Hello everyone,
I’m experiencing very poor data throughput with my NetBird installation.
When transferring a 100 MB test file via SCP over the VPN, I only achieve around 500 KB/s. Both servers (SRV1 and SRV2) are hosted directly on the internet in a data center. When I establish the same SCP connection without the NetBird tunnel, I consistently get at least 20 MB/s.
What could be causing this issue?
Environment
- Dedicated NetBird server (VM) hosted in a data center
- SRV1 (VM) hosted in a data center
- SRV2 (VM) hosted in a data center
- All systems are running on different physical hosts
Any ideas on what could be causing such a significant performance drop when using NetBird?
Thanks in advance!
Netbird Version: 0.79.0
netbird status -dA
Peers detail:
proxy-dakd21kaq12c73bsqfgg-254-4.anon-cCdOu.domain:
NetBird IP: 100.64.254.4
Public key: C7a3b3QZ1LbFeMq3Mm32hgkdGxI+RpGBZWhN5LEPLSw=
Status: Idle
-- detail --
Connection type: -
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: -
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s
proxy-dan75fkaq12c73e7o1v0-254-58.anon-cCdOu.domain:
NetBird IP: 100.64.254.58
Public key: VrNRKcP55f7H82B9KzI+htdToAtiB7VbzSjXl/Gt7FQ=
Status: Connected
-- detail --
Connection type: Relayed
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address: rels://vpn.anon-MdLNp.domain:443
Last connection update: 19 minutes, 19 seconds ago
Last WireGuard handshake: 1 minute, 22 seconds ago
Transfer status (received/sent) 237.6 KiB/288.3 KiB
Quantum resistance: false (connection might not work without a remote permissive mode)
Networks: -
Latency: 0s
proxy-dajb45saq12c73fo8lsg-254-78.anon-cCdOu.domain:
NetBird IP: 100.64.254.78
Public key: X53nAke0MQarPpPQJERRxkXS4tVhlRr4uqNFviaVETo=
Status: Idle
-- detail --
Connection type: -
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: -
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s
srv1.anon-cCdOu.domain:
NetBird IP: 100.64.254.142
Public key: All6f5RliGSiKXsvII5P2l9e4A7F39yMEm1uEBEraAs=
Status: Connected
-- detail --
Connection type: P2P
ICE candidate (Local/Remote): host/host
ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.1:51820
Relay server address: rels://vpn.anon-MdLNp.domain:443
Last connection update: 1 day, 19 hours ago
Last WireGuard handshake: 25 seconds ago
Transfer status (received/sent) 2.4 MiB/2.4 MiB
Quantum resistance: false
Networks: -
Latency: 7.549003ms
iphone-michael.anon-cCdOu.domain:
NetBird IP: 100.64.254.154
Public key: 8Wj0QAWtsIWBuRTyaZO/30ICr4L151kuByqqEIa5IUs=
Status: Idle
-- detail --
Connection type: -
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: -
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s
ha-srv03.anon-cCdOu.domain:
NetBird IP: 100.64.254.168
Public key: 3tLDiHCKaGQgsbmA3ksHYD2ToqHXoAXXHVeHatmNuVI=
Status: Connected
-- detail --
Connection type: Relayed
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address: rels://vpn.anon-MdLNp.domain:443
Last connection update: 18 hours, 12 minutes ago
Last WireGuard handshake: 27 seconds ago
Transfer status (received/sent) 103.5 MiB/435.2 MiB
Quantum resistance: false
Networks: -
Latency: 25.17517ms
michael-harperscheidts-mac.anon-cCdOu.domain:
NetBird IP: 100.64.254.191
Public key: aY6Qw8nXrAXNFvUGrj4qaPzGO8B+WtfvF1KxETpbWFY=
Status: Idle
-- detail --
Connection type: -
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: -
