horrible speeds over VPN

Need Help?

That's what we're here for! The goal of the Rogers Community is to help you find answers on everything Rogers. Can't find what you're looking for? Just ask!
cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
I Plan to Stick Around
Posts: 21

horrible speeds over VPN

Hi,

I recently switched to Rogers gigabit from Bell. I have a CODA-4582 modem, firmware 2.0.10.34T6.

I frequently work from home connecting to work over a Cisco VPN.


Everything is much slower compared to when I was on Bell and compared to a friend using a TP-Link modem on Teksavvy.

 

This post seems to indicate a problem with processing VPN traffic:
http://communityforums.rogers.com/t5/Internet/Rogers-Hitron-CODA-4582-Hardware/td-p/378263/page/150

 

I won't pretend to understand it all but I can definitely see there is a problem with this modem related to VPN traffic.

 

Copying down large files is out of the question now and RDP connections are much less responsive.
During a file copy I see speeds around 1-2 Mbps and sometimes only a few 100 KBps. On Bell it was a steady 4-5 MBps.

 

I've tried bridged and gateway mode doesn't matter.
It seems there has been some issue about this since 2016.  Is there any resolution?

I'd be willing to try beta firmware, different modem (though I imagine nothing else is available).

 

Its great and all that 5 people in the house can stream 1080p youtube but it kinda kills things for me if simple telework activities are crippled by modem firmware.

 

*** Edited Labels ***

I Plan to Stick Around
Posts: 39

Re: horrible speeds over VPN

Reset your modem it will roll back to the old firmware. The current firmware is very unstable. but it may not stay for long as your modem may try to update

I Plan to Stick Around
Posts: 21

Re: horrible speeds over VPN

Tried factory reset comes back with same firmware.

I noticed speeds are better for a short time after rebooting slowly getting back to the crippled state.

Almost like a buffer or something on the modem overflows and it can't keep up.

Moderator
Moderator
Posts: 365

Re: horrible speeds over VPN

Hello @hoek,

 

Thank you for your post and welcome to the Rogers Community Forums!

 

Having your ability to Work from Home become impaired due to slow speed issues can become super disruptive! We definitely want to take a closer look into this to see what is going on. We can start by answering the questions below:

  • Have you tried connecting with an alternative VPN?
  • Have you confirmed no issues with your VPN settings/routing?
  • Have you reached out to your VPN provider?

We are not aware at this time of any VPN connection issues with our production firmware. Our testers have confirmed no known concerns at this time.

 

We look forward to hearing back from you!

 

RogersTony

I Plan to Stick Around
Posts: 21

Re: horrible speeds over VPN

  • Have you tried connecting with an alternative VPN?
  • Have you confirmed no issues with your VPN settings/routing?
  • Have you reached out to your VPN provider?

 


I've tried both my workplace's VPN and my wife's.  Both the same behaviour.  Laggy RDP connection, slow file copy. I use a Cisco client she uses an Avaya client.  Both are IPSec.

 

Nothing has changed with the VPN settings compared to when the connections worked fine while on Bell fibe.

My VPN provider is my employer and they aren't about to change anything for 1 employee when everything was fine before and hundreds of remote users have no issues.

 

I should have taken a video when I still had Bell.  The difference is very obvious.  Also the fact that a colleague who switched from Bell to Teksavvy sees more stable and faster speeds using the same VPN compared to me adds more weight to it being the Rogers modem.

Check the link I mentioned... "slow IPSEC throughput has already been noted on the Hitron CGN3xxxx and CODA-4582 modems".  

I Plan to Stick Around
Posts: 39

Re: horrible speeds over VPN

Test the speed on a different connection. I think it may be your VPN not the Rogers connection. What are your speeds when you are disconnected from the VPN? 

I Plan to Stick Around
Posts: 21

Re: horrible speeds over VPN

There is no issue with the Rogers connection.  Speeds are well within spec with typical http/https activity.

The issue is with IPSec VPN (specifically) traffic  through this modem.  Is there no one that can validate whether IPSec is indeed hampered by this firmware as the various posts seem to indicate?

 

I'll try to get some screen caps of what I'm seeing.  I can probably even get a VM on Azure going to test the VPN throughput from there.

Resident Expert
Resident Expert
Posts: 5,635

Re: horrible speeds over VPN

Low IPSEC rates through the CGN3 series (Intel Puma 6 modem) and the newer CODA-4582 (Intel Puma 7 modem) are a known problem.  Having said that, higher IPSEC rates have been observed, but, that might depend on the IPSEC configuration settings and the capability of your pc to support client IPSEC/VPN use.

 

Personal opinion, if you have access to Bell fibre, your best bet is to:

 

1.  sign up for Bell Fibre

 

2.  Replace Bell's Home Hub 3000 as outlined in the following link with a gigabit fibre to ethernet converter:

 

http://www.dslreports.com/forum/r31118482-Yes-you-CAN-bypass-the-HomeHub-3000

 

3.  Connect the fibre to ethernet converter to:

 

     a.  An Asus RT-AC86U with Merlin's Asuswrt loaded (IPSEC support is enabled);

 

     b.  A pfSense router built with a CPU containing AES-NI capability which will support VPN

          & IPSEC requirements.  Here's a thread that discusses this:

 

https://news.ycombinator.com/item?id=14239580

 

     c.  A business class router which will support VPNs.

 

Doing some background reading on this yesterday I came across a note indicating that pfSense 2.5, which is not out, will require a cpu containing AES-NI capability in order to support route-based IPSEC operation.  

 

https://www.netgate.com/blog/pfsense-2-5-and-aes-ni.html

 

As far as the Puma 6 & 7 situation with IPSEC and VPNs, this has been a long standing problem and there hasn't been any comment from Rogers or Intel regarding any plans to resolve the low throughput problem.  I suspect that this actually dates back to the Puma 5 which was developed in the 2008 timeframe by Texas Instruments.  Whatever limits or design issues that exist in the Puma 5 firmware may have been carried forward into Intel's Puma 6 and 7 firmware development without anyone taking a close look at those limits or design issues.  This is an Intel issue to resolve, Rogers or Hitron won't be able to do anything until Intel expends some effort on this.  At the present time Intel has its hands full resolving other latency issues with the Puma 6 modems, DOS issues with the Puma 5, 6 and 7 modems, and a fighting class action lawsuit or two over the latency issues in the Puma 6 modems.

 

Plan B would be to move to a TPIA such as Start, TekSavvy or Ebox and use a Technicolour TC4400 modem which is a Broadcom modem.  That isn't cleared for use on Start or Techsavvy at the present time, but is available with EBox.  So, your options would depend on where you're located.  Ideally the TC4400 would be available for all TPIAs.  The TC4400 is DOCSIS 3.1 capable, which is currently in use with Rogers.  In terms of IPSEC/VPN performance, you would have to do some research, looking for comments from other users to determine if this would really be a viable option for your VPN use.   You would want to avoid an Intel Puma 5/6/7 modem and look for a Broadcom modem, but, you would definitely have to do some homework to determine the suitability of any of the TPIA offered Broadcom modems, specifically for VPN use.  



I Plan to Stick Around
Posts: 21

Re: horrible speeds over VPN

Thanks for confirming it.

Bell fibre isn't an option in my area.

 

I guess I should have stuck with Teksavvy 250 so I could pick a different modem and avoid this Puma nonsense.

I had my hands on a TP-Link docsis 3.0, broadcom based modem. Then stupidly switched to Rogers at the last minute due to, of course, a deal that undercut TS and offered gigabit for less slightly less than TS 250.

The truth is gigabit is great if everyone in your house is power downloading.  Otherwise it's really nothing more than bragging rights.

 

I've confirmed with a colleague that the TP-link (docsis 3.0) modem on Teksavvy 75 Mb provides a more stable connection with higher throughput to our workplace VPN than the Hitron.

 

I guess I have no choice but to switch to another provider so I can use another modem.

Resident Expert
Resident Expert
Posts: 5,635

Re: horrible speeds over VPN

@hoek pm sent.  Check your message inbox.  Follow the avatar (link) at the upper right hand corner when you're logged into the forum.   That will take you to your profile and message inbox/outbox.



What's New
Topic Stats
  • 39 replies
  • 1227 views
  • 8 Likes
  • 11 in conversation