NetGear r7800 VPN speed issues

Post new topic   Reply to topic    DD-WRT Forum Index -> Atheros WiSOC based Hardware
Author Message
configcuri
DD-WRT Novice


Joined: 30 Aug 2019
Posts: 10

PostPosted: Fri Aug 30, 2019 20:09    Post subject: NetGear r7800 VPN speed issues Reply with quote
Hello! Thank you in advance for your help.

I just purchased one of these great routers and have taken the deep dive into making my entire network behind a VPN.

I'm running into an issue only obtaining 40 down via speedtest on wireless, wired and using the internal speedchecker while on VPN Can you help me increase it?

PreReqs 200 Down, 10 up connection
VPN PIA (Washington DC) 17ms ping
Only 9 devices on the router itself, 6 wired, 3 wireless, None VPN)
Firmware: DD-WRT v3.0-r40559 std (08/06/19)
Echo Affinity commands at startup showed no improvement
Time: 14:21:22 up 26 min, load average: 0.07, 0.04, 0.01
---

Admin commands run:
Code:

for CPUFREQ in /sys/devices/system/cpu/cpu*/cpufreq/scaling_governor; do [ -f $CPUFREQ ] || continue; echo -n performance > $CPUFREQ; done 
< I've seen an increase from 35mbit to 40-42mbit

Code:
 iptables -I FORWARD -i br0 -o `nvram get wan_iface` -j DROP
< For kill switch

---
Additional Command configs
Code:
 persist-key
persist-tun
tls-client
remote-cert-tls server
fast-io
sndbuf 300000
rcvbuf 300000


/configcomplete

Afterthoughts: If I have to switch to a nolog no nonsense VPN, faster VPN, No problem, Any suggestions on this firmware? Are there any fixes I just haven't dug up from the forums regarding speed specifically? on Win10 i'm used to getting +70mb
Sponsor
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14126
Location: Texas, USA

PostPosted: Fri Aug 30, 2019 20:14    Post subject: Reply with quote
I'm pretty sure someone might tell you to upgrade to the latest build since OoS and VPN and other issues have been an ongoing work in progress lately.
configcuri
DD-WRT Novice


Joined: 30 Aug 2019
Posts: 10

PostPosted: Fri Aug 30, 2019 20:25    Post subject: Reply with quote
kernel-panic69 wrote:
I'm pretty sure someone might tell you to upgrade to the latest build since OoS and VPN and other issues have been an ongoing work in progress lately.


Thank you! I'm grabbed this off of the router database, didn't realize an 8/23 version was released.

/dd-wrtv2/downloads/betas/2019/08-23-2019-r40750/netgear-r7800/

I'll try that tonight.
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14126
Location: Texas, USA

PostPosted: Fri Aug 30, 2019 21:25    Post subject: Reply with quote
https://dd-wrt.com/support/other-downloads/?path=betas/2019/08-29-2019-r40854/netgear-r7800/

or

https://download1.dd-wrt.com/dd-wrtv2/downloads/betas/2019/08-29-2019-r40854/netgear-r7800/

That is the most recent published build. Don't use the router database, it isn't updated... still.
configcuri
DD-WRT Novice


Joined: 30 Aug 2019
Posts: 10

PostPosted: Fri Aug 30, 2019 22:23    Post subject: Reply with quote
Just updated to Firmware: DD-WRT v3.0-r40854 std (08/29/19)

https://www.dslreports.com/speedtest/53722352

Learning all about Bufferbloat today, The upload Bloat is insane, around 200ms, Download jumps all around.
tatsuya46
DD-WRT Guru


Joined: 03 Jan 2010
Posts: 7568
Location: YWG, Canada

PostPosted: Fri Aug 30, 2019 23:13    Post subject: Reply with quote
this router architecture has had latency problems for years since a kernel switch, try kong build
_________________
LATEST FIRMWARE(S)

BrainSlayer wrote:
we just do it since we do not like any restrictions enforced by stupid cocaine snorting managers

[x86_64] Haswell i3-4150/QCA9984/QCA9882 ------> r55488 std
[QUALCOMM] DIR-862L --------------------------------> r55460 std
▲ ACTIVE / INACTIVE ▼
[QUALCOMM] WNDR4300 v1 --------------------------> r50485 std
[BROADCOM] DIR-860L A1 ----------------------------> r50485 std


Sigh.. why do i exist anyway.. | I love you Anthony.. never forget that.. my other 99% that ill never see again..

kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14126
Location: Texas, USA

PostPosted: Fri Aug 30, 2019 23:18    Post subject: Reply with quote
tatsuya46 wrote:
this router architecture has had latency problems for years since a kernel switch, try kong build


You should at least tell him where they might still be. http://ddwrt-kong.clonevince.fr/
bushant
DD-WRT Guru


Joined: 18 Nov 2015
Posts: 2029

PostPosted: Sat Aug 31, 2019 0:29    Post subject: Reply with quote
There are no builds for QCA at clonevince.
Some are here:
ftp://gakinaction.ddns.net/Kong%20PTB/K3-AC-IPQ806X/

Last <Kong> build for r7800 is here:
40270-7-11-19ddwrt-netgear-R7800.bin

40270 md5

_________________
Forum Guide Lines (with helpful pointers about how to research your router, where and what firmware to download, where and how to post and many other helpful tips!)
How to get help the right way

Before asking for help - Read the forum guidelines AND Upgrade DD-WRT!
Adblock by eibgrad + Blocklist Collection


Last edited by bushant on Sun Sep 01, 2019 12:47; edited 1 time in total
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14126
Location: Texas, USA

PostPosted: Sat Aug 31, 2019 1:14    Post subject: Reply with quote
I forgot about that. I guess I was alluding to the fact that CloneVince never mirrored any of the IPQ or other <Kong> builds... Embarassed
configcuri
DD-WRT Novice


Joined: 30 Aug 2019
Posts: 10

PostPosted: Sat Aug 31, 2019 22:31    Post subject: Reply with quote
Thank you all so much,

Over the past evening, I've gone through quite a few firmware tftp's for a quick fix. Challenging even as an IT Pro. Smile

1. Going through DD-WRT. I updated to the latest build as stated above, Everything's REALLY stable, Once I got everything up, I was really impressed, The killswitch worked, it was just the speed, I turned off the KS, turned off OpenVPN, found another hurdle, 50mbps down. Sad Wouldn't change, Bloat insane, called my ISP thinking maybe it was something going on, noise to signal ratios are out of normal levels Normal = ... They wanted to send someone or tell me to contact my router OEM

2. I decided to try OpenWRT, as a kick. Powerful, not as pretty, had to learn the hard way how to cat files, I finally after a huge omg! Got the openVPN working through a self made ovpn with a authfile.. However, I couldn't for the life of me get the Killswitch to work, Routin, IPTables, disabling global traffic and enabling Tun+ just would. not work. Through a startup .sh or custom within Laci firewall settings. BUT, My speed jumped back up to 260 down for a short period then dropped to 30 again.

3. Gave Brainslayer's build a try, same dice. Super stable but 50 down.

4. Moved towards Voxel and I have the speed fixed, finally but I can tell the openVPN will be as manual as OpenWRT's with not much dice regarding KS without serious investment in learning and days with my network down.

5. I'm moving to this kong build now, hoping this resolves the latency issues

You all have done an incredible job at all of this and I can't thank you enough for your work producing a free and open firmware world.
configcuri
DD-WRT Novice


Joined: 30 Aug 2019
Posts: 10

PostPosted: Sat Aug 31, 2019 22:49    Post subject: Reply with quote
bushant wrote:
There are no builds for QCA at clonevince.
Some are here:
ftp://gakinaction.ddns.net/Kong%20PTB/K3-AC-IPQ806X/

Last <Kong> build for r7800 is here:
40270-7-11-19ddwrt-netgear-R7800.bin

40270 md5


Now hitting 250 Down with Kong's 40270-7-11-19 build... Thank you!

I know the Knack Vuln is still outstanding going back a month and possibly 3 more Kernal Vuln's... I wonder if there's any possibility to homing in exactly what's causing the speed increase vs. 48 hours ago Nightly build?
tatsuya46
DD-WRT Guru


Joined: 03 Jan 2010
Posts: 7568
Location: YWG, Canada

PostPosted: Sun Sep 01, 2019 6:56    Post subject: Reply with quote
configcuri wrote:
bushant wrote:
There are no builds for QCA at clonevince.
Some are here:
ftp://gakinaction.ddns.net/Kong%20PTB/K3-AC-IPQ806X/

Last <Kong> build for r7800 is here:
40270-7-11-19ddwrt-netgear-R7800.bin

40270 md5


Now hitting 250 Down with Kong's 40270-7-11-19 build... Thank you!

I know the Knack Vuln is still outstanding going back a month and possibly 3 more Kernal Vuln's... I wonder if there's any possibility to homing in exactly what's causing the speed increase vs. 48 hours ago Nightly build?


kong fixed ipq806x performance on kernel 4+

_________________
LATEST FIRMWARE(S)

BrainSlayer wrote:
we just do it since we do not like any restrictions enforced by stupid cocaine snorting managers

[x86_64] Haswell i3-4150/QCA9984/QCA9882 ------> r55488 std
[QUALCOMM] DIR-862L --------------------------------> r55460 std
▲ ACTIVE / INACTIVE ▼
[QUALCOMM] WNDR4300 v1 --------------------------> r50485 std
[BROADCOM] DIR-860L A1 ----------------------------> r50485 std


Sigh.. why do i exist anyway.. | I love you Anthony.. never forget that.. my other 99% that ill never see again..

kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14126
Location: Texas, USA

PostPosted: Sun Sep 01, 2019 11:35    Post subject: Reply with quote
Knack is a python vulnerability. I don't even think that KNACK is installed in this firmware.
configcuri
DD-WRT Novice


Joined: 30 Aug 2019
Posts: 10

PostPosted: Mon Sep 02, 2019 17:04    Post subject: Reply with quote
Awesome! Thank you.

Brainslayers latest build as of 8/31, pushes the r7800 to 71 to 90 Megs down via wan up VPN.

I can live with that. See you all with the next question!
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Atheros WiSOC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum