search

WireGuard / wireguard-vyatta-ubnt

WireGuard for Ubiquiti Devices
https://www.wireguard.com/
GNU General Public License v3.0
1.45k stars 68 forks source link

has anyone tried the USG-3p? #128

Open cdoublejj opened 1 year ago

cdoublejj commented 1 year ago

has anyone tried the usg-3p?

jbeez commented 1 year ago

Yes, I have a site2site from my parents usg3p to my pfsense box at my house. I haven't thoroughly tested it but seems fine so far.

Looooopy commented 1 year ago

i have trouble to reach 15Mbit/s but i have a 1000/1000 conntected to a site with 100/100. So that limit the selection on what i can do.

I have tried wireguard on My linux computer/ My linux server and now on unifi USG-3P router to rule out things but have no clue why its so slow.

I have measure with iperf3.

jbeez commented 1 year ago

i have trouble to reach 15Mbit/s but i have a 1000/1000 conntected to a site with 100/100. So that limit the selection on what i can do.

I have tried wireguard on My linux computer/ My linux server and now on unifi USG-3P router to rule out things but have no clue why its so slow.

I have measure with iperf3.

What is your setup, Cable modem/ONT/etc? What feeds into your usg3 for wan service?

On the USG3 do you have QoS/DPI/etc turned on? Those extraneous features can really bog down the performance on those units.

My parents have cable, I believe its 120/12 they get 123/12 on the unifi speed test which isn't even as accurate IMO as iperf, I know those units can perform better than 15mbps.

When you say you are measuring 15mbps, is that overall or only through a wireguard tunnel?

cdoublejj commented 1 year ago

--redacted--

cdoublejj commented 1 year ago

Just to be clear the instructed curl/debian commands in the instructions are to be run on the unifi controller host or in an a SSH session on the gateway it's self?

Looooopy commented 1 year ago

@jbeez I have fiber connection on my end 1GBit both ways on the other side we have fiber 100Mbit both ways.

I have disabled DPI no change. I can't see the CPU go up much neither and no peak on memory on the USG. I have measured internally throug the network behind the wireguard instace and i can max out a connection to 2.5 GBit on my end.

I have also tried 5G connection as external interface with exact same problem.

So there is something that must be problematic on the USG, because i have also tried port forwarding to an instance wireguard server to my own machine with the same result.

15Mbps is then i tunnel and thats the maximum but a bit jumpy, but when i do not tunnel i get my 1GBit fully usable.

Looooopy commented 1 year ago

Just to be clear the instructed curl/debian commands in the instructions are to be run on the unifi controller host or in an a SSH session on the gateway it's self?

ssh on the gateway, but those are not petsostent so you need to distrubute the json if you dont want to redo it.

psonnosp commented 1 year ago

Are there a guide for making this work somewhere? Can only find stuff regarding other devices.