Wiresock poor performance

[mikex]

I use wiresock for app-level VPN (Chrome), and for speedtest.net, speedtest.cloudflare.com it shows downgrade by 2-4 times:

w/o wireguard and w/o wiresock: download: 200mbs, upload: 150mbs

wireguard and w/o wiresock: download: 190mbs, upload: 135mbs

wiresock: download: 70mbs, upload: 40mbs

[Vadim Smirnov]

I have a 400/400 Mbps connection. Here are the test results using WireSock with a Cloudflare Warp configuration and an MTU set to 1280:

WireSock Virtual Adapter Mode
WireSock Transparent Mode

I recommend checking your MTU settings. Unlike the official WireGuard client for Windows, WireSock does not defragment fragmented WireGuard UDP packets for performance reasons. Therefore, it is crucial to use an appropriate MTU to avoid connectivity issues.

[mikex]

How to check and ensure that issue is fragmented WireGuard UDP packets?

[mikex]

Also I use mtu 1280 on both sides – wireguard client and server have mtu == 1280

[Vadim Smirnov]

Normally, you would see the errors in the log. However, please avoid using debug logging during performance measurements.

[mikex]

can I somehow wireshark for that case?

[mikex]

does wiresock have public code source?

[Vadim Smirnov]

WireSock CLI includes a built-in feature for capturing traffic and saving it as PCAP files.

Certain components of WireSock are open source, such as BoringTun and NDISAPI, while others are proprietary but available for commercial licensing.

[mikex]

Does wiresock implement some complicated logic to handle performance issues as mtu missmatch, packets drops due to processing speed issue?

I guess wiresock can’t handle high-load traffic for application’s vpn as it intends to process each packet (what I know from ndisapi examples) before send it to Wireguard. But hope I am wrong

[Vadim Smirnov]

Yes, I’ve tested WireSock on a 10Gbps connection, and it has demonstrated decent performance, even outperforming the official WireGuard client in my tests.

Regarding high-load traffic, while WireSock processes packets before forwarding them to WireGuard, it is designed for efficiency. In practice, it handles substantial traffic loads well without becoming a bottleneck.

However, I recommend testing WireSock on a clean machine with a well-known WireGuard profile—such as Cloudflare Warp—to rule out any potential software conflicts at the low network level that might impact performance.

[Author]

Posts