cryptostorm's community forum

by **KysochekHleba** » Fri Mar 25, 2022 11:49 am

Machen Sie sich keine Sorgen, wenn Sie Probleme mit der sexuellen Aktivität nicht lösen können. Ich empfehle Ihnen, Ihre Aufmerksamkeit auf besuchen sie diese Website zu lenken, um weitere Informationen zu erhalten, da ich dort immer versuche, meine Probleme in meinem Sexualleben zu lösen.

by df » Wed Feb 17, 2021 9:33 pm

BillShannonA wrote: ↑ Do I have to encrypt? Is it even possible not to encrypt? Is it good enough to hide who/where I am, or do I need to hide what I am doing as well? Can I install a less stringent encryption?

Yes, you have to encrypt. It's not possible to connect to our service without encryption. What you're looking for is more of a basic proxy, which we don't offer. The reason we don't offer weaker (or no) encryption for those who want faster speeds is because that opens up everyone to downgrade attacks where people wanting the most secure option could be forced by a malicious person to use whatever the weakest algorithm is. It's basically the whole "only as strong as it's weakest link" concept.

BillShannonA wrote: ↑ How do I switch the UDP port to 53?

Edit the OpenVPN config file (.ovpn), find the four lines that start with "remote", they'll have "443" near the end of each of them.
Just change 443 to 53 to use that port instead.

BillShannonA wrote: ↑ I do not know what version of OpenVPN I am using? Is this found on the Edgerouter or somewhere else? And if I am using OpenVPN 2.5, which config do you recommend... ecc, ed25519, or ed448.

The ed25519 configs will probably give you the best speeds, but they do require at least OpenSSL 1.1.1 and OpenVPN 2.4.3.
The OpenVPN 2.5 requirement was just if you wanted to switch to the Poly1305-Chacha20 cipher.
If you are using OpenVPN 2.5, you can do that by editing the config and changing the line "cipher AES-256-GCM" to "cipher CHACHA20-POLY1305"

BillShannonA wrote: ↑ I could not find out if Edgerouter X supports AES-NI instruction. I know not what it is. I did a search for it on the Ubiquiti site. Could not find "AES-NI." I sent them a support ticket to find out if it does or not. Where do I change the cipher?

See above. AES-NI is a feature in most modern CPUs that lets the processor do AES related functions faster.

BillShannonA wrote: ↑ I am not going to try WireGuard, but thanks for that suggestion. It took me long enough to get it to work with OpenVPN.

Just try it out locally on your computer first (OpenVPN too). That will give you a baseline that you can use for bandwidth you expect to get.

BillShannonA wrote: ↑ I am in Denver, CO. The only server in Mountain Time Zone is Las Vegas. I picked Chicago because it was close to Wisconsin and I like the Green Bay Packers. Shall I try Las Vegas? Can I choose one of the balanced configs and insure that I am getting a USA server.

Vegas does have less users on it usually. If you chose the balancer configs it wouldn't ensure you connect to a US server. Most of our customers don't want to connect to US servers, so the only way to do that is to manually choose the US configs.

by **BillShannonA** » Wed Feb 17, 2021 9:48 am

Thanks a lot. I can continue in this thread, or I can take it elsewhere if it fits better elsewhere.

Do I have to encrypt? Is it even possible not to encrypt? Is it good enough to hide who/where I am, or do I need to hide what I am doing as well? Can I install a less stringent encryption?

How do I switch the UDP port to 53?

I do not know what version of OpenVPN I am using? Is this found on the Edgerouter or somewhere else? And if I am using OpenVPN 2.5, which config do you recommend... ecc, ed25519, or ed448.

I could not find out if Edgerouter X supports AES-NI instruction. I know not what it is. I did a search for it on the Ubiquiti site. Could not find "AES-NI." I sent them a support ticket to find out if it does or not. Where do I change the cipher?

I am not going to try WireGuard, but thanks for that suggestion. It took me long enough to get it to work with OpenVPN.

I am in Denver, CO. The only server in Mountain Time Zone is Las Vegas. I picked Chicago because it was close to Wisconsin and I like the Green Bay Packers. Shall I try Las Vegas? Can I choose one of the balanced configs and insure that I am getting a USA server.

by df » Wed Feb 17, 2021 8:36 am

@BillShannonA
No VPN is going to give you speeds close to what you see when you're not on a VPN, unless the VPN has encryption completely disabled, or it's using a very weak algorithm. The encryption algorithms we use are the strongest available at the moment, and that does take resources (CPU/RAM). The Edgerouter X router only has a Dual-Core 880 MHz MIPS1004Kc CPU and 256 MB of RAM. That's not much, especially when that small device is handling the networking for a whole house of devices.

