Impressions after implementing new security..

[jamesnmandy]

Prior to this I just had the AC68U running Merlin firmware with default settings, just basic WPA2 security password enabled. Otherwise there were no security features in place. Things worked well but I have recently become aware that my situation wasn't the best.

So I decided to update and upgrade the AC68U to recent firmware and install Skynet and ABSolution. In addition to that I created an IP table for every device and added each MAC/assigned static IP's to each, enabled Wireless MAC filtering to only allow devices I added. Then I made a NordVPN account to try for free for 3 days. Set that up on the router, no problem. Also installed mobile client on my android phone to use while away from home.

My plan was to install the mobile client on the other mobile phones assuming NordVPN worked out. I noticed a small hit to wireless performance when I enabled Skynet and ABSolution but when I enabled the VPN Client there was a very noticeable drop in performance. Like as much as 50%. Sometimes it wasn't bad, but I would say to maintain the same level of performance I was going to end up having to upgrade from the 60mbit to 100mbit service to make up for it. Not good.

On top of that, I have two teenage girls who love their devices. Today was the first day they spent at home with VPN enabled on the router. Turns out Netflix doesn't work, it detects a proxy. Also they are noticing the hit to performance, even without the VPN client, just with Skynet and ABSolution running.

I don't know.... I want to keep things secure but if it comes at the cost of going back to old school broadband speeds I don't know, might have to back off some. Also even with a larger pipe to the ISP I am not sure client to WAP performance will isn't still a factor even though the devices are negotiating at full link speed usually which is 866mbps for the three Note 8's..

Decisions decisions..

 

[MichaelCG]

What is your goal for the VPN? Rarely ever will you get the same performance on VPN as you will without. The additional overhead of processing and transmitting the encryption will add latency. The processing can be overcome with CPU enhancements/speed, but the transmission overhead is not something you can change.

As for Netflix...yeah, many of the cheap shared VPN services will work that way. I have StrongVPN and have the same proxy issue with many streaming services. I only use my VPN service when I am out and about on shared free WiFi. From my house, there is no point in the VPN for me.

 

[jamesnmandy]

The goal is to make the home network more secure and protect privacy. I didn't take NordVPN as a "cheap" service. It appears to be well rated.

I like the idea of not allowing my ISP to snoop at home and also like the idea of having the client on my phone so my employer can't snoop while at work.

But the cost may be too much in terms of inconveniece.

What is your goal for the VPN? Rarely ever will you get the same performance on VPN as you will without. The additional overhead of processing and transmitting the encryption will add latency. The processing can be overcome with CPU enhancements/speed, but the transmission overhead is not something you can change.

As for Netflix...yeah, many of the cheap shared VPN services will work that way. I have StrongVPN and have the same proxy issue with many streaming services. I only use my VPN service when I am out and about on shared free WiFi. From my house, there is no point in the VPN for me.