VPN limiting your bandwidth? Sounds like a CPU issue. You'll be surprised how much CPU overhead it takes to encrypt and decrypt traffic at such high speeds.
this post was submitted on 21 Jan 2024
20 points (91.7% liked)
Selfhosted
40296 readers
284 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
-
No spam posting.
-
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
-
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
-
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
-
No trolling.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
founded 1 year ago
MODERATORS
Yeah this seems right. My CPU utilization goes to 100% during speedtest and I have celeron 😆 Thank you!
While this is conclusively stoned as “cpu” issues, in case anyone else finds this thread…
While your isp can’t read the data over the VPN, they CAN see that you’re using a VPN and intentionally slow down your connection with traffic shaping because you’re putting so much data through the vpn.
Oh good to know
Bro if you need rediculous speeds like that get a seed box. 200+ is more than enough and you’ll likely cap out on CPU/thread utilization after that.
I don't need, but wasn't sure am I using full capacity of what I'm paying for and want to learn more. This is my hobby, I enjoy setting up things more than using the server lol edit: and yeah feels like CPU capped
I enjoy setting up things more than using the server lol
Also me in life, in games.. I like min-maxing, making it as efficient as things will allow.
So I asked chatgpt what professions would be best for a person like that and from the 10 answers it spat out, surprise surprise, I've worked as 2 out of the top 3.
Use Wireguard instead of OpenVPN.
I am, but as others said I think my CPU cant handle it
You mentioned that your cpu is getting maxed out on wireguard. That makes a lot of sense since it's generally not hardware accelerated, old low end CPUs could struggle here.
What choices do you have for protocols with your VPN software?
Try AES128 UDP mode with openVPN.
I want to use glueten container, but I'm flexible about everything else. I can try openVPN server, but not sure what AES128 means (I know its some kind of encryption, but don't know how to use that in my case). There are many different servers to chose, Ill try few with UDP openVPN. thanks
Ok in that case. The goal is to use a cipher suite that works well on your device that is still secure. AES is accelerated on most processors these days. But you'll want to confirm that by looking up your specific cpu (both host and client machines!) and checking for AES acceleration.
AES-128-GCM would be my suggestion.
UDP mode provides less overhead, so it should be faster for you.
Alternatively you could use IPsec instead of openvpn but that's a chore to configure. But it has the benefit of being free and being natively supported by many devices.
You would still want to configure an appropriate cipher suite that's fast and secure.
My CPU (g3930) supports Intel AES New Instructions if thats it. Ill look more into it, thank you
Yeah give that a go. Glad to help 🙂