L2TP IPSec VPN is pretty slow on MikroTik RBD52G-5HACD2HND-TC

VPN
1

Hi, My L2TP IPSec VPN is pretty slow, I got only 5 mbps down and about 3 mbps up when my internet connection is 600 mbps download and 150 upload (I mean where the VPN server is).

Tested it on Samsung Galaxy S7 connected to LTE+, without VPN connection I got 90 mbps down / 70 up, when VPN is connected, speed downgrade to maximum of 5 / 3 mbps.

My router is MikroTik RBD52G-5HACD2HND-TC with the latest updates installed.

Connection is stable but very slow. I believe I could get more/faster VPN speeds with this MT router. Didn’t try with the IPSec off, could it be a problem?

I attached some screens with my config below,

https://i.imgur.com/1TBMgpP.png

Thanks for any suggestions

2

Did you follow the following configuration?
https://www.reddit.com/r/mikrotik/comments/g3s7ev/is_there_a_recentmodern_l2tpipsec_tutorial_for/fntngot?utm_medium=android_app&utm_source=share&context=3

3

Try with IPSEC off. Also, when speedtesting is your CPU usage get high?

4

Xport your config and post here. Sanitize as needed.

Also, how are you doing your speedtest on and off vpn.

5

Did you check you ipsec encryption algorithms? According to https://wiki.mikrotik.com/wiki/Manual:IP/IPsec#Hardware_acceleration you should use AES-CBC+ SHA1/AES-CBC+SHA256/AES-CTR+ SHA1/AES-CTR+SHA256, or you won’t get hardware acceleration.

Run /ip ipsec installed-sa print after a successed connection, if hardware acceleration is enabled, there will be a “H” at the second column ( right of the line number ).

6

Try with IPSEC off. Also, when speedtesting is your CPU usage get high?

I just did a speedtest and got 15 mbit which is the best result so far (upload pretty slow) but have a look below, cpu usage was only at level of about 11%

https://i.imgur.com/gTnn9IL.png

7

speedtest

I am using speedtest app on my Galaxy S7 edge.

How do I test? Switch off WIFI > Connect to LTE+ > do a speedtest (get a result for about 90 mbps), close the speedtest app > connect to VPN and test again (and get a result for 10 mbps only).

8

Ok, well then its some kind of configuration issue.

9

Please know that routing to and from multiple networks, which will add latency, which will reduce bandwidth.

​

Essentially, with VPN, you’re routing from your phone > LTE network > into Home ISP network > out of Home ISP network > Speedtest.

Essentially, without VPN, you’re routing from your phone > LTE network > Speedtest.

While your home internet may be X speed, there’s no guarantee that your ISP and LTE networks have a direct connection, which will slow down speeds. This is common and why Verizon and Netflix were fighting each other for years.