Hello selfhosters,

I recently moved to a new place with faster internet (320/130 Mbps) and now I see that VPN is limiting my torrent speed.

I was testing multiple AirVPN (wireguard) servers and I’m getting 80-120 Mbps on speedtest-cli, but in torrents it goes bit higher to about 180-200 Mbps. I usually use it trought gluetun container, but was also testing with eddie-cli and I get pretty much the same results.

I was reading that people get 600 Mbps and even 1+ Gbps on AirVPN. What is your experience? If this is AirVPN limit, what would you suggest as alternative with port forwarding to saturate my bandwidth? I can live with these speeds, just want to check if there is better alternative or something missconfigured on my side.

Cheers

  • Toes♀English
    31·
    5 months ago

    You mentioned that your cpu is getting maxed out on wireguard. That makes a lot of sense since it’s generally not hardware accelerated, old low end CPUs could struggle here.

    What choices do you have for protocols with your VPN software?

    Try AES128 UDP mode with openVPN.

    • rambos@lemm.eeOPEnglish
      2·
      5 months ago

      I want to use glueten container, but I’m flexible about everything else. I can try openVPN server, but not sure what AES128 means (I know its some kind of encryption, but don’t know how to use that in my case). There are many different servers to chose, Ill try few with UDP openVPN. thanks

      • Toes♀English
        21·
        5 months ago

        Ok in that case. The goal is to use a cipher suite that works well on your device that is still secure. AES is accelerated on most processors these days. But you’ll want to confirm that by looking up your specific cpu (both host and client machines!) and checking for AES acceleration.

        AES-128-GCM would be my suggestion.

        UDP mode provides less overhead, so it should be faster for you.

        Alternatively you could use IPsec instead of openvpn but that’s a chore to configure. But it has the benefit of being free and being natively supported by many devices.

        You would still want to configure an appropriate cipher suite that’s fast and secure.

        • rambos@lemm.eeOPEnglish
          1·
          5 months ago

          My CPU (g3930) supports Intel AES New Instructions if thats it. Ill look more into it, thank you

          • Toes♀English
            21·
            5 months ago

            Yeah give that a go. Glad to help 🙂