Speed capped to 20MB/s

This forum is for admins who are looking to build or expand their OpenVPN setup.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
paboman
OpenVpn Newbie
Posts: 5
Joined: Wed Mar 30, 2022 10:01 am

Speed capped to 20MB/s

Post by paboman » Wed Mar 30, 2022 10:45 am

I am testing openVPN on a fiber internet connection on both ends.
2500/500 server side
1000/200 client side
Server is running on a 1821+ Synology NAS and Client on a Windows workstations.

My transfers speed are limited to around 20MB/s for both upload and download.
20 is the isp limit for the client upload speed so its ok... but why is so for dowloading if ISP allow client to download at 1000 and server to upload at 500 ?
I should see higher speeds when downloading a file from the server
There is a bottleneck somewhere but how can I found it ?


Image

Iperf3 memory speed test:
Image

Server Configuration:
Image

Client Configuration:

Code: Select all

dev tun
tls-client

remote xxx.synology.me 1194

# The "float" tells OpenVPN to accept authenticated packets from any address,
# not only the address which was specified in the --remote option.
# This is useful when you are connecting to a peer which holds a dynamic address
# such as a dial-in user or DHCP client.
# (Please refer to the manual of OpenVPN for more information.)

#float

# If redirect-gateway is enabled, the client will redirect it's
# default network gateway through the VPN.
# It means the VPN connection will firstly connect to the VPN Server
# and then to the internet.
# (Please refer to the manual of OpenVPN for more information.)

#redirect-gateway def1

# dhcp-option DNS: To set primary domain name server address.
# Repeat this option to set secondary DNS server addresses.

#dhcp-option DNS DNS_IP_ADDRESS

pull

# If you want to connect by Server's IPv6 address, you should use
# "proto udp6" in UDP mode or "proto tcp6-client" in TCP mode
proto udp

script-security 2


comp-lzo

reneg-sec 0

cipher AES-256-CBC

auth SHA1

auth-user-pass
<ca>
-----BEGIN CERTIFICATE-----
xxx
-----END CERTIFICATE-----

</ca>

any help appreciated :)

TinCanTech
OpenVPN Protagonist
Posts: 11139
Joined: Fri Jun 03, 2016 1:17 pm

Re: Speed capped to 20MB/s

Post by TinCanTech » Wed Mar 30, 2022 11:44 am

The botttle neck is probably your cheap NAS.

User avatar
Pippin
Forum Team
Posts: 1201
Joined: Wed Jul 01, 2015 8:03 am
Location: irc://irc.libera.chat:6697/openvpn

Re: Speed capped to 20MB/s

Post by Pippin » Wed Mar 30, 2022 2:06 pm

Code: Select all

remote xxx.synology.me 1194
Are you using their relay service, I think it's called quick connect?

Try using your actual WAN.IP

Code: Select all

remote WAN.IP 1194
My best guess however would be that this CPU, apparently with AES-NI support, isn't capable of higher speeds, ~160Mb/s.
For comparison, Intel N3150 with AES-NI support (2,1 Ghz) maxes out at ~120Mbps.
.
I gloomily came to the ironic conclusion that if you take a highly intelligent person and give them the best possible, elite education, then you will most likely wind up with an academic who is completely impervious to reality.
Halton Arp

paboman
OpenVpn Newbie
Posts: 5
Joined: Wed Mar 30, 2022 10:01 am

Re: Speed capped to 20MB/s

Post by paboman » Wed Mar 30, 2022 9:33 pm

Pippin wrote:
Wed Mar 30, 2022 2:06 pm

Code: Select all

remote xxx.synology.me 1194
Are you using there relay service, I think it's called quick connect?

Try using your actual WAN.IP

Code: Select all

remote WAN.IP 1194
My best guess however would be that this CPU, apparently with AES-NI support, isn't capable of higher speeds, ~160Mb/s.
For comparison, Intel N3150 with AES-NI support (2,1 Ghz) maxes out at ~120Mbps.
.
Yes, I am using the DDNS provided by Synology. I will try to connect directly to the wan IP.

The cpu is a AMD Ryzen V1500B 64-bit 4-core at 2.2 GHz which supports AES-NI
I don't think the maximum it can manage is 20MB/s (aka 160 Mb/s) because during transfers over Openvpn the CPU is below 20%

paboman
OpenVpn Newbie
Posts: 5
Joined: Wed Mar 30, 2022 10:01 am

Re: Speed capped to 20MB/s

Post by paboman » Thu Mar 31, 2022 9:21 am

No change in speed using IP instead of the DDNS

TinCanTech
OpenVPN Protagonist
Posts: 11139
Joined: Fri Jun 03, 2016 1:17 pm

Re: Speed capped to 20MB/s

Post by TinCanTech » Thu Mar 31, 2022 12:08 pm

Try testing without the VPN

paboman
OpenVpn Newbie
Posts: 5
Joined: Wed Mar 30, 2022 10:01 am

Re: Speed capped to 20MB/s

Post by paboman » Thu Mar 31, 2022 1:10 pm

TinCanTech wrote:
Thu Mar 31, 2022 12:08 pm
Try testing without the VPN
Ho can I test a file transfer speed between two different physical location without a vpn tunnel ?

If do a Speed test I get:
Server Side: 920 down / 500 up
Client Side: 600 down / 200 up

TinCanTech
OpenVPN Protagonist
Posts: 11139
Joined: Fri Jun 03, 2016 1:17 pm

Re: Speed capped to 20MB/s

Post by TinCanTech » Thu Mar 31, 2022 1:42 pm

paboman wrote:
Thu Mar 31, 2022 1:10 pm
Ho can I test a file transfer speed between two different physical location without a vpn tunnel ?
Use your imagination.

paboman
OpenVpn Newbie
Posts: 5
Joined: Wed Mar 30, 2022 10:01 am

Re: Speed capped to 20MB/s

Post by paboman » Thu Mar 31, 2022 9:40 pm

TinCanTech wrote:
Thu Mar 31, 2022 1:42 pm
paboman wrote:
Thu Mar 31, 2022 1:10 pm
Ho can I test a file transfer speed between two different physical location without a vpn tunnel ?
Use your imagination.
used, want some ?

TinCanTech
OpenVPN Protagonist
Posts: 11139
Joined: Fri Jun 03, 2016 1:17 pm

Re: Speed capped to 20MB/s

Post by TinCanTech » Fri Apr 01, 2022 12:30 am

A new low ..

If you would like me to help you imagine something then I am available for hire.

:roll:

Post Reply