Asus tuf ax5400

[xTheAlex]

Good afternoon, I have a problem with Wireguard.
I have a Proton VPN and I downloaded the configuration for the router and when I switch it on, I have a speed of 200 Mbps through the VPN, it's a great speed. And when I download the configuration for the PC and switch it on at the same time, my speed on the PC drops to 300mbit/s instead of 500mbit/s, but here's the problem, when I switch off the VPN configuration on the router, my speed through wireguard starts at the full "500mbit" on the PC. I've noticed that when I switch on the configuration on the PC while the VPN on the PC is on, the router starts booting up, ie booting itself, which shouldn't be the case, the data is going through to the PC and it should be handling it, not the router.

I have tried other VPNs and it is the same if you have two configurations, one on the router and one on the PC, even though the configurations are different.

 

[ColinTaylor]

Post in English only please.

 

[xTheAlex]

Post in English only please.

Sorry, corrected.

 

[Tech9]

As I remember this model doesn't have flow cache bypass in firmware, WireGuard VPN is NAT acceleration incompatible, the reason WAN-LAN throughput is limited to about 300Mbps and the CPU is loaded. When the VPN client is running on a different device (the PC in this case) the router doesn't process VPN encryption through it's own CPU, but the passing traffic packets. In summary - enabled WireGuard client/server on this router model will have negative impact on the entire network.

 

[xTheAlex]

As I remember this model doesn't have flow cache bypass in firmware, WireGuard VPN is NAT acceleration incompatible, the reason WAN-LAN throughput is limited to about 300Mbps and the CPU is loaded. When the VPN client is running on a different device (the PC in this case) the router doesn't process VPN encryption through it's own CPU, but the passing traffic packets. In summary - enabled WireGuard client/server on this router model will have negative impact on the entire network.

When I disable VPN in the router protocol Wireguard and leave the protocol enabled on the PC, the speed on the PC immediately increases to all 500 mbit, that is, the router does not process data but when I enable VPN on the router and disable on the PC and re-enable on the PC, the speed immediately drops to 300 mbit and the router starts to load.

 

[Tech9]

Yes, the moment you enable WireGuard it will limit the entire network to whatever the router's CPU can process with no NAT acceleration, in your case about 300Mbps. This is the expected behavior and there is no fix unless Broadcom/Asus implement flow cache bypass for this model. It was done already for higher end models, but apparently not for low/mid range, perhaps hardware limitation.

 

[xTheAlex]

Yes, the moment you enable WireGuard it will limit the entire network to whatever the router's CPU can process with no NAT acceleration, in your case about 300Mbps. This is the expected behavior and there is no fix unless Broadcom/Asus implement flow cache bypass for this model. It was done already for higher end models, but apparently not for low/mid range, perhaps hardware limitation.

ASUS has solved this problem in routers of more expensive models. Is this problem observed in Tp-Link or only in Asus?

 

[Tech9]

The solution comes from Broadcom and perhaps requires hardware compatibility. The device brand doesn't matter much. What matters is: a) compatible hardware; b) vendor with Broadcom latest software in firmware. I don't know what exactly TP-Link models have both. Similar to Asus, most likely some do, some don't. You have to do some research on TP-Link models.

 

[xTheAlex]

Thanks