Замеры iperf3

[egorovna26]

Замеры скорости через iperf3 до vpn показывают скорость в 10 раз меньше, чем до самого сервера напрямую. Это баг или фича? Соединение с vpn происходит через роутер на openwrt.

Connecting to host 10.224.0.1, port 5201
[  5] local 192.168.1.100 port 49864 connected to 10.224.0.1 port 5201
[ ID] Interval           Transfer     Bitrate
[  5]   0.00-1.00   sec   384 KBytes  0.37 MBytes/sec
[  5]   1.00-2.00   sec   384 KBytes  0.38 MBytes/sec
[  5]   2.00-3.00   sec   768 KBytes  0.75 MBytes/sec
[  5]   3.00-4.00   sec  1.12 MBytes  1.12 MBytes/sec
[  5]   4.00-5.00   sec  1.25 MBytes  1.25 MBytes/sec
[  5]   5.00-6.00   sec  1.25 MBytes  1.25 MBytes/sec
[  5]   6.00-7.00   sec  1.00 MBytes  1.00 MBytes/sec
[  5]   7.00-8.00   sec  1.38 MBytes  1.37 MBytes/sec
[  5]   8.00-9.00   sec  1.62 MBytes  1.63 MBytes/sec
[  5]   9.00-10.00  sec  1.50 MBytes  1.50 MBytes/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bitrate
[  5]   0.00-10.00  sec  10.6 MBytes  1.06 MBytes/sec                  sender
[  5]   0.00-10.26  sec  10.5 MBytes  1.02 MBytes/sec                  receiver

iperf Done.

Connecting to host x.x.x.x, port 5201
[  5] local 192.168.1.100 port 50149 connected to 89.36.161.64 port 5201
[ ID] Interval           Transfer     Bitrate
[  5]   0.00-1.00   sec  6.75 MBytes  6.75 MBytes/sec
[  5]   1.00-2.00   sec  11.8 MBytes  11.8 MBytes/sec
[  5]   2.00-3.00   sec  10.8 MBytes  10.8 MBytes/sec
[  5]   3.00-4.00   sec  11.4 MBytes  11.4 MBytes/sec
[  5]   4.00-5.00   sec  14.0 MBytes  14.0 MBytes/sec
[  5]   5.00-6.00   sec  13.1 MBytes  13.1 MBytes/sec
[  5]   6.00-7.00   sec  13.8 MBytes  13.8 MBytes/sec
[  5]   7.00-8.00   sec  13.5 MBytes  13.5 MBytes/sec
[  5]   8.00-9.00   sec  13.5 MBytes  13.5 MBytes/sec
[  5]   9.00-10.00  sec  14.0 MBytes  14.0 MBytes/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bitrate
[  5]   0.00-10.00  sec   122 MBytes  12.2 MBytes/sec                  sender
[  5]   0.00-10.28  sec   122 MBytes  11.9 MBytes/sec                  receiver

iperf Done.

[Dimariqe]

Проверил в новой версии:
До AntiZapret:

iperf3.exe -c 10.224.0.1
Connecting to host 10.224.0.1, port 5201
[  5] local 10.1.165.2 port 21433 connected to 10.224.0.1 port 5201
[ ID] Interval           Transfer     Bitrate
[  5]   0.00-1.00   sec  2.00 MBytes  16.7 Mbits/sec
[  5]   1.00-2.01   sec  1.62 MBytes  13.5 Mbits/sec
[  5]   2.01-3.01   sec  1.88 MBytes  15.8 Mbits/sec
[  5]   3.01-4.01   sec  2.00 MBytes  16.8 Mbits/sec
[  5]   4.01-5.01   sec  1.88 MBytes  15.8 Mbits/sec
[  5]   5.01-6.01   sec  2.25 MBytes  18.9 Mbits/sec
[  5]   6.01-7.01   sec  2.25 MBytes  18.9 Mbits/sec
[  5]   7.01-8.00   sec  2.38 MBytes  20.0 Mbits/sec
[  5]   8.00-9.02   sec  2.62 MBytes  21.7 Mbits/sec
[  5]   9.02-10.00  sec  1.62 MBytes  13.8 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bitrate
[  5]   0.00-10.00  sec  20.5 MBytes  17.2 Mbits/sec                  sender
[  5]   0.00-10.05  sec  20.0 MBytes  16.7 Mbits/sec                  receiver

