Feasible for VPN speeds to reach 500Mb/s?

VPN
1

I’ve been with PIA for around 8 years and broadly happy with them. Except for speeds.

I’m UK based and, using pfsense, have several VPNs (OpenVPN) set up to London / Southampton / Netherlands.

fast.com gets me to 500Mb/s when not on VPN but on VPN I’m seeing less than 100,

pfsense hardware is a protectelli i5 with hardware AES/NI and enabled so don’t _think_ the problem is there (but happy to be told otherwise)

Curious - what are others seeing?

Time to move to Wireguard?

Edit:

Thanks for the offers for help from various people. Unfortunately, I’m not a fan of pulling this repo and that repo and sedding these together and smashing it in with eye of nuet.
It’s my firewall and I want native setup.

PIA Support also confirmed “we don’t do it”.

Thus, after many years, I’ll move away.

I tried Proton as their wiki had a fool proof step by step guide which worked perfectly. So far I seem to get near wire speed so I’ll stick around and see how it goes.

2

It is to me unacceptable that pia doesn’t offer wireguard configuration files.
There’s a way to generate config files for the router I’m using but you also need to remake the configuration files every couple weeks because they stop working
A royal pita

Do of course I went with another vpn and there’s works flawlessly

3

OpenVPN

That may be part of the issue, OpenVPN is slow.

Try wireguard - I’ve clocked PIA at over 700 mbits with Linux’s wireguard kernel module

4

Using wireguard on my 8 gigabit connection I can sustain around 1100 megabit. It’d be nice for it to saturate the full connection - but it’s fine. I use split tunnel for some apps, so the rest of my system has access to the remainder of my bandwidth.

5

Wait, are people still actually using openVPN?
Definitely try Wireguard!

6

Could be openvpn overheads, ensure you’re using UDP or try using wireguard.

I’ve seen some UK ISPs throttle VPNs, including workplace VPNs, so you could be hitting this problem. Need to know who your ISP is to know.

Also ensure your clamping the MSS of the tunneled traffic. To 1360 is probably a safe value without knowing your setup.

Take a look at GitHub - FingerlessGlov3s/OPNsensePIAWireguard: This script automates the process of getting Wireguard setup on OPNsense to connect to PIA's NextGen Wireguard servers. It will create Wireguard Instance(Local) and Peer(Endpoint) on your OPNsense setup.

7

Use that to make a config file, then you can add it in pfsense under vpn-wireguard
You might have to install wireguard it in the package manager

8

Which provider?
I’ve zero loyalty to PIA :rofl:

9

This is what I want to achieve :grin:. Though capped at 500 :disappointed_face:

I already do split tunnel with openvpn so all routing is good.

Any tutorial to set up wireguard on pfsense?

10

ha - oldskoolkool?

I’m actually setting up WG now but struggling to find a decent tutorial for pfsense + WG. Any pointers?

11

I went with Windscribe when the made me an offer at $29/year

12

That unfortunately I can’t help with. I’m sure there’s plenty of YouTube tutorials or super helpful people here who can help.

13

For 10 bucks i can set it up for u, you can also check the pia github manual scripts

14

I was looking into this some time ago and found this:

Dunno how helpful it is, I went a different way in the end so never tried this out but maybe it will prove useful to you.

15

I’ll have 10 bucks I’ve already done it :winking_face_with_tongue:

16

Well i will do it for 5 :slight_smile:

17

You better not just be forking my repo xD