Search the Community

Hi All, I’m experiencing sluggish web browsing when using a WireGuard connection through my Mikrotik router. My home internet connection is 1Gbps download / 50Mbps upload. Router is a Mikrotik hAP ac RB962UiGS (firmware version 7.16) When I use the Eddie client on my phone or PC to connect to the WireGuard server in Singapore, web browsing is fast and responsive. However, when I configure WireGuard directly on the Mikrotik hAP to connect to the same server and route my PC or phone traffic through the tunnel, browsing slows down significantly—almost to the point of being unusable. Everything connects successfully, but the degraded browsing performance is a disappointing. It doesn't appear to be resources on the Mikrotik, when attempting to download a file of the Mikrotik wireguard tunnel, CPU barely gets to 20% Can anyone give guidance on how to improve the performance? Here is my Mikrotik Config.. WAN is ether1 LAN is ether2 WG is wg-airvpn # by RouterOS 7.16 # software id = ITU9-GZKB # # model = RB962UiGS-5HacT2HnT /interface ethernet set [ find default-name=ether3 ] disabled=yes set [ find default-name=ether4 ] disabled=yes set [ find default-name=ether5 ] disabled=yes set [ find default-name=sfp1 ] disabled=yes /interface wireguard add listen-port=13231 mtu=1320 name=wg-airvpn /interface list add name=LAN add name=WAN /interface lte apn set [ find default=yes ] ip-type=ipv4 use-network-apn=no /routing table add disabled=no fib name=wireguard /ip firewall connection tracking set udp-timeout=10s /ip neighbor discovery-settings set discover-interface-list=LAN /ip settings set max-neighbor-entries=8192 /ipv6 settings set disable-ipv6=yes max-neighbor-entries=8192 /interface list member add interface=ether2 list=LAN add interface=ether1 list=WAN /interface ovpn-server server set auth=sha1,md5 /interface wireguard peers add allowed-address=0.0.0.0/0 endpoint-address=sg3.vpn.airdns.org endpoint-port=1637 interface=wg-airvpn name=peer2 persistent-keepalive=15s preshared-key="XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX" public-key="XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX" /ip address add address=10.152.XXX.XXX interface=wg-airvpn network=10.152.XXX.XXX add address=172.28.28.1/28 interface=ether2 network=172.28.28.0 /ip cloud set update-time=no /ip dhcp-client add interface=ether1 /ip firewall address-list add address=172.28.30.199 list="VPN Only" # My PC /ip firewall filter add action=accept chain=input comment="accept established,related,untracked" connection-state=established,related,untracked add action=drop chain=input comment="drop invalid" connection-state=invalid add action=accept chain=input comment="accept ICMP" in-interface=ether1 protocol=icmp add action=drop chain=input comment="block everything else" in-interface=!ether2 add action=fasttrack-connection chain=forward comment="fast-track for established,related" connection-state=established,related hw-offload=yes add action=accept chain=forward comment="accept established,related" connection-state=established,related add action=drop chain=forward comment="drop invalid" connection-state=invalid add action=reject chain=forward comment="reject WAN access to VPN Only List" out-interface=ether1 reject-with=icmp-network-unreachable src-address-list="VPN Only" add action=drop chain=forward comment="drop access to clients behind NAT from WAN" connection-nat-state=!dstnat connection-state=new in-interface=!ether2 log=yes /ip firewall mangle add action=mark-routing chain=prerouting dst-address=!172.28.28.0/22 new-routing-mark=wireguard passthrough=yes src-address-list="VPN Only" add action=change-mss chain=forward new-mss=clamp-to-pmtu out-interface=wg-airvpn passthrough=yes protocol=tcp tcp-flags=syn /ip firewall nat add action=masquerade chain=srcnat out-interface=ether1 add action=masquerade chain=srcnat out-interface=wg-airvpn /ip ipsec profile set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 /ip route add disabled=no dst-address=10.128.0.1/32 gateway=wg-airvpn routing-table=main suppress-hw-offload=no add disabled=no distance=1 dst-address=172.28.28.0/22 gateway=172.28.28.14 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add disabled=no dst-address=8.8.4.4/32 gateway=wg-airvpn routing-table=main suppress-hw-offload=no add disabled=no dst-address=0.0.0.0/0 gateway=wg-airvpn routing-table=wireguard suppress-hw-offload=no /ip service set telnet address=172.28.28.0/22 disabled=yes set ftp address=172.28.28.0/22 disabled=yes set www address=172.28.28.0/22 set ssh address=172.28.28.0/22 set www-ssl address=172.28.28.0/22 set api address=172.28.28.0/22 set winbox address=172.28.28.0/22 set api-ssl address=172.28.28.0/22 disabled=yes /ip ssh set strong-crypto=yes /routing bfd configuration add disabled=no interfaces=all min-rx=200ms min-tx=200ms multiplier=5 /routing rule add action=lookup-only-in-table disabled=yes src-address=172.28.29.128/25 table=wireguard /system clock set time-zone-name=Australia/Sydney /system identity set name=bump /system note set show-at-login=no /system ntp client set enabled=yes /system ntp client servers add address=pool.ntp.org /tool bandwidth-server set enabled=no /tool graphing interface add /tool graphing queue add /tool graphing resource add /tool mac-server set allowed-interface-list=LAN /tool mac-server mac-winbox set allowed-interface-list=LAN

