openmptcprouter setup and ping overhead

RandomMemory wroteOkay, so I was being scammed I guess by the reseller, Ended up calling terranet and getting a direct subscription with them, the installation is scheduled for the 10th so I'll have to test all this stuff out when the connection is ready. How is Terranet's non parallels download speeds. I suffer with large github repos downloading at 40KB/s because github doesn't allow multiple connections while downloading a single zip.

2Mbit plan, you can see the bit burst effect, overshooting 2.2Mbit due to their PCQ limiter (to keep latency down during congestion)
It also tricks dumb speed testing services like the famous Ookla one during congestion to show 2Mbit, while in reality it's around 1.8Mbit average during peak hours, I had the same effect with 10Mbit plan. I recommend using DSLReports for testing.


(LuCI does smoothing to the graph displaying wrong average unless I run it for 1 hour +)

This is to all Europe servers, doing so with far west American server gets it down to around 200, you can use Cloudflare WARP+ (argo) Wireguard profile as these act like a middle box and tailor TCP settings per client, most VPN providers don't. This issue is universal to any ISP around the world, and it's exaggerated on 100mbit+ connections.

RandomMemory wroteWell for some reason the VPN tunnel always shows as down but it's still bonding if that's what you mean by single mode. This setup is expensive for someone who is not working remotely or getting paid in USD. It's 150k LBP for local wireless guy where the speed goes from 20mbit at 5 am to 7 at 12 pm to 3.5 after 4 pm. Terranet is 12mbps at 270K LBP. so I guess around 420 a month. For me, this lets me do my work extremely efficiently and removes every headache I've had for the past 5 years, so 100% worth it. Also local cable resellers seem to always have high upload speeds for some reason and ogero says my max line speed is 1mbps (imagine 1mbps in 2020)

Wow that's pretty bad, 420K is very high, VPN down but UDP is still aggregating? Just an info for others on how this works:


| WAN 1____________________
| |
VPS __| TCP to MPTCP by the kernel |__Shadowsocks TCP proxy__Glorytun TCP VPN
| WAN 2___________________| | |
|______________________|
\ Firewall splitting /
|__________________|
TCP Everything else minus TCP
\ /
LAN


TCP through VPN:
--------------------|\ VPN /------- MPTCP in this case is congested and
--------------------| }----------{-------- doing paths on one TCP connection
--------------------|/ ------- via VPN, lowering performance.
TCP through Proxy:
--------------------|\ ---Proxy--/-------Side note:Glorytun TCP VPN which is
--------------------| }-----------{-------- responsible for (UDP and others) is the only path
--------------------|/ ------------------- that is congested.(one TCP connection for possibly hundred UDP)

Shadowsocks is used to implement "TCP through Proxy"

UDP based clients are smart enough to be not affected by this, they implement their own packet flow algo, unlike TCP which is a very old standard.
OMR is configured to prioritize Glorytun by marking it with DSCP, then the prioritization is done and detected at Shorewall on the VPS.

RandomMemory wrotewhat do you recommend to fix it. How is my IP showing up from OVH, is that the proxy's work?

Sorry, late edit. See above, I recommend hitting Save and apply in the wizard again, see if that fix it, else look in the System log to see if there is any error.
And yeah, most websites use HTTP1/2 which is TCP, what shadowsocks serve. Youtube, google and few others with the latest Chrome (Windows) are using QUIC/HTTP3 which is UDP, but it fallbacks to HTTP2 if UDP/QUIC is blocked or unsupported. OMR actually blocks QUIC and HTTP3 since TCP over MPTCP performs better in this setup instead of being tunneled via the UDP VPN (glorytun). QUIC/HTTP3 is better on UDP only VPN or direct connection.

wollyka wrote

RandomMemory wroteWell for some reason the VPN tunnel always shows as down but it's still bonding if that's what you mean by single mode. This setup is expensive for someone who is not working remotely or getting paid in USD. It's 150k LBP for local wireless guy where the speed goes from 20mbit at 5 am to 7 at 12 pm to 3.5 after 4 pm. Terranet is 12mbps at 270K LBP. so I guess around 420 a month. For me, this lets me do my work extremely efficiently and removes every headache I've had for the past 5 years, so 100% worth it. Also local cable resellers seem to always have high upload speeds for some reason and ogero says my max line speed is 1mbps (imagine 1mbps in 2020)

Terranet is 12Mbps all day? or does it fluctuate? what is its upload speed alone?

I'll update the image at night if vnstat does not clip few hours, this is from yesterday 12AM till now, wan2 is terranet 2mbit plan. I would be interested to see if the 12mbit plan is the same, I had 10mbit for 2 months with no issues but that was almost 2 years ago.
Downloading MSFS whopping 150GB :)

I expect direct usage will maintain 2mbit average, this is proxied over MPTCP, single flow.

RandomMemory wrote

wollyka wrote

RandomMemory wroteWell for some reason the VPN tunnel always shows as down but it's still bonding if that's what you mean by single mode. This setup is expensive for someone who is not working remotely or getting paid in USD. It's 150k LBP for local wireless guy where the speed goes from 20mbit at 5 am to 7 at 12 pm to 3.5 after 4 pm. Terranet is 12mbps at 270K LBP. so I guess around 420 a month. For me, this lets me do my work extremely efficiently and removes every headache I've had for the past 5 years, so 100% worth it. Also local cable resellers seem to always have high upload speeds for some reason and ogero says my max line speed is 1mbps (imagine 1mbps in 2020)

Terranet is 12Mbps all day? or does it fluctuate? what is its upload speed alone?

It's a symmetrical up and down. I have the connection for 2 days and freaking amazing. it's a consistent 11-11.5mbps all day and it's unlimited. I also have their IPTV subscription running on 2 TVs which takes 6mbps on each TV but the route is different from your internet so it will use up intranet bandwidth instead of internet bandwidth.

I wasn't aware that their IPTV also works on WDSL with separate bandwidth (unlike DSL), thanks for the heads up.
Ignore the Multipath warning, the script tends to do false negatives on heavy load, I'm surprised the author re-enabled it. You can always check if MPTCP is filtered in the MPTCP page. You should see "TCPoptionmptcp capable = sender's key". I hope it's not pfSense that is doing any filtering.