До OpenVPN:

iperf3.exe -c 10.1.165.1
Connecting to host 10.1.165.1, port 5201
[  5] local 10.1.165.2 port 21307 connected to 10.1.165.1 port 5201
[ ID] Interval           Transfer     Bitrate
[  5]   0.00-1.01   sec  2.38 MBytes  19.7 Mbits/sec
[  5]   1.01-2.00   sec  2.12 MBytes  17.9 Mbits/sec
[  5]   2.00-3.01   sec  2.38 MBytes  19.7 Mbits/sec
[  5]   3.01-4.01   sec  2.75 MBytes  23.2 Mbits/sec
[  5]   4.01-5.01   sec  3.25 MBytes  27.3 Mbits/sec
[  5]   5.01-6.01   sec  2.62 MBytes  22.0 Mbits/sec
[  5]   6.01-7.01   sec  3.00 MBytes  25.1 Mbits/sec
[  5]   7.01-8.01   sec  3.25 MBytes  27.5 Mbits/sec
[  5]   8.01-9.00   sec  3.38 MBytes  28.5 Mbits/sec
[  5]   9.00-10.01  sec  2.50 MBytes  20.7 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bitrate
[  5]   0.00-10.01  sec  27.6 MBytes  23.1 Mbits/sec                  sender
[  5]   0.00-10.07  sec  27.3 MBytes  22.8 Mbits/sec                  receiver

Падение скорости есть, но не настолько критично как у вас.

[egorovna26]

А через что у вас идёт подключение к openvpn? И какие доп. настройки может включены? DCO включён?

[Dimariqe]

DCO отключен, но это все не показатель, скорее всего в старой версии пакет гулял по dnsmap chain. Тот же traceroute показывал кучу прыжков не нужных. Скоро будет обновление, отпишите пожалуйста как у вас будут обстоять дела.

[xtrime-ru]

OpenVPN без DCO очень медленный протокол особенно на роутерах.

Попробуйте установить openvpn клиент на ПК и проверить через него, что бы убрать бутылочное горлышко на клиентской стороне.

У меня сервер c DCO, настройки такие:

      - DNS=adguardhome
      - ADGUARD=1
      - OPENVPN_OPTIMIZATIONS=1
      - OPENVPN_TLS_CRYPT=1

Через 4 ядерный роутер Asus AX55:

[ ID] Interval           Transfer     Bitrate         Retr
[  5]   0.00-10.15  sec  7.75 MBytes  6.41 Mbits/sec   56             sender
[  5]   0.00-10.01  sec  7.50 MBytes  6.28 Mbits/sec                  receiver
[  7]   0.00-10.15  sec  7.25 MBytes  5.99 Mbits/sec   66             sender
[  7]   0.00-10.01  sec  6.88 MBytes  5.76 Mbits/sec                  receiver
[  9]   0.00-10.15  sec  7.50 MBytes  6.20 Mbits/sec   43             sender
[  9]   0.00-10.01  sec  7.12 MBytes  5.97 Mbits/sec                  receiver
[ 11]   0.00-10.15  sec  7.50 MBytes  6.20 Mbits/sec   42             sender
[ 11]   0.00-10.01  sec  7.25 MBytes  6.08 Mbits/sec                  receiver
[ 13]   0.00-10.15  sec  6.50 MBytes  5.37 Mbits/sec   50             sender
[ 13]   0.00-10.01  sec  6.25 MBytes  5.24 Mbits/sec                  receiver
[ 15]   0.00-10.15  sec  7.12 MBytes  5.89 Mbits/sec   46             sender
[ 15]   0.00-10.01  sec  6.88 MBytes  5.76 Mbits/sec                  receiver
[ 17]   0.00-10.15  sec  7.12 MBytes  5.89 Mbits/sec   39             sender
[ 17]   0.00-10.01  sec  6.88 MBytes  5.76 Mbits/sec                  receiver
[ 19]   0.00-10.15  sec  7.50 MBytes  6.20 Mbits/sec   51             sender
[ 19]   0.00-10.01  sec  7.25 MBytes  6.08 Mbits/sec                  receiver
[ 21]   0.00-10.15  sec  6.25 MBytes  5.17 Mbits/sec   41             sender
[ 21]   0.00-10.01  sec  6.00 MBytes  5.03 Mbits/sec                  receiver
[ 23]   0.00-10.15  sec  7.62 MBytes  6.30 Mbits/sec   63             sender
[ 23]   0.00-10.01  sec  7.38 MBytes  6.18 Mbits/sec                  receiver
[SUM]   0.00-10.15  sec  72.1 MBytes  59.6 Mbits/sec  497             sender
[SUM]   0.00-10.01  sec  69.4 MBytes  58.1 Mbits/sec                  receiver

Через openvpn клиент на ПК (упирается в лимиты провайдера):

[ ID] Interval           Transfer     Bitrate         Retr
[  5]   0.00-10.05  sec  35.8 MBytes  29.8 Mbits/sec  107             sender
[  5]   0.00-10.00  sec  35.4 MBytes  29.7 Mbits/sec                  receiver
[  7]   0.00-10.05  sec  35.5 MBytes  29.6 Mbits/sec   87             sender
[  7]   0.00-10.00  sec  35.1 MBytes  29.5 Mbits/sec                  receiver
[  9]   0.00-10.05  sec  34.0 MBytes  28.4 Mbits/sec   97             sender
[  9]   0.00-10.00  sec  33.8 MBytes  28.3 Mbits/sec                  receiver
[ 11]   0.00-10.05  sec  35.5 MBytes  29.6 Mbits/sec   72             sender
[ 11]   0.00-10.00  sec  35.2 MBytes  29.6 Mbits/sec                  receiver
[ 13]   0.00-10.05  sec  36.2 MBytes  30.3 Mbits/sec   82             sender
[ 13]   0.00-10.00  sec  35.9 MBytes  30.1 Mbits/sec                  receiver
[ 15]   0.00-10.05  sec  35.4 MBytes  29.5 Mbits/sec  141             sender
[ 15]   0.00-10.00  sec  35.0 MBytes  29.4 Mbits/sec                  receiver
[ 17]   0.00-10.05  sec  34.6 MBytes  28.9 Mbits/sec  153             sender
[ 17]   0.00-10.00  sec  34.4 MBytes  28.8 Mbits/sec                  receiver
[ 19]   0.00-10.05  sec  35.0 MBytes  29.2 Mbits/sec  109             sender
[ 19]   0.00-10.00  sec  34.8 MBytes  29.1 Mbits/sec                  receiver
[ 21]   0.00-10.05  sec  33.9 MBytes  28.3 Mbits/sec  122             sender
[ 21]   0.00-10.00  sec  33.6 MBytes  28.2 Mbits/sec                  receiver
[ 23]   0.00-10.05  sec  35.4 MBytes  29.5 Mbits/sec  144             sender
[ 23]   0.00-10.00  sec  35.0 MBytes  29.4 Mbits/sec                  receiver
[SUM]   0.00-10.05  sec   351 MBytes   293 Mbits/sec  1114             sender
[SUM]   0.00-10.00  sec   348 MBytes   292 Mbits/sec                  receiver

[egorovna26]

Но смущает в логе сообщение

Thu Sep 26 19:08:12 2024 WARNING: setting tcp-nodelay on the client side will not affect the server. To have TCP_NODELAY in both direction use tcp-nodelay in the server configuration instead.

[egorovna26]

Но на роутере даже с ними скорости нет.

Connecting to host 10.224.0.1, port 5201
[  5] local 192.168.1.100 port 65458 connected to 10.224.0.1 port 5201
[ ID] Interval           Transfer     Bitrate
[  5]   0.00-1.00   sec  1.25 MBytes  1.25 MBytes/sec
[  5]   1.00-2.00   sec  1.38 MBytes  1.37 MBytes/sec
[  5]   2.00-3.00   sec  1.50 MBytes  1.50 MBytes/sec
[  5]   3.00-4.00   sec  1.88 MBytes  1.87 MBytes/sec
[  5]   4.00-5.00   sec   896 KBytes  0.88 MBytes/sec
[  5]   5.00-6.00   sec  1.75 MBytes  1.75 MBytes/sec
[  5]   6.00-7.00   sec  1.50 MBytes  1.50 MBytes/sec
[  5]   7.00-8.00   sec  1.38 MBytes  1.38 MBytes/sec
[  5]   8.00-9.00   sec  1.38 MBytes  1.37 MBytes/sec
[  5]   9.00-10.00  sec  1.50 MBytes  1.50 MBytes/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bitrate
[  5]   0.00-10.00  sec  14.4 MBytes  1.44 MBytes/sec                  sender
[  5]   0.00-10.52  sec  13.4 MBytes  1.27 MBytes/sec                  receiver

iperf Done.

[egorovna26]

Wireguard я пробовал ещё когда появился тут. Но на роутере вообще не завелось. Подключение было, а вот переадресации не было.

[xtrime-ru]

Ну если подключение к wg есть, то надо проверить, что DNS используется 10.224.0.1 и игнорируются DNS от провайдера.

Касательно openvpn - обязательно надо использовать UDP подключение, вы используете TCP. TCP надежнее, но сильно медленее.

[egorovna26]

UDP не хочет подключатся

Fri Sep 27 07:43:17 2024 daemon.err openvpn(antizapret_udp)[6202]: TLS Error: client->client or server->server connection attempted from [AF_INET]x.x.x.x:1194