraries such as OpenSSL are built to fully use them whenever possible.

Quote

I think it's safe to say that this is the fastest commercial VPN in the world right now 😉

We hope so! 😎

On the server side we mitigate OpenVPN multi-threading lack by running multiple daemons. Each daemon "runs in a core" and our servers balance with a round robin algorithm the incoming client connections. Therefore a server can use all the cores.. Although each client connects to a single daemon (except in special configurations such as https://nguvu.org/pfsense/pfsense-multi-vpn-wan/ ), of course, load balancing provides remarkable "distributed benefits" anyway.

Kind regards

[User of AirVPN 47]

I think I am the new record holder 😀 730Mbps on Sharatan server! Connecting to VPN server on Ubuntu 20.04 with UDP 443 and cipher AES-256-GCM (tested on a 1Gbps up and down fiber line) Surprises me that these speeds are possible on OpenVPN

[Staff 10018]

@User of AirVPN

Congratulations! We confirm (and anyone connecting to the server monitor can do the same) that today we have had a 1.4 Gbit/s peak on Sharatan, so you were devouring most of the bandwidth.
 

Quote

Connecting to VPN server on Ubuntu 20.04 with UDP 443 and cipher AES-256-GCM (tested on a 1Gbps up and down fiber line) Surprises me that these speeds are possible on OpenVPN

Can you also state the CPU, if you don't mind?

Kind regards
 

[User of AirVPN 47]

9 hours ago, Staff said:

@User of AirVPN

Congratulations! We confirm (and anyone connecting to the server monitor can do the same) that today we have had a 1.4 Gbit/s peak on Sharatan, so you were devouring most of the bandwidth.
 
Can you also state the CPU, if you don't mind?

Kind regards
 

Sure, the CPU is an Intel i7-7700HQ

[SomewhatSane 6]

Wow. Those speeds are fantastic! Good job!

I've really been trying to get higher speeds but I haven't been able to get above 500mbps on Windows 10 with Wintun (best case scenario). I've got a 1gbit line.

Does anyone know any settings I could try to get above that? I'm currently using UDP on port 443 with AES-256-GCM cipher.

Thanks in advance.

[Staff 10018]

@SomewhatSane

Hello!

Try to enlarge buffers to 1 MB or even 2 MB. Directives to set OpenVPN buffer size:
rcvbuf x
sndbuf y

where x and y are in bytes.

For example, for 1 MB buffers:

rcvbuf 1232896
sndbuf 1232896

It must also be said that, in order to beat 500 Mbit/s, you need some luck, i.e. you need finding a server that in some moment has a very low bandwidth requirement by other clients.

Also, if you have an AES-NI supporting system but a less powerful CPU, try AES-128-GCM.

Kind regards
 

[AirVPN-User-1337 0]

How are you people getting that speed? I'm on a fiber KPN 500/500 and I can't get the speed higher than 130Mbps with Eddie on Windows 10 Pro.
I have changed the protocol and I have added the mssfix in the openvpn global thingy. If someone can help me, please

[SomewhatSane 6]

@AirVPN-User-1337

Please make sure that you are using the new Wintun driver that is present with OpenVPN 2.5. In Eddie, I think you can enable the use of it by selecting it in the Advanced section of the Settings window.

[pfolk 6]

Hi,

I have latest Eddie 20.19.7 installed on two machines - exact same Eddie settings, both hardwired on a Fiber line 1000/1000:

(1) Win 10, i5 @ 2.67 GHz - max dl speed 20-25 MB/s
(2) Win 10, i7 @ 2.80 GHz - max dl speed 40-50 MB/s

note: all dl speeds are real downloads, not speedtest which can be very unreliable.

Is it safe to assume that the slower speed on the i5 machine is due to the slower CPU ?
Anything I can do to improve dl speed, like changing AES encryption ?

already increased buffer in the OpenVPN directives:

rcvbuf 1232896
sndbuf 1232896

Thanks.

[Staff 10018]

@pfolk

Hello!

Do you already use wintun driver, especially on the i5 machine? If not, try it, as the TAP-Windows driver is infamous to cause bottlenecks on some (but not all) Windows systems. The performance on the i7 based machine is fine (400 Mbit/s), but the one on the i5 based machine (200 Mbit/s) seems a little low and you might have a cap caused by the TAP driver (if you haven't already switched to wintun). Which exact i5 processor do you have?