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s
ha-srv01.anon-cCdOu.domain:
NetBird IP: 100.64.254.192
Public key: aB4M4rrFssrUL8mDeg1JS+j3nqw9uG3/IXfTCLjthks=
Status: Connected
-- detail --
Connection type: P2P
ICE candidate (Local/Remote): host/srflx
ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.2:51820
Relay server address: rels://vpn.anon-MdLNp.domain:443
Last connection update: 18 hours, 15 minutes ago
Last WireGuard handshake: 1 minute, 55 seconds ago
Transfer status (received/sent) 1001.1 KiB/1.0 MiB
Quantum resistance: false
Networks: -
Latency: 23.161137ms
mail01.anon-cCdOu.domain:
NetBird IP: 100.64.254.223
Public key: 6oTZWRMMUx09YVa0vaW+NIpSMNKjL/LxRECLEQiybU4=
Status: Connected
-- detail --
Connection type: P2P
ICE candidate (Local/Remote): host/srflx
ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.3:51820
Relay server address: rels://vpn.anon-MdLNp.domain:443
Last connection update: 1 hour, 27 minutes ago
Last WireGuard handshake: 25 seconds ago
Transfer status (received/sent) 80.8 KiB/82.9 KiB
Quantum resistance: false
Networks: -
Latency: 134.124803ms
proxy-dajahs4aq12c73837dgg-254-240.anon-cCdOu.domain:
NetBird IP: 100.64.254.240
Public key: hQGBK1xwAMakO/9aMTOxQgsm9rEBo/XhUiqK/kD8NgQ=
Status: Idle
-- detail --
Connection type: -
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: -
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s
vpn.anon-cCdOu.domain:
NetBird IP: 100.64.254.242
Public key: Aktn4y6vncL+kjNR9Wkbu3n5fsDlN+SNrhrh8dMJj3I=
Status: Connected
-- detail --
Connection type: P2P
ICE candidate (Local/Remote): host/host
ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.4:43724
Relay server address: rels://vpn.anon-MdLNp.domain:443
Last connection update: 1 day, 19 hours ago
Last WireGuard handshake: 2 minutes, 9 seconds ago
Transfer status (received/sent) 2.2 MiB/2.5 MiB
Quantum resistance: false
Networks: -
Latency: 16.439355ms
home-assistant.anon-cCdOu.domain:
NetBird IP: 100.64.254.250
Public key: duduY02R8Ye2MlmrGE1nr1D2UwPFa1r2a2inYZFhkBE=
Status: Idle
-- detail --
Connection type: -
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: -
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s
Events:
[INFO] SYSTEM (e48f6b4b-3885-40c4-85d2-b80e85d1be7a)
Message: daemon config changed (source=startup)
Time: 1 day, 20 hours ago
Metadata: source: startup, type: config_changed
[INFO] SYSTEM (16cd97d6-39ca-4e31-8799-6f0e52ccd426)
Message: Network map updated
Time: 1 day, 20 hours ago
[INFO] SYSTEM (4c7e4ae5-647e-4ed4-9b7f-f1062576d406)
Message: Network map updated
Time: 1 day, 20 hours ago
[INFO] SYSTEM (72f4fe45-9349-4609-bb64-4501f015b5db)
Message: Network map updated
Time: 1 day, 20 hours ago
[INFO] SYSTEM (0a6887c1-0eae-4270-b49e-640a25d934b5)
Message: Network map updated
Time: 1 day, 20 hours ago
OS: linux/amd64
Daemon version: 0.79.0
CLI version: 0.79.0
Profile: default
Management: Connected to https://vpn.anon-MdLNp.domain:443
Signal: Connected to https://vpn.anon-MdLNp.domain:443
Relays:
[stun:vpn.anon-MdLNp.domain:3478] is Checking...
[rels://vpn.anon-MdLNp.domain:443] is Available via ws
Nameservers:
FQDN: srv2.anon-cCdOu.domain
NetBird IP: 100.64.254.86/24
Interface type: Kernel
Wireguard port: 51820
Quantum resistance: false
Lazy connection: true
SSH Server: Disabled
Networks: -
Peers count: 6/12 Connected