another update. I went to a local store that has fiber >60mbps, connected to wifi with my phone and used the WG tunnel to my NAS. the connection was stable and achieved almost max bandwidth. the most important was that the download rate was stable at all times. on another thought, i should have ment...

speedtest through the vpn tunnel is fine. downloading a file from the NAS through the vpn is slow. it can be fast, but it is random and most of the time couple kB/s i dont have any mangle rules. the IP route is added to the table automatically when the connection is established. i have seen this liv...

hi all. i still have speed issues. only a couple kB/s to my NAS.
oepning a port to the router and doing file transfers via port forwarding without tunnel is fine, i get full bandwidth.

does my firewall look ok?

hi. yes, i observed most load on a single core of the router. The cpu load of hap ac3, when transfering files is 20-30%, avg 25%, but i dont think this explains the slow download speed. i checked the links between peers(pc-hap ac3) on the zerotier central and using the zerotier-cli on windows, they ...

In case anyone is interested. see how I solved my problem in this post. viewtopic.php?p=902212#p902212
thanks to all for your help either way.

yea, as soon as i changed the 0.0.0.0/0 to 10.0.0.0/16 (lan subnet) and 10.1.0.0/24 (WG subnet) on my client's configs, I get the full bandwidth now. see pic: wg_cfg.PNG no. im not on site(home), but i have figured out the wireguard speed issue. i was not split tunneling, and my devices had all the ...

no. im not on site(home), but i have figured out the wireguard speed issue. i was not split tunneling, and my devices had all the traffic go through the WG tunnel, youtube etc and the NAS download speeds were slower for this reason, since the TIK had other stuff to do as well. So now i will just do ...

so a little update. i ran a speedtest through the wireguard tunnel using my mobile phone.. phone-->WG<--Tik--->speedtest and i get almost full upload speed @42mbps(out of 50). see screenshot below. downloading a file from my NAS behind the Tik, through the WG tunnel only happens @ 24mbps and not clo...

I turn on my mobile data with >100mbps 4G Lte, then connect to tailscale and download a file from my remote NAS behind the Mikrotik. the download speed is around 2MB/s (~16mbps), but my ISP speed is 50mbps upload. so i should be getting at least 6MB/s download with my mobile data.. at the same time,...

EDIT: wow.. i just found out why vpn connections /drop/fail/partially work when i establish them from my home network.. I use a hybrid router (adsl + LTE ) and I read online that more users experience vpn issues with hybrid routers.. turning off the bonding tunnel and using raw dsl provides slower s...

I am trying tailscale atm. So far it seems ok. Any idea why the speeds are inconsistend? Download speed reaches my maximum bandwidth but then drops, then goes up all the time. I even set the metric of the tailscale tunnel in windows as the lowest of all adapters, same happens on my phone. It's defin...

I had good performance when i used ZT without it running on the router itself, that is between 2 windows machines. The poor performance was introduced when i moved the peer from the windows machine to the router, since i am out of home and it doesnt make sense to keep the pc on. So i wanted ZT on th...

Yea thats what I thought. But something is wrong(or a bug) since the connection of the client drops as soon as I change AP You can activate keepalive, however the Wireguard protocol should deal silently with an IP address change of one peer at a time even on the fly and dynamically change the socket...

I dont mind giving tailscale a shot. Does it run on mikrotiks? If you're looking for raw performance, ZT would be a poor VPN choose. But if you need a Layer-2 bridging, it's one of your only choices. @Amm0 Your post was very interesting and I 4 1 very much appreciate the effort you put in to describ...

Yes. I think restarting the router and/or the devices' networks and/or closing wireguard applications did the trick. Now I can connect with both my devices to the MT and also ping each other without problem. However , if I disconnect one device(i tested with my phone only) while both pc and phone ar...

NO same public/private keys are used. Any other suggestions?

Added.
Note that i changed the peers' prefix from /24 to /32
Not sure if it's important.

Hi. I have a wireguard tunnel set up on my hap ac3. I have two peers configured in the router with addresses 10.1.0.2/24 and 10.1.0.3/24 for a phone and a windows 10 client. the router itself has an 10.1.0.1/24 address. the firewall rules can be seen in the picture below (rules 1 & 2 are for zer...

How about we start a petition to demand more flash and ram for future products, even if it means higher price?

so any suggestions on my case?

well, it's definitely not Zerotier then. what's your RouterOS? @smyers119 is there a way to test speed only to my mikrotik and not the NAS ? wireguard performance is not that better either. i think something's wrong with the router.. did you test your tunnel? My test topology: PC -->Microtik<-zeroti...

@smyers119 is there a way to test speed only to my mikrotik and not the NAS ?
wireguard performance is not that better either. i think something's wrong with the router..
did you test your tunnel?

My connection speed hardly is 500kbps now. This cannot be normal. I am aware that wireguard is faster in general, but not by that much. and if zerotier is configured properly, i should be at least getting a decent speed.. okay here is my mikrotik config. https://pastebin.com/xBuvv0LG also. heres a p...

I refuse to believe that this is a relay thing. If i move the zerotier peer from the mikrotik router to a windows desktop in the lan of the router, the speed goes up and maxes out. This is a zerotier issue on the router and i have yet to find out how to address it. maybe I have to specifically allow...

My peers make a direct connection, not relayed. Isnt this the fastest link possible? From my understanding, the ZT central is just for letting peers know about the configuration and possible changes. But once the link is established, the peers communicate directly (see 4. in your link). The public I...

Hi. I have been using Zerotier (ZT) v1.6.6 on RouterOS 7.11 for the past few days and i have a speed problem. I use the Hap ac3 as a ZT peer. I think it's better to introduce my configuration first, and then ask for suggestions: -my ZT network is 172.24.0.0/16 and managed on zerotier central -my hom...

Hi. I have been using Zerotier (ZT) v1.6.6 on RouterOS 7.11 for the past few days and i have a speed problem. I use the Hap ac3 as a ZT peer. I think it's better to introduce my configuration first, and then ask for suggestions: -my ZT network is 172.24.0.0/16 and managed on zerotier central -my hom...