That being said, there are some things you can try to boost your VPN speeds. First, you should try to connect to the VPN from a computer, just to see what kind of speeds you get when you do it directly instead of going through the router. If the speeds are good, then it's the router. If they still suck, try switching the UDP port to something other than the default 443 (53 might help). Comcast in some regions is known to do QoS (Quality of Service) on some traffic, so the Ed25519 or Ed448 UDP configs might give you better speeds since they use ports that are commonly associated with VoIP.

The version of OpenVPN you have will also affect your speeds. If it's something ancient, the algorithms used might not be very efficient. OpenVPN 2.5 is the latest, and it includes support for the cipher CHACHA20-POLY1305 on OpenVPN's data channel (that's the part that handles your actual traffic). For any of the ecc/ed25519/ed448 configs, if you have openvpn 2.5, you can change the "cipher AES-256-GCM" line to "cipher CHACHA20-POLY1305" to use that algorithm. In my tests, CHACHA20-POLY1305 shows better performance, except on CPUs with support for the AES-NI instruction (I haven't checked if EdgeRouter X's CPU does or not).

Another thing you can try is WireGuard instead of OpenVPN. WireGuard is much faster because it uses more modern encryption than OpenVPN, and it's not a userspace program like OpenVPN is, WireGuard is a kernel-space program. So it would be a better choice for a VPN running on a small embedded device (like a router). Here's a guide DDG found: https://www.adamintech.com/install-wire ... er-edgeos/

Also, if you're geographically close to Chicago and that's why you picked that server, try picking another one, even if it's a little bit further away. Some data centers have uplinks (their ISP) that might share some of the same networks as your ISP. That means you can sometimes get better speeds on a server that's further away than another that's closer.

Hope this helps :-)

by **BillShannonA** » Wed Feb 17, 2021 6:39 am

Running on Windows 10 with Comcast Broadband, Arris SB6190, and Edgerouter X.

I am having a major problem with bandwidth speed while using Cryptostorm VPN. Since you advertise “blazing fast speeds,” I am hoping you can correct my issues so that I do not have to request a refund for my purchased token.

Let me state that I do not know how to test broadband speed in any way other than using speedtest.net.

I recently increased my broadband download speed (from Comcast) from 75Mbps to 400Mbps. Prior to using the VPN (and with the faster Comcast speed), I was receiving download speeds of 150Mbps wireless and 300Mbps wired.

I programmed the Edgerouter X for whole house VPN using this blog post.

https://tech.michaelaltfield.net/2017/0 ... flix-safe/

Now, all my wired devices go through the router and the VPN. On my wireless devices, I can choose this same route or, instead, go through the router but bypass the VPN. I do this depending upon which wi-fi network I am connected to.

So, starting with cryptofree, I connected to a VPN server in France. Not wanting to see my web pages in French, I purchased a cryptostorm token, and applied it to the VPN. I decided to connect to a server in Chicago using UDP.

Here is a breakdown of my download speeds after this change.

Wired through VPN…. 10Mbps
Wireless through VPN… 5Mbps
Wireless bypass VPN… 150Mbps

The Chicago UDP server is obviously giving this slow speed. Do you have any suggestions? This needs to be almost as fast as when the VPN is bypassed.

Remember, before the VPN, I was getting these download speeds.

Wired no VPN… 350Mbps
Wireless no VPN… 150Mbps

by **marzametal** » Tue Feb 02, 2021 10:29 am

I've been having speed issues for over 3 weeks now. Can't break 50kb/s, regardless of server selected.
Tried changing the port and swapping from UDP to TCP, no help whatsoever.
My firewall shows no blockages relating to CS.
Killswitch is actvated.
Torrents don't break 30kb/s barrier.
Not sure what is going on, even tried a new token but the problem still exists.

Windows widget, latest version.

by **parityboy** » Tue Dec 31, 2019 3:42 am

@thread

I recently upgraded to a 70Mb/s FTTC connection so I thought I'd share some results here.

Connected to the Sweden node and pulling a copy of Linux Mint from the Swedish mirror, I get this:

!	Message from: parityboy
	Edit throughput units for clarity.

!	Message from: parityboy
	Edited to improve formatting

Post a reply

Expand view Topic review: The CryptoStorm Speed Test Thread