Posted: Wed Feb 11, 2026 6:23 Post subject: OpenVPN low speed (Fiber 1Gbps)
hi,
Can anyone help me set up the correct configuration? the maximum speed with openvpn active is only 100Mbps, while if I use the manufacturer's app it reaches almost 300Mbps...
Joined: 16 Nov 2015 Posts: 7114 Location: UK, London, just across the river..
Posted: Wed Feb 11, 2026 6:55 Post subject:
OpenVPN is very resource hungry protocol...and then router specs matters...for better performance you can try WireGuard if your VPN provider supports it..otherwise you'd need a better router...
as simple as that...there are mini/micro PC's like https://eu.protectli.com/ or similar micro PC boxes on Amazon or Ebay...just make sure those support hardware AES-NI ....
and even thou VPN provider capabilities, servers locations and ect. also count...not sure how capable are PIA VPN, but im not sure if they will support WG on router level anytime soon...there ware few try's people to make use of it via DDWRT firmware...but my personal try, was a pure fail...
it was working intermittently with lots of broken connection moments... _________________ Atheros
TP-Link WR1043NDv2 -DD-WRT 62606 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 -DD-WRT 63600 GTW/SmDNS/DoT,AD-Blk,Forced DNS,AP&Net Isolation,x2VLAN,Vanilla
Netgear R7800 --DD-WRT 62606 Gateway/DNSCryptv2,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla,VPN cli
Netgear R9000 --DD-WRT 62606 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Dynalink DL-WRX36-DDWRT 62606
Broadcom
Netgear R7000 --DD-WRT 63790 GTW/DNScrypt-proxy2/AD-Block,IPset Firewall,Forced DNS,x4VLAN,VPN cli
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
OpenVPN is very resource hungry protocol...and then router specs matters...for better performance you can try WireGuard if your VPN provider supports it..otherwise you'd need a better router...
as simple as that...there are mini/micro PC's like https://eu.protectli.com/ or similar micro PC boxes on Amazon or Ebay...just make sure those support hardware AES-NI ....
and even thou VPN provider capabilities, servers locations and ect. also count...not sure how capable are PIA VPN, but im not sure if they will support WG on router level anytime soon...there ware few try's people to make use of it via DDWRT firmware...but my personal try, was a pure fail...
it was working intermittently with lots of broken connection moments...
thanks for the answer, yes in fact I was informed, OpenVPN with DD-WRT is a bit heavy, I have the wrt3200acm router... everyone says that Wireguard is the best, but unfortunately my provider doesn't have it, or rather only on the app. so I will try to change provider and let you know.
Joined: 16 Nov 2015 Posts: 7114 Location: UK, London, just across the river..
Posted: Wed Feb 11, 2026 15:46 Post subject:
yep PIA have great plans but no WG support....
Mullvad is quite expensive, but has a great WG support and nice feedback around..
even thou you have wrt3200acm it is still a dual core @1.8Ghz...and your router will not do more than 100Mbit over OpenVPN and 150Mbit+ via WG ....if im not wrong, those protocols are not even multi-threaded so, only the speed of the single core matters...some newer DDWRT supported routers have 2.2Ghz 4xCore CPU's and this means those will handle a bit better, but not better than a mini PC box systems with faster CPU and AES-Ni support (hardware encryption/decryption)...but you need to use AES cypher's rather than ChaChapoly... _________________ Atheros
TP-Link WR1043NDv2 -DD-WRT 62606 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 -DD-WRT 63600 GTW/SmDNS/DoT,AD-Blk,Forced DNS,AP&Net Isolation,x2VLAN,Vanilla
Netgear R7800 --DD-WRT 62606 Gateway/DNSCryptv2,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla,VPN cli
Netgear R9000 --DD-WRT 62606 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Dynalink DL-WRX36-DDWRT 62606
Broadcom
Netgear R7000 --DD-WRT 63790 GTW/DNScrypt-proxy2/AD-Block,IPset Firewall,Forced DNS,x4VLAN,VPN cli
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
yep PIA have great plans but no WG support....
Mullvad is quite expensive, but has a great WG support and nice feedback around..
even thou you have wrt3200acm it is still a dual core @1.8Ghz...and your router will not do more than 100Mbit over OpenVPN and 150Mbit+ via WG ....if im not wrong, those protocols are not even multi-threaded so, only the speed of the single core matters...some newer DDWRT supported routers have 2.2Ghz 4xCore CPU's and this means those will handle a bit better, but not better than a mini PC box systems with faster CPU and AES-Ni support (hardware encryption/decryption)...but you need to use AES cypher's rather than ChaChapoly...
I read through WG I can also reach 300mbps, but it always depends on the router, you're right, even if I have an AP with WiFi 6...
yep PIA have great plans but no WG support....
Mullvad is quite expensive, but has a great WG support and nice feedback around..
even thou you have wrt3200acm it is still a dual core @1.8Ghz...and your router will not do more than 100Mbit over OpenVPN and 150Mbit+ via WG ....if im not wrong, those protocols are not even multi-threaded so, only the speed of the single core matters...some newer DDWRT supported routers have 2.2Ghz 4xCore CPU's and this means those will handle a bit better, but not better than a mini PC box systems with faster CPU and AES-Ni support (hardware encryption/decryption)...but you need to use AES cypher's rather than ChaChapoly...
I read through WG I can also reach 300mbps, but it always depends on the router, you're right, even if I have an AP with WiFi 6...
