Page 1 of 1

OpenVPN over AT&T fiber offering?

Posted: Wed Sep 19, 2018 9:38 pm
by faisal
I see Sonic's reselling AT&T fiber. Is anyone here using Sonic's OpenVPN over that fiber, and if so what kind of bandwidth are you getting through the tunnel?

Re: OpenVPN over AT&T fiber offering?

Posted: Fri Sep 21, 2018 4:51 pm
by forest
Yes. It was a solid 18 mbps when Sonic's OpenVPN server was new, but it varies between around 12 and 17 lately,
depending (apparently) on how well the server is doing at any given moment. That's obviously rather poor for a 20 mbps line, but at least it's better than the plain old DSL that it replaced.

Re: OpenVPN over AT&T fiber offering?

Posted: Fri Sep 21, 2018 5:02 pm
by faisal
Huh. I was getting about 45 on a 50 mbps bonded DSL line, but after the spring VPN server update I'm usually in the 20-25 range, with the occasional day where I can hit 30. That suggests some limitations in the VPN endpoint, but I find it strange that you're seeing a drop since I wouldn't expect the limitations to be proportional. Maybe it's CPU limitations at the far end?

And to my original question: is anyone VPN'ing over fiber, or is it too new?

Re: OpenVPN over AT&T fiber offering?

Posted: Fri Sep 21, 2018 6:53 pm
by forest
Oops. By "AT&T fiber", I thought you meant FTTN. I didn't realize Sonic was reselling AT&T FTTH.

Re: OpenVPN over AT&T fiber offering?

Posted: Wed Oct 31, 2018 4:21 pm
by whorfin
I tried it [FTTP, supposedly gigabit], and had to stop using OpenVPN because of disappointing performance.
Various resources such as this led me to believe 500mbps - 800mbps should be possible if AES-NI were active on both endpoints and if we could adjust MTU.
I saw no better than ~230Mbps, and the load on my appliance led me to believe the Sonic endpoint was the limiting factor.
It was great for FTTN, but off by binary orders of magnitude for FTTP.

In other news, off VPN, I'm seeing less than 700Mbps down, highly dependent on time of day, sometimes <600 but consistently >900Mbps up, leading me to believe AT&T is under-provisioned somewhere along the path.

Re: OpenVPN over AT&T fiber offering?

Posted: Fri Feb 22, 2019 1:39 pm
by faisal
whorfin wrote:I saw no better than ~230Mbps, and the load on my appliance led me to believe the Sonic endpoint was the limiting factor.
What if anything did you need to do to hit 230Mbps?

Re: OpenVPN over AT&T fiber offering?

Posted: Fri Feb 22, 2019 2:45 pm
by whorfin
Run on fast hardware
Fast consumer routers didn’t cut it
I’m using pfSense on Netgate hardware

Re: OpenVPN over AT&T fiber offering?

Posted: Mon Feb 25, 2019 3:19 pm
by miken
Generic speedtests are not going to be accurate on VPN connections, because they weren't designed with encryption and decryption in mind. There was even someone on here once that was getting a 50% speed increase in his results when speedtesting over VPN.

Re: OpenVPN over AT&T fiber offering?

Posted: Mon Aug 05, 2019 3:17 pm
by akseawolf
I'm on Sonic.net fiber running over AT&T's lines.

Without vpn using a speed test:
920mbps down, 900mbps up

Without vpn using bit torrent:
80MB/s down
Upload is complicated:
- I get throttled to different levels seemingly randomly, maybe due to the backbones, or times of day. Sometimes I'm throttled to 40-60KB/s upload, sometimes 700-900KB/s, sometimes 1.1MB/s to 2MB/s, and sometimes 2.6MB/s to 10.8MB/s upload.
- The throttling seems to last for 30 minutes to ~6 hours at a time, before my upload speed changes. In all of the categories, it's usually hovering constantly at the lowest speed with small spikes higher, eg 40kB/s upload that spikes for seconds at a time to 60kB/s.
- While you could make the argument that it's different pipes / different peerings, which might be the case in the small spikes of 100mbps upload, the same peers with the same ip addresses get throttled to these upload speeds seemingly equally, depending on time of day.
- Upload never spikes my ping time. I can set my client to unlimited upload rate.

Without vpn, http:
Usually 60-80MB/s, but once I downloaded an iso from microsoft.com at 110MB/s.

Without vpn, ftp:
I can send to friends and family at their max download no problem. Friends and family are running 100mbps comcast. I have no problem uploading at 100mbps if it is over ftp, but send to them via bittorrent and it is dog slow.

I was hoping VPN would help with some of the fast lane problems regarding bit torrent. There are also some websites where my ping is 2 to 2.5 ms to -- basically lan -- that AT&T was causing my browser to grab their website at dialup speed, but on comcast I was having no problem. So, I switched to Sonic.net from AT&T gigabit fiber. (Also, this is the first month Sonic.net is supported in my area.)

With vpn on using a speed test:
1) IPv6 is identical as the speed test above, because it doesn't run through the vpn.
2) IPv4 on ovpn.sonic.net is ~550mbps down, ~250mbps up. With beta.vpn.sonic.net, ~550mbps down, ~350mbps up.
*note: I'm running openvpn on Mint OS on a i5 2600, which has aes acceleration. (Great guide found here: https://support.ipvanish.com/hc/en-us/a ... inux-Mint- ) However, despite my cpu having aes acceleration, speedtest hits 80% on my 4 cores. This implies that the servers may go above 550mbps and I don't properly have hardware aes acceleration on.

With vpn using bit torrent:
ovpn.sonic.net: 45-55MB/s down. It seems to jitter a bit between those two extremes.
beta.vpn.sonic.net: 45-55MB/s down. It's closer to a flat 50MB/s.
Upload: totally bad, like not good at all. I have my ports forwarded for non-vpn, and I'm unsure if there is something I need to do on the vpn side. Using https://www.yougetsignal.com/tools/open-ports/ it says my ports are closed. If anyone knows how to get port forwarding over sonic's vpn, it's kind of important!

With vpn http:
You guessed it, same download speed as bit torrent.