Buffer size is fine.

Make sure to use AES and not CHACHA20 as your systems should support AES-NI.

Kind regards
 

[pfolk 6]

@Staff

re i5 CPU:
it's an i5 750 @ 2.67 GHz

re TAP driver:
this is what I have under Settings > Advanced > M$ Windows Only, I have these settings applied - lmk if incorrect please:
> use Wintun driver (OpenVPN >= 2.5): check
> force TAP interface UP: check (should I uncheck this ?)
> force usage of bundled plink.exe: check
> experimental: uncheck
> disable driver upgrade: uncheck
OpenVPN custom path: is empty

re AES:
where do I set or enable this ?

Thanks.

[Staff 10018]

@pfolk

Hello!


Settings to use wintun driver are correct. A specific Data Channel cipher can be defined by directive "data-ciphers". Check your Eddie log to see which Data Channel cipher is used (if in doubt please open a ticket and send a log to the support team).

Eddie can accept custom directives in "Preferences" > "OVPN Directives" window. Some examples with ciphers supported by our servers (enter only ONE directive):
data-ciphers AES-256-GCM
data-ciphers AES-128-GCM
data-ciphers CHACHA20-POLY1305 (do not use in AES-NI supporting machines, i.e. desktop computers usually, because performance will be lower).

Kind regards

 

[pfolk 6]

@Staff

logs say:
2021.01.23 15:29:43 - OpenVPN > Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021.01.23 15:29:43 - OpenVPN > Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key

so I just switched to AES-128-GCM cipher, but max dl speed still 20-25 MB/s on the i5 machine.

Lmk please if there is anything else I can try.

Thanks.

[Staff 10018]

@pfolk

Hello!

OK, you're good. We don't think you can try anything else but please feel free to open a ticket. The support team might think of something we currently miss, you never know.

Kind regards
 

[Daniel15 14]

For the people that are recording very fast speeds, did you have to change any configuration to get those speeds? I've got a server with a 10 Gb/s connection and an Intel Xeon E5-2680 v2 (which should support AES-NI), and am connecting to a nearby AirVPN server (~0.8ms ping), yet I haven't been able to reach over 150 Mb/s. Using OpenVPN 2.4 and UDP, with the default config AirVPN provides via the config generator.

Edit: Customizing these options in the OpenVPN config brought the speed up a bit:

ncp-disable
cipher AES-128-GCM
fragment 0
mssfix 0
txqueuelen 1000
fast-io
sndbuf 0
rcvbuf 0

I also tweaked my sysctls, bumping net.core.rmem_max and net.core.wmem_max a bit. Bumped them from 16M to 54M (56623104). Note that Linux's TCP buffers are very small by default, so this is likely something you want to customize on servers with fast connections.

I'm now getting around 250 Mb/s. When hitting that speed, tne CPU core is hitting 100% so I suspect I'm hitting the limit for how fast OpenVPN can go on this server. I can get faster speeds with less CPU usage with Wireguard between my own servers, so I'm wondering if there's more I can tweak, or if it's just limited by OpenVPN.

Edited ... by Daniel15
Follow-up details

[ARPANET+ 2]

hello all ...

here my todays's speed test with the de Airvpn SERVER under heavy load...

sorry for bad language in download mannager (IDM) wich was selected by mistake.

1Gbps is mean for LAN connection 🙂 VDSL-100/20-ping 10 ms



from my side 10/10 stars on AIRVPN Server

[go558a83nk 364]

I got this with the new wireguard implementation.

https://www.speedtest.net/result/12249912075.png

[pfolk 6]

16 hours ago, go558a83nk said:

I got this with the new wireguard implementation.

https://www.speedtest.net/result/12249912075.png

is 'wireguard' an experimental feature ?

[OpenSourcerer 1442]

12 minutes ago, pfolk said:

is 'wireguard' an experimental feature ?

Beta, yes.

[Staff 10018]

17 hours ago, go558a83nk said:

I got this with the new wireguard implementation.

https://www.speedtest.net/result/12249912075.png

New record so far!

Kind regards
 

[Staff 10018]

1 hour ago, pfolk said:

is 'wireguard' an experimental feature ?

Hello!

Yes, it's in public beta testing. If you want to test it, please read here:
https://airvpn.org/forums/topic/49877-wireguard-beta-testing-available/

Kind regards