2nd Router For Standalone VPN Connections & Secure Wireless Access - Advise Required

Hardware Hub Networking
1

Hi Folks,

Looking to enrich my brain a little & possibly enhance my connection / experience while using new hardware.

So from the beginning, i have been a user of VPNs for three years and value their services highly for
getting around geo-blocking & advance privacy / protection.

I have used 2 providers, "PIA" & still do, & Hotspot shield, but found Hotspot Shields software to buggy at times and had consistent speed drop outs 'Which was very annoying'

In the past i have normally run the software direct off my PC's & phone which has enabled me to
tweak connection settings like AES & SHA plus TCP / UDP to my advantage for maximizing connection speed & ping for certain applications or use, but more recently i have had to change my approach due to moving and the majority of tech that requires different connection types being in one room.

Tech break down so you understand:

Router One 'EE Bright Box 2' (No Encryption / Wireless Set To Off

Connections Going To This Router:

1, TV - Generally used for streaming UK Netflix - Connected via Ethernet

2, Blueray Player - Generally used for streaming Amazon as the TV's app for Amazon is to intermittent for keeping a solid 1080p stream. - Connected via Ethernet

3, Now TV Box - Connected via Ethernet

4, Ethernet cable running to 2nd router or when the 2nd router isn't required it connects to PS4.

-NEW HARDWARE-

Router Two - Net Gear Nighthawk AC1900 (VPN Active "PIA" Wireless Set To On

Connections Going To This Router :

1, PC - Connected via Ethernet

2, 2nd TV using Amazon Fire Stick & Kodi from next room - Connected VIA Wireless

3, BT Broadband Extender for Bedroom TV - & additional wireless repeater - Connected via Ethernet

4, Wireless access for my mobile, tablet & friends when they visit.

Now to put it out there i clearly don't saturate my broadband with all these on at once & the 2nd Router is off, if i am not using anything connected to it, as i can just switch on the VPN software on my phone.

My Broadband speeds are 40mb down & 15 up (Yes very low but that is all that's available in this area unfortunately
hence i want to get the most out of the bandwidth i can when possible.

1st, Are there any recommendations for tweaking this set up?

2nd, When using the 2nd router for VPN connections are there any tweaks i can do on the Netgear router to
allow a faster connection via wireless? as when i do a bandwidth test via the PC through Ethernet on this router
i get roughly my allocated speed i am paying for 40mb down and 10 up but through the wireless i
seem to fluctuate between 10mb - 19mb down & 5- 10mb up.

Now on the PC i can have a high data encryption (AES 256 / SHA 256 / RSA 4096) with out much of a speed trade off
as long as i play around with remote & connection type
But on the router the recommend settings are Blowfish, AES 128.

Has anyone else got a similar setup or a Net Gear Nighthