[havoq]

I'm hoping someone can point me in the right direction...

I have two Netgear R7800's, both running version r62170, with a site-to-site Wireguard VPN between them and file transfers over the link are struggling to hit 3MB/s.

Both sites are on 250 Mbps up, 100 Mbps down internet links.

The routers are only running DHCP, Wireguard and 2.4/5GHz wifi.

I've tried the following:
- With SFE enabled and disabled.
- MTU on the internet link is 1500 and I've tried lowering the MTU on the wireguard tunnels but it didn't help.
- New power supplies on both routers.

Firewall config:
LOCAL:
iptables -I INPUT -i oet1 -s 192.168.1.0/24 -j ACCEPT
iptables -I OUTPUT -d 192.168.1.0/24 -o oet1 -j ACCEPT
iptables -I FORWARD -i br0 -o oet1 -j ACCEPT
iptables -I FORWARD -i oet1 -o br0 -j ACCEPT

REMOTE:
iptables -I INPUT -i oet1 -s 192.168.2.0/24 -j ACCEPT
iptables -I OUTPUT -d 192.168.2.0/24 -o oet1 -j ACCEPT
iptables -I FORWARD -i br0 -o oet1 -d 192.168.2.0/24 -j ACCEPT
iptables -I FORWARD -i oet1 -o br0 -s 192.168.2.0/24 -j ACCEPT

Can anyone help me identify what I've misconfigured? I was seeing better throughput on my R7000's at closer to 6MB/s with the same configuration.

Please let me know if you need more info to help out.

[egc]

Moved this post to the Advanced Networking forum

You can find the proper installation instructions for WireGuard in that same forum:
https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327397

The setup you are using is a site-to-site setup look for that in the guides.

Although not related to the speed you are seeing but remove all the rules you added to the firewall regarding WireGuard, the DDWRT setup should take care of everything if you tick the right boxes.

Untick/disable on both sides: Firewall inbound

The use of PBR is not necessary as that is done with the Allowed IPs.
So on both sides just use "Route all Destinations via Default Route"

But as said that should not have much effect on the speed you are seeing.

As you are restricted by the upload speed the max throughput will indeed be around 6/7 MB/s if you use wired connection on both sides.

You can try to lower WireGuard MTU to 1280 on both sides to see if that has any effect

New builds (Kernel 6.X) have rather poor performance, some report that using SFE sometimes makes it even worse, if NSS is working for you that is the way to go to get some more speed.

[havoq]

Hey egc

Thanks for the feedback. My brain was still in "OpenVPN mode" when I set this up.

I've tidied up the IP tables and, as expected, it made no difference to the speed.
I'm occasionally seeing good performance (sitting at 9MB/s constant throughput), with frequent bouts of slower speed (2-3MB/s). This makes me think it's environmental (ISP, LAN traffic, etc) rather than the router itself.

I'll keep digging and report back if I find anything.