Proton via the router is super SLOW

Hi again, been playing around with installing the VPN in the router, but the speed is very slow.

  • My Router is an Asus RT-AX55 (latest firmware).
  • I have a fiber connection 1000/1000.
  • I have ProtonPlus.
  • Using OpenVPN on AsusWRT.
  • “Country configs” tired both UDP & TCP.
  • Tried “standard server configs” Plus server.

If I use the VPN via the router I get around 60~, that’s pretty low coming from 1000/1000.
any help would be appreciated, so I can use those 10Gbit Servers.

TL:DR your router is too weak

you will never see 1Gbps up and down on a all in one router and let alone a consumer router. hell my Pfsense box can push just under 600 mbps on a 10gbps internet connection with a i7 6700 i doubt a 4c 256MB arm router can push more then 100mbps

I use an Asus router (AX88) as well, but your particular model doesn’t have the hardware to deal with the encryption needed to run a VPN, and another problem is that you’re running stock firmware.

You should get an Asus AX86 or Asus AX88, both have the hardware you need to reach close to the speeds you want. Also, install Merlin firmware.

A cheaper and more flexible solution is a wireguard router made with a raspberry pi 4. It can provide wifi or a lan connection and will pull 300mbit.

I got three up and running ATM. 2 providing a VPN with a US and UK ips and finally one providing Tor.

This way I got 4 wifi networks. ISP, US, UK, Tor. Then I have 3 Chromecast for the tv which means I can stream services for either US or UK and my native ISP.

I don’t believe Asus routers with stock firmware support hardware offloading for encryption, so that speed is as good as you’re going to get (actually, faster than I would have expected).

If you have an Asus router that supports Merlin firmware, you can do hardware offload, but still, consumer grade routers just don’t have enough power to do OpenVPN effectively… Maybe you’d get 100 - 150 mbps max.

I’m not sure if Asus routers support WireGuard yet, but if they do, try that. It’s still not going to come close to your Gigabit line, but it should be faster.

Reality is… If you really want to saturate a gigabit connection on a VPN, you need pro-sumer or better hardware, or a decently powerful pfSense box.

For reference: I’m waiting to buy the new Ubiquiti DM Pro SE. That’s $500 USD, and I don’t even think that will saturate my gigabit connection. If I get 500 mbps, I’ll be happy.

Unfortunately not in this combination (ASUS router and ProtonVPN). I was also thinking a lot about it, in the end I just accepted that the only way for a fast OpenVpn connection is when it’s hardware accelerated. So as mentioned before you need to upgrade the router if you want to keep ProtonVPN. The Asus RT-AX88U with merlin is super easy to setup and also really fast

60 Mbps on OpenVPN protocol it’s normal. Don’t expect higher speed on OpenVPN

I have a RT-AX86U and a 100Mbps fiber internet connection. When I first got the router I was getting the whole 100Mbps through an OpenVPN connection but at some point in the last couple of weeks (I don’t think there was a router firmware update) this has dropped to 30Mbps or below. I don’t think it’s a hardware limitation? I looked at the merlin firmware and it doesn’t look like it’s been updated for my router in over a year, so would that be an improvement?

that’s not true, I can achieve that easily via lan no VPN.
and Wifi 6 I get around 750.

Everyone keeps saying this, but it is clearly NOT the issue.

I have an Asus AX89x with a quad-core 2.2GHz CPU. The CPU and RAM hardly even take a hit when I activate my ProtonVPN. The CPU stays under 10% load and the RAM is low as well. Everyone always wants to say “it’s your router hardware” in these threads. I dont think that is the case. I think ProtonVPN just sucks on Asus routers.

I have over 1000Mbps down and 25 up constantly through my coax connection. I’ve tested over 20 times randomly throughout the last month. It is always the same speed within 10Mbps or so. Very consistent…

As soon as I activate ProtonVPN, my speeds TANK to below 200Mbps regardless of the settings that I choose. TCP is slowest obviously, Country Configs are generally faster than Secure Configs, etc, but nothing gets over 200Mbps down. It cuts my speed by 5-10 times if I want to use ProtonVPN at the router-level for my entire network.

I do have a AX92U?
Would that one work?

Interesting!
Could you point me to guide or something :slightly_smiling_face:

ah okay. I guess I’ll use the software then.

Not sure if the stock Asus firmware is capable of managing a Wireguard client, but last I saw Merlin has no intention of doing so: http://www.snbforums.com/threads/wireguard-client-for-asus-ac-rt3100.61899/post-552714

Thanks for the info about hardware offloading; I need to look into that.

Looks interesting, seems a little bit outdated
Is it subscription based?

I couldn’t find the under the router install?
can it be done?

Everyone just tells me it’s the router that the problem. Can I use anything else than OpenVPN?

your router is encrypting and decrypting all of your traffic on the vpn tunnel

Any consumer grade hardware will just push 1gbps but as soon as you add some thing else to that it implodes ie your 1000/30 connection goes to 90/30 - 200/30

Also arm hardware 90% of the time doesn’t have good single core speeds and no hardware acceleration

So it isn’t just your asus router is every consumer router that the manufacturer cut corners on

Not sure, but you can Google your model and AES-NI, which is what is needed for faster encryption. I know for sure that RT-AC86U, RT-AC2900, GT-AC2900, GT-AC5300, RT-AX86U, RT-AX88U, RT-AX5300, RT-AX11000 are supported. On a side note, higher number doesn’t necessarily mean better or newer.

Edit: I believe your model (AX92U) does have AES-NI. You should install Merlin on this router and manually configure the OVPN files. Just be aware that you’ll never achieve 1000/1000 with a VPN on.