Ysurac
commented
4 years ago Shadowsocks + Glorytun TCP is the default. Chacha20 is the default on system without AES HW support (else AES is used as default). For crypto:
- Not doing crypto use less CPU, but it's not recommended (because it's not crypted, but use less CPU).
- Chacha20 is used on CPU without AES support, this use less CPU than AES in this case
- AES is used on CPU with AES support on both side (vps and router), this is fast and don't use much CPU.
For proxy:
- Shadowsocks can be used for TCP only
- V2Ray should work for TCP and UDP. It can do reverse proxy for ports forwarding. As V2Ray is new in OpenMPTCProuter, I can't say which one is better yet. You need to test.
For VPN:
- Glorytun TCP. It's the default
- Glorytun UDP, it use his own aggregation method based on UDP
- MLVPN, use also his own aggregation method based on UDP
- DSVPN and OpenVPN are TCP based, like glorytun TCP I can't say which one is the best, you need to test for your use case. VPN is used for anything that is not TCP if shadowsocks is used, and anything that is not TCP or UDP if V2Ray is used, and for all if no proxy is used (it's slower)
MPTCP over VPN use OpenVPN UDP and should be used only if a provider filter MPTCP (and if you are sure it's really the case).
In MPTCP settings, using BLEST scheduler help when there is LTE/wifi connections, using Cubic as TCP congestion control help with bad connections but BBR is better if connections are good.
If VPS is showing a load problem, change VPS. If the router can't support the speed, use a better architecture/CPU, a RPI(2/3/4) will never work well to aggregate 1Gb/s for example.
Malaga82
and
Does it mean that MPTCP is used for proxy part and for UDP ( or other protocols not covered by shadowsocks for example ) the VPN uses its own aggregation that is not necessary MPTCP, right?
Adorfer
that is the same as glorytun TCP, maybe since UDP is using MUD, this value could be just "dummy".
github-actions[bot]
selection of protocolls and crypto: i am looking for an "algorithm/decision flow chart"
as far as i understand there is
different handling for UDP and TCP payload
additional VPN for TCP neccesary if a WAN provider filters MPTCP
different type of crypto or "none"
what are the Pros and Cons of different methods?
does "not doing any crypto" help for performance
are there recommended settings for "OMR without AES-NI, weak CPUs" in combination with "multiple +100MBit/s WANs"?
what are recommended settings if VPS is showing load and/or latency often, in order to improve?
For reference: Those are the settings im am unsure about. with a fast OMR + fast VPS i do not spot differences (but perhaps i did not try the relevant combinations). On the other hand i have an old OpenVPN-only-Setup which seems limited to 70MBit/s in DS, whatever i do (switching methods), despite beeing on a 1000MBit/s WAN (on which a modern OMR gives full power)