OpenVPN Private Internet Access Slower when upgraded from 2.1.5 to 2.2

[archedraft]

So I just upgraded my physical desktop pfSense server from 2.1.5 to 2.2. Everything upgraded fine but I have noticed that my internet download speed when my OpenVPN (PIA) client is turned on is much slower. I used to get around 100 Mbps download with 2.1.5 but now I am stuck around 30 Mbps download. If I turn off the client and use just my ISP then I get full speeds again at 100 Mbps so something must have changed with the OpenVPN client settings. Like I said on 2.1.5 the download speed was just fine with the openVPN client turned on. Anyone have any ideas with my download speed is so much slower?

[archedraft]

Anyone?

[User1503]

I'd trade ya' if I could.  I was getting 1.5mbps and never more than 3 when running the client.  Now with a desktop pfS dedicated firewall I get a respectable 7Mpbs and sometimes over 10 download.  That's with 50mb VDsL on the wan side; and I get all of 48Mbps without PIA/pfS.  So yeah, it could be  a lot better but for what I use it for it's working.

[doktornotor]

What HW are we talking about? Just meaningless questions without any info.

[archedraft]

@doktornotor:

What HW are we talking about? Just meaningless questions without any info.

I suppose but can't see how hardware is the problem if everything was running fine with 2.1.5?

I have tried this on two different setups with the same results (Below are the Specs:)

Setup #1:
Dell OptiPlex GX270
Pentium 4
1 GB of Ram
32 bit version of pfSense 2.1.5 -> 2.2

Setup #2
KVM Virtual Machine
Intel i7-3770s 3.10GHz (1 Core)
1 GB of Ram
64 Bit version of pfSense 2.1.5 -> 2.2

Again both setups run great with PIA getting around 90 - 100 Mbps on 2.1.5 but when I upgraded them to 2.2 I am getting around 20 - 30 Mbps download. It could be that the settings changed enough from 2.1.5 to 2.2 and I have one (or more) of the settings wrong for PIA (I have tried changing a bunch but nothing helps). If anyone has PIA up and running and getting speeds above 30 Mbps it would be nice if you would take a screen shot of your settings so I can compare.  ;D

[archedraft]

Help I need somebody!  8) https://www.youtube.com/watch?v=tUncwY4SBOA

[charliem]

Can you clarify whether you  1) have set up an OpenVPN  client connection from your pfSense box to a PIA server, or 2) are using a PIA client on one of your LAN PCs (say a windows machine)?  I assume (1), but just want to confirm.

Have you already tried connecting to an alternate PIA server (say us-east rather than us-west)?  Can you detail some of the 'bunch of settings' you've tried?

[archedraft]

@charliem:

Can you clarify whether you  1) have set up an OpenVPN  client connection from your pfSense box to a PIA server, or 2) are using a PIA client on one of your LAN PCs (say a windows machine)?  I assume (1), but just want to confirm.

Have you already tried connecting to an alternate PIA server (say us-east rather than us-west)?  Can you detail some of the 'bunch of settings' you've tried?

Option #1.

Yes I have tried connecting to other PIA servers but all are slower on pfsense 2.2 (~40 Mbps). I friend has the exact setup as myself (as I set it up) and is still running 2.1.5 and has been getting the expected download speeds through the PIA VPN (~90 Mbps).

I've noticed in pfsense 2.2 that "Auth Digest Algorithm" was added and I have it set to SHA1 (I have tried most of the other settings as well just to test but either its around the same speed or it doesn't work at all).

I have also spent 3 weeks going back and forth with the PIA "support" but they were not any help in the end. After their standard tests of trying multiple TCP / UDP ports they sent me to advance support which told me that they would have to have their "development" team look into pfsense 2.2 to see if the settings had changed. I have not heard back from them in over a month.

[coolspot]

Same here, I'm about 40mbps as well using PIA. However, from my desktop computer, I can hit >100mbps.

I don't think my pfSense box CPU is saturated? Here is the TOP dump:

last pid: 15026;  load averages:  1.02,  0.61,  0.43                                                                                  up 19+02:05:29  14:33:57
210 processes: 7 running, 177 sleeping, 26 waiting
CPU:    % user,    % nice,    % system,    % interrupt,    % idle
Mem: 28M Active, 179M Inact, 542M Wired, 465M Buf, 7172M Free
Swap: 16G Total, 16G Free

PID USERNAME      PRI NICE  SIZE    RES STATE  C  TIME    WCPU COMMAND
  11 root          155 ki31    0K    64K CPU2    2 440.2H  79.05% idle{idle: cpu2}
  11 root          155 ki31    0K    64K CPU0    0 432.5H  78.66% idle{idle: cpu0}
  11 root          155 ki31    0K    64K RUN    3 446.5H  76.56% idle{idle: cpu3}
  11 root          155 ki31    0K    64K RUN    1 443.6H  68.16% idle{idle: cpu1}
28854 root          52    0 21728K  5752K select  0  1:06  58.40% openvpn

Running on a D525, Dual-Core Atom.

