Tag: networking

Part 1 ended with four wrong answers and a set of conclusions I was reasonably confident about. I have another Windows workstation, so I ran the same test from it the following day, and then moved it through every router path in turn. Three of those conclusions didn’t survive the afternoon.

The method is unchanged: curl -4, 1 GB per stream, single then four in parallel, CPU sampled across every transfer, and a control taken with the tunnel switched off. One addition. On the client-side tunnel I read the tunnel adapter’s byte counter before and after each run, which is a harder path proof than asking an external service what address it sees. Every client run showed 106% of payload crossing the interface, the extra 6% being WireGuard encapsulation. You can’t fake that by accident.

Read more about Three Tunnels, One Ceiling: Part 2

Having just found that my router’s VPN was carrying only half my traffic, the obvious next question was how fast the half it did carry actually went. What I expected was a straightforward protocol comparison. What I got was four wrong conclusions in a row, each one caused by a measurement that looked reasonable and wasn’t.

The numbers are below, and so is the method — including the parts of the method that failed, because those turned out to be the useful bit.

Read more about Three Tunnels, One Ceiling

This started as a small question. I was reading about WebRTC leaks — the trick where a browser, asked politely by a webpage, will happily enumerate every IP address on every interface it can see and hand them over, VPN or no VPN. I was scoffing at the idea that I had any exposure, but just to answer my curiosity, I ran hide.me‘s own leak test to see what my browser was giving away.

The browser was a solvable problem. Three Firefox prefs and it stops volunteering host candidates. But while I had the test page open, I noticed something in the results that had nothing to do with WebRTC, and I spent the next two days on it instead. It took a few reboots and reconfiguration in 3 different places. Thankfully, there was no downtime during peak K-drama timings!

Read more about Half a VPN