Pretty much what the title says. Running Debian sid with Eddie, connected to a bunch of servers with default settings and nothing seems to get it up. Any idea? Do you want me to send logs?

Hello, I pay for 25mbps (3.125 MB/s) speed through my ISP. I am not able to sustain download speeds above 100 KB/s. It should be 30 times faster, minus the inevitable geographic distance or extra nodes on the route. why is it so slow? also, why, when I connect to Miami, i am about 10% faster than when Eddie automatically chooses the Toronto servers? I am in Massachusetts. I tried OpenVPN, which is far more responsive, but the speeds are not always faster. AirVPN Eddie client is slow always. current i am getting 110KB/s on OpenVPN, but not enjoying the DNS protection. -sanc

Hi I have a strange problem and I'm at a loss to solve it. I've been tweaking at the settings for a while but nothing seems to improve. I have tried servers from all over the world and even moved to the non-standard ports. I did find moving to a non-standard port gave a bit of an average boost so I was more able to sustain up near the 10M max rate continuously than before. I assume this is just because most clients are connected to 443/udp and there's the OpenVPN single thread issue on the server. I am on a 24/1 ADSL2 connection with ~180ms latency to the closest LA servers. I can get slightly better latency into Singapore, but I'd rather terminate in the USA since most of my traffic ends up there anyway. What I see is that I cannot exceed about 10Mbps. I started out assuming it was just because my desktop OS is shit and its TCP window handling was slowing me down. I used DownloadThemAll to open dozens of connections instead of single-streaming a download. That didn't help. I was still capped at 10MBPS. I didn't see heavy CPU usage in my router but I ruled it by terminating the VPN on my high end i7 machine (with AES-NI) and repeating the DownloadThemAll test. It didn't help. The same test off the VPN saturates my link at 24MBPS. I have a few questions... First, is anyone else using OpenVPN in a similar situation (24/1 and ~200ms latency)? Do you see acceptable performance? Second, are there any tweaks to the config that might help improve the situation? I've tried forcing the sndbuf/rcvbuf settings to 512k but found that they hinder more than help. Third, I see what looks like high uplink utilization while pulling at the 10M rate over the VPN. the 1M uplink is actually quite saturated. I don't see similar when I disable the VPN. Is this normal for openvpn? If that's the case then I'm stuffed until I can increase my uplink rate. I didn't think OpenVPN added this much overhead though. There's nothing else I can think of to work out what's going on. Any suggestions?

Hello -- Whenever I connect to airvpn my download/upload speeds are fine. I get full throughput downloading any number of files. However, over time (say maybe one or two days), my connection eventually slows to a halt. Any given torrent will download at 1k/s and I'm unable to seed any torrents. When this happens I've always simply restarted the VPN, and speeds immediately go back up to the previous max. Is there anything I may have overlooked that would cause this behavior? Thanks.