[archedraft]

Sweet! I am happy to hear that I am not alone! I know for sure that my CPU is not over-saturated, my pfSense has 1 core dedicated from my i7.

So now the question is what changed from 2.1.5 to 2.2?

[archedraft]

Is there anyone out there running pfSense 2.2 with Private Internet Access and getting download speeds higher than 40 Mbps?

AND/OR

Is there anyone out there running pfSense 2.2 with any other VPN service and getting download speeds higher than 40 Mbps?

If Yes, would you please take a screen shot of your current VPN settings and post them here to compare?

[theeddie]

@archedraft:

Is there anyone out there running pfSense 2.2 with Private Internet Access and getting download speeds higher than 40 Mbps?

AND/OR

Is there anyone out there running pfSense 2.2 with any other VPN service and getting download speeds higher than 40 Mbps?

If Yes, would you please take a screen shot of your current VPN settings and post them here to compare?

I am almost positive the are capping me at 40mbit on pia

Retrieving speedtest.net configuration…
Retrieving speedtest.net server list...
Testing from SoftLayer Technologies (50.97.94.58)...
Selecting best server based on latency...
Hosted by SoftLayer Technologies, Inc. (Dallas, TX) [0.26 km]: 22.63 ms
Testing download speed….....................................
Download: 31.63 Mbits/s

[archedraft]

@theeddie:

I am almost positive the are capping me at 40mbit on pia

What version of pfSense are you running?

[theeddie]

2.2.2

[theeddie]

are you running aes 128
or blowfish? I noticed a 9% increase in speed with aes  still havn't broke 40mbit

Testing download speed….....................................
Download: 33.98 Mbits/s
blow
Testing download speed........................................
Download: 36.23 Mbits/s
aes 128

[someuser123]

am getting 118Mbps on 105Mbps down

its been consistent.

pfsense: 2.2.2
HW: i5-8gb ram
VPN: PIA
OpenVPN: AES128

Had same results on bf-cbc and on pfsense 2.1.5 or older.
using PIA for around 2 years now.

[theeddie]

root@plex:~ # speedtest –source 10.0.0.23
Retrieving speedtest.net configuration...
Retrieving speedtest.net server list...
Testing from Choopa, LLC (108.61.19.3)...
Selecting best server based on latency...
Hosted by Atlantic Metro (New York City, NY) [39.30 km]: 76.304 ms
Testing download speed….....................................
Download: 10.07 Mbits/s
Testing upload speed..................................................
Upload: 13.93 Mbits/s

I changed to east coast

[archedraft]

@someuser123:

am getting 118Mbps on 105Mbps down

its been consistent.

pfsense: 2.2.2
HW: i5-8gb ram
VPN: PIA
OpenVPN: AES128

Had same results on bf-cbc and on pfsense 2.1.5 or older.
using PIA for around 2 years now.

would you mind taking some screenshots of your vpn client settings? I tried to change mine from bf-cbc to all the four aes128 options but it didn't connect right. I must be missing something.

[theeddie]

@archedraft:

@someuser123:

am getting 118Mbps on 105Mbps down

its been consistent.

pfsense: 2.2.2
HW: i5-8gb ram
VPN: PIA
OpenVPN: AES128

Had same results on bf-cbc and on pfsense 2.1.5 or older.
using PIA for around 2 years now.

would you mind taking some screenshots of your vpn client settings? I tried to change mine from bf-cbc to all the four aes128 options but it didn't connect right. I must be missing something.

cbc is port 1194
aes is port 1196

[archedraft]

@theeddie:

cbc is port 1194
aes is port 1196

Well AES with port 1196 seems to work a little better but it still maxes out around 40 Mbps.

@someuser123:

am getting 118Mbps on 105Mbps down

its been consistent.

pfsense: 2.2.2
HW: i5-8gb ram
VPN: PIA
OpenVPN: AES128

Had same results on bf-cbc and on pfsense 2.1.5 or older.
using PIA for around 2 years now.

I would still really like to see a screen shot your client VPN settings, just to compare our settings.