Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


wratterus

1687 posts

Uber Geek
+1 received by user: 678


#273123 5-Aug-2020 15:06
Send private message

Wondering if anyone here is using a USG and has an IPSec L2TP VPN setup - wondering what sort of throughput you are seeing. 

 

There are countless threads on Ubiquiti's forums about it, but difficult to get any proper info. Connecting here from either Windows or Apple clients.

 

Using ER-X in the past (without hardware offloading cause it's still broken) I seem to get around 30 - 35mbps both ways, which isn't bad considering. 

 

With the USG (and I've confirmed offloading is enabled) I seem to get around 50mbps down, but only around 10mbps up. 

 

Keen to hear from anyone who's got one setup in the same way, to see what sort of speeds you're seeing through the VPN. 

 

Thanks!

 


Create new topic
pistol
39 posts

Geek
+1 received by user: 7
Inactive user


  #2535235 5-Aug-2020 15:15
Send private message

Honestly,
Setup Wireguard on a Pi4 then just forward the port on the USG.

Not sure on the full speeds possible but just ran a test from where I am which shows no performance impact with it on/off. Connection here is around 300Mbps




nztim
4012 posts

Uber Geek
+1 received by user: 2710

ID Verified
Trusted
TEAMnetwork
Subscriber

  #2535250 5-Aug-2020 15:43
Send private message

I am by no means a USG expert but with VPNs in general have you checked the MTU size?

 

1492 for IPoE and even lower for PPPoE





Any views expressed on these forums are my own and don't necessarily reflect those of my employer. 


wratterus

1687 posts

Uber Geek
+1 received by user: 678


  #2535267 5-Aug-2020 15:54
Send private message

Good thought, I was under the impression that Spark recommend 1500 now - the USG currently is on the default (1492), so I could try tweaking that. Actual speeds through the USG are mint, around 900/350 on Spark gigabit fibre last time I did a random speedtest. 

 

 

 

I don't really understand the MSS MTU relationship well, but I think MSS - 40 (for the headers) = MTU, so I could try and set 1460 in the MSS clamping and see what happens, in theory that would give me a MTU of 1500 I think. 




l43a2
1784 posts

Uber Geek
+1 received by user: 591

ID Verified
Trusted

  #2535269 5-Aug-2020 15:56
Send private message

i use this same setup and get about the same types of speeds your mentioning on a gbit connection - Spark and 2Degrees.






nztim
4012 posts

Uber Geek
+1 received by user: 2710

ID Verified
Trusted
TEAMnetwork
Subscriber

  #2535272 5-Aug-2020 16:14
Send private message

l43a2:

 

i use this same setup and get about the same types of speeds your mentioning on a gbit connection - Spark and 2Degrees.

 

 

I put this down to a limitation of the IPSEC engine if that's the case





Any views expressed on these forums are my own and don't necessarily reflect those of my employer. 


Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.