very slow speed with OPNSense

[mathais]

Hello, I was using pfsense+, and I had very good speeds (1500Mbps down and 650Mbps up).
I switched to opnsense because pfsense+ became paid.
I'm happy with OPNSense, but I have major flow problems.
Now I barely have 650Mbps down and 90Mbps up.
How is this possible?

How can I resolve my problem?

I use an Intel(R) Celeron(R) N5105 PC @ 2.00GHz (4 cores, 4 threads) 16GB RAM.

Thanks a lot for your help.

[meyergru]

What NIC hardware? Which application? Details matter, you know...

Guessing from your other posts. you use NordVPN. Note that the product you are coming from has custom optimizations for encrypted traffic as discussed here (probably not limited to Wireguard, in case you use OpenVPN). BTW: since you posted your question twice with different versions of that product: The optimisations are only in the commercial version of it!

So, if I guess correctly, the short answer to your question is (for now): pay for the other product, get faster hardware or try this at your own risk for a potential slight improvement in VPN speed:

Code: [Select]

# opnsense-update -zkr 14-STABLE -a FreeBSD:14:amd64


[mathais]

Hello, yes indeed, I use NordVPN.
And you are right, the throughput is very bad with OpenVPN. If I deactivate the VPN, my speed becomes decent again.

To optimize speed with NordVPN, you recommended a command line.

What is this line of code for, and do you really think it will optimize NordVPN throughput?

My NIC hardware :

Code: [Select]

    vendor     = 'Intel Corporation'
    device     = 'Ethernet Controller I226-V'
    class      = network

Thank you so much,

[mathais]

Code: [Select]

# opnsense-update -zkr 14-STABLE -a FreeBSD:14:amd64


I tried the update, but I can't see any improvement...
Do you think it is possible to improve this?

Without NordVPN (OpenVPN) :
Download = 824Mbps
Upload = 654Mbps

With NordVPN (OpenVPN) :
Download = 470Mbps
Upload = 80Mbps

[meyergru]

You will see an improvement after a reboot only, but it will not be as fast as your previous product.

Read the linked thread, all the info is there.

[mathais]

You will see an improvement after a reboot only, but it will not be as fast as your previous product.

Read the linked thread, all the info is there.

I restarted, but I don't see any improvement...
Do you know if by using WireGuard my speed could be better?

Do you know a tutorial for configuring wireguard with NordVPN?

I've looked around the web, but it's pretty confusing.

Thank you,

[meyergru]

I restarted, but I don't see any improvement...
Do you know if by using WireGuard my speed could be better?

Probably, but I do not know for sure. As I said, the speed doubles for Wireguard, but if your reference is OpenVPN, IDK.

Do you know a tutorial for configuring wireguard with NordVPN?

I've looked around the web, but it's pretty confusing.

Not anything OpnSense specific, but everything I  have seen suggested Wireguard or OpenVPN for NordVPN.

[mathais]

I would like to install nordvpn with wireguard to optimize my speed. I can't find any support to do this configuration.
Thx

[mathais]

I restarted, but I don't see any improvement...
Do you know if by using WireGuard my speed could be better?

Probably, but I do not know for sure. As I said, the speed doubles for Wireguard, but if your reference is OpenVPN, IDK.

Do you know a tutorial for configuring wireguard with NordVPN?

I've looked around the web, but it's pretty confusing.

Not anything OpnSense specific, but everything I  have seen suggested Wireguard or OpenVPN for NordVPN.

when will we be able to have OPNsense optimizations to have the same quality of service as with pfsense+?

[hloiter]

Have a look at https://forum.opnsense.org/index.php?topic=21350.0

[meyergru]

when will we be able to have OPNsense optimizations to have the same quality of service as with pfsense+?

From the looks of it, you are just the right person to ask this:

I switched to opnsense because pfsense+ became paid.

To which I explained:

Note that the product you are coming from has custom optimizations for encrypted traffic as discussed here (probably not limited to Wireguard, in case you use OpenVPN). BTW: since you posted your question twice with different versions of that product: The optimisations are only in the commercial version of it!

So, to set this straight: you expect a feature that you were not willing to pay for in a commercial product from a free product and ask when it will be available? 

[mathais]

Have a look at https://forum.opnsense.org/index.php?topic=21350.0

So we can't install it directly on OPNsense ?
The guy use ubuntu.

[Patrick M. Hausen]

The poster with the solution installed their package on Linux, then copied the configuration over. No need to install anything on OPNsense as far as I understand.

[mathais]

The poster with the solution installed their package on Linux, then copied the configuration over. No need to install anything on OPNsense as far as I understand.

Ok thank you very much, I understand. Sorry, English is not my language so I have difficulty understanding.

With your last message, I understand that you have to go through ubuntu to generate elements which will then allow you to configure OPNSense.

It is therefore not necessary to install packages on OPNsense, you just need to do the manipulations on an Ubuntu machine (a virtual machine in my case) while you generate the keys and elements that will allow you to connect with wireguard.

Is it this ?

[mathais]

when will we be able to have OPNsense optimizations to have the same quality of service as with pfsense+?

From the looks of it, you are just the right person to ask this:

I switched to opnsense because pfsense+ became paid.

To which I explained:

Note that the product you are coming from has custom optimizations for encrypted traffic as discussed here (probably not limited to Wireguard, in case you use OpenVPN). BTW: since you posted your question twice with different versions of that product: The optimisations are only in the commercial version of it!

So, to set this straight: you expect a feature that you were not willing to pay for in a commercial product from a free product and ask when it will be available? 

To be sure, I paid for pfsense+... And I am terribly disappointed to see that the speeds are so catastrophic...

In the past, I thought my speeds were better with OpenVPN... But maybe I was wrong.

So, in my case, I have the same speeds with pfsense+ and OPNsense...