VPN Speed

Comments

20 comments

  • Avatar
    Firewalla

    Upload or transfer from the 940/40 circuit will be limited to around 4 mega bytes per second. (slow upload)

    Download from the fiber will be limited by the fiber upload speed. 

    And both will be limited by the VPN you are using. Which is likely 120megabit/s. 

    0
    Comment actions Permalink
  • Avatar
    Jamie Dewoody

    Agreed, but when downloading from the 1GB connection side, I'm averaging 2MB. That should be in the 100MB range, which it is not.

    0
    Comment actions Permalink
  • Avatar
    Jamie Dewoody

    And the fiber is 1GB symmetrical.

    0
    Comment actions Permalink
  • Avatar
    Jamie Dewoody

    "And both will be limited by the VPN you are using. Which is likely 120megabit/s."

    This a site to site Firewalla VPN tunnel, which is gigabit. Can you clarify this statement?

    0
    Comment actions Permalink
  • Avatar
    Rich T.

    That's the OpenVPN server speed limit on Gold:

    https://help.firewalla.com/hc/en-us/articles/360010465893

    I think wireguard is now possible which should bump that to 500Mbps

    0
    Comment actions Permalink
  • Avatar
    Jamie Dewoody

    @Rich T. Thank you for your response. I'm still curious why I only get 2MB downloading from 1 GB network. 

    Do you happen to know of documentation on how to move the Firewalla devices over to WireGuard?

     

    0
    Comment actions Permalink
  • Avatar
    Rich T.

    It looks like it's in "early-access" 

    https://help.firewalla.com/hc/en-us/articles/4554420886163-Firewalla-Box-Release-1-974-App-Release-1-50

    In regard to the 2Mb download, did you run an internet speed test first? Id check that just prior to testing the site<->site just to make sure there's no an issue there.

    0
    Comment actions Permalink
  • Avatar
    Glenn Miles

    I'm experiencing basically the same thing.  ~500Mbit Speedtest.net on each end, but only ~20Mbit when tested throught the VPN.

    Site to site VPN is configured as Site A is the Server and Site B is the Client.

    If I am not connected to to the site to site VPN:
    Site A is Gold - 470Mbit to local ISP Speedtest
    Site B is Purple - 566Mbit to local ISP Speedtest

    If I test Site A, to Site B's local ISP, and vise versa, understandably it slows, to ~380Mbit.

    When I connect the site to site VPN, which is using Wireguard, and run the Speedtest from Site B to the Site A local ISP, I only get ~20Mbit.

    Download latency goes from ~72ms, no VPN, to ~195ms VPN connected.

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    What is the speed of the internet site A and B (both upload download)? your fastest speed will be limited by the slowest

    0
    Comment actions Permalink
  • Avatar
    Glenn Miles

    That's it thanks.  Now a call to the ISP.

    From the Firewalla app.

    Site A - 464 Mb/s down, 23 Mb/s up

    Site B - 560 Mb/s down, 560 Mb/s up

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    Your limit is site A, upload speed. 

    And in your case, if you do download teset from Site A to site B (pulling date out from B), then your speed should be limited by 464 mb/s

    0
    Comment actions Permalink
  • Avatar
    Joe Bender

    Hi All, following up to this old thread as I'm having a similar problem. I'm using the WireGuard client to connect remotely to office network Firewalla Gold. Office network is symmetrical 1GB fiber. Home network is symmetrical 1.5GB fiber. Both have tested speeds up/down speeds in the 800mbit range. When I connect to the office Firewalla Gold from my home computer, I get Speedtest throughput to the Internet of ~180/130mbit, so slower than nominal but somewhat expected since it's going through the tunnel. However, when I try to copy data on my office servers I only get ~7MB/s throughput (would expect at least in the 20MB/s range). Any obvious reason why this would be so low and anything I can troubleshoot to improve the transfer speeds? My reason for the setup is to move video files around.

     

    Thank you!

     

    0
    Comment actions Permalink
  • Avatar
    Siva Ananmalay

    Joe - did you get this resolved? I'm considering a site-to-site VPN, but these performance issues have me concerned that it's not worth the effort.

    0
    Comment actions Permalink
  • Avatar
    1980cyber

    I'd run some quick iperf3 tests between the sites and make sure the basics are working. And triple check if the ISP is indeed delivering the symmetrical gigabit. 

    0
    Comment actions Permalink
  • Avatar
    Jamie Dewoody

    @Siva - 2 years later and it's still not the best for performance, even after switching from OpenVPN to WireGuard for site-to-site. I still only get an initial burst of speed at first of around 250MB and then it goes down to around 30-40MB per second, sometimes less. I have 2.5GB fiber now and my offsite location has 1GB. I would not recommend it.

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    @Jamie

    I just created a ticket for you. WireGuard on the Gold should be much faster than 30 to 40Mbit, so either something with queuing or ISP may be throttle these type of traffic. 

    0
    Comment actions Permalink
  • Avatar
    BMW M3

    doesnt matter which one you use... my openVPN is faster than wireguard .. then on a different remote user it caps to 10Mbps .. which is crazy slow   Firewalla support is useless they keep asking the same questions seems like what I tell them falls thru the cracks .. I have spectrum modem, firewalla gold in router mode and 3 computers connected to that firewalla gold .. all cat 6 cables 

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    What are your upload/and download speeds form your ISP? that usually limit your VPN speed 

    0
    Comment actions Permalink
  • Avatar
    BMW M3

    I have ATT fiber as you see my speed is 885   Download . 775 Up

    '

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    Are you testing speed via LTE? or Wifi? 

    Can you test it within your network and see the speed? this will rule out issues with your WAN or LTE

    0
    Comment actions Permalink

Please sign in to leave a comment.