insane wireguard speed on a WRT1900ACSv2

Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking
Author Message
SurprisedItWorks
DD-WRT Guru


Joined: 04 Aug 2018
Posts: 1444
Location: Appalachian mountains, USA

PostPosted: Mon Aug 01, 2022 17:16    Post subject: insane wireguard speed on a WRT1900ACSv2 Reply with quote
The question of how fast our VPN clients can go often arises. Well, here's an eye-popping wireguard datapoint from a WRT1900ACSv2 (build 49081) in the Los Angeles area, measured by timing the curl download to /dev/null, on the router itself to eliminate issues of wifi and LAN speed, of a 1 GB test file from San Jose (320 or so miles away) via AzireVPN's new and extremely lightly loaded Los Angeles server (us-lax.wg.azirevpn.net):

469 Mbps

via a nominally 400 Mbps ISP connection. I did "ifconfig oet1" and "wg show oet1" before and after so I could look at the RX bytes numbers to verify that the 1 GB really, really went through oet1 and wireguard. I also went back and downloaded the file for real so I could "ls -l" its exact size.

For purists putting that Azire IP into an IP lookup tool: The IP must have changed hands a couple of times recently, because some databases still show it in London or NYC. But my ping tests clearly show it's in the Los Angeles area, as the speed of light is rather famously limited.

So when we see middling speeds like 150 Mbps, we're looking at local-network limits (eg wifi) or tcp ack round-trip delay limits or a loaded server or ISP or maybe something else the router is doing to eat up the time. But the wireguard system itself is insanely fast, even on this five year old router!

And the 400 Mbps ISP speed was obviously stretched by the ISP for this burst. It happens. But it also means this is NOT necessarily the upper speed limit for wireguard on this router. We simply don't know the upper speed limit. But it's certainly fast enough for me.

Edit: I thought I was posting this in the Marvell forum, for fellow Linksys users. Oops!

_________________
2x Netgear XR500 and 3x Linksys WRT1900ACSv2 on 53544: VLANs, VAPs, NAS, station mode, OpenVPN client (AirVPN), wireguard server (AirVPN port forward) and clients (AzireVPN, AirVPN, private), 3 DNSCrypt providers via VPN.
Sponsor
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12834
Location: Netherlands

PostPosted: Thu Aug 04, 2022 6:16    Post subject: Reply with quote
Nice, the Hardware of those Marvell routers is OK Smile

My R7800 does slightly above 300 Mb/s, my R6400v1 (dual core 800 MHz) slightly over 100 Mb/s.

Rule of thumb, on average WireGuard speed is 3 times as fast as OpenVPN

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
eibgrad
DD-WRT Guru


Joined: 18 Sep 2010
Posts: 9157

PostPosted: Thu Aug 04, 2022 9:41    Post subject: Reply with quote
That's the enormous benefit of having the VPN run in the kernel! Place other VPNs in the kernel (OpenVPN, PPTP, IPsec, etc.) and you'd see similar results.

https://www.phoronix.com/news/OpenVPN-DCO-Kernel

Of course, the downside is if there are any vulnerabilities, RCE (remote code execution) becomes a real possibility. That's what makes running it in the kernel a double-edged sword. As they say, there's no free lunch.

_________________
ddwrt-ovpn-split-basic.sh (UPDATED!) * ddwrt-ovpn-split-advanced.sh (UPDATED!) * ddwrt-ovpn-client-killswitch.sh * ddwrt-ovpn-client-watchdog.sh * ddwrt-ovpn-remote-access.sh * ddwrt-ovpn-client-backup.sh * ddwrt-mount-usb-drives.sh * ddwrt-blacklist-domains.sh * ddwrt-wol-port-forward.sh * ddwrt-dns-monitor.sh (NEW!)
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum