Topic

Wiresock poor performance

Viewing 10 posts - 1 through 10 (of 10 total)
  • Author
    Posts
  • #13977
    mikex
    Participant

    I use wiresock for app-level VPN (Chrome), and for speedtest.net, speedtest.cloudflare.com it shows downgrade by 2-4 times:

    w/o wireguard and w/o wiresock: download: 200mbs, upload: 150mbs

    wireguard and w/o wiresock: download: 190mbs, upload: 135mbs

    wiresock: download: 70mbs, upload: 40mbs

    #13978
    Vadim Smirnov
    Keymaster

    I have a 400/400 Mbps connection. Here are the test results using WireSock with a Cloudflare Warp configuration and an MTU set to 1280:

    WireSock Virtual Adapter Mode
    WireSock Transparent Mode

    I recommend checking your MTU settings. Unlike the official WireGuard client for Windows, WireSock does not defragment fragmented WireGuard UDP packets for performance reasons. Therefore, it is crucial to use an appropriate MTU to avoid connectivity issues.

    #13979
    mikex
    Participant

    How to check and ensure that issue is fragmented WireGuard UDP packets?

    #13980
    mikex
    Participant

    Also I use mtu 1280 on both sides – wireguard client and server have mtu == 1280

    #13981
    Vadim Smirnov
    Keymaster

    Normally, you would see the errors in the log. However, please avoid using debug logging during performance measurements.

    #13982
    mikex
    Participant

    can I somehow wireshark for that case?

    #13983
    mikex
    Participant

    does wiresock have public code source?

    #13984
    Vadim Smirnov
    Keymaster

    WireSock CLI includes a built-in feature for capturing traffic and saving it as PCAP files.

    Certain components of WireSock are open source, such as BoringTun and NDISAPI, while others are proprietary but available for commercial licensing.

    #13987
    mikex
    Participant

    Does wiresock implement some complicated logic to handle performance issues as mtu missmatch, packets drops due to processing speed issue?

    I guess wiresock can’t handle high-load traffic for application’s vpn as it intends to process each packet (what I know from ndisapi examples) before send it to Wireguard. But hope I am wrong

    #13991
    Vadim Smirnov
    Keymaster

    Yes, I’ve tested WireSock on a 10Gbps connection, and it has demonstrated decent performance, even outperforming the official WireGuard client in my tests.

    Regarding high-load traffic, while WireSock processes packets before forwarding them to WireGuard, it is designed for efficiency. In practice, it handles substantial traffic loads well without becoming a bottleneck.

    However, I recommend testing WireSock on a clean machine with a well-known WireGuard profile—such as Cloudflare Warp—to rule out any potential software conflicts at the low network level that might impact performance.

Viewing 10 posts - 1 through 10 (of 10 total)
  • You must be logged in to reply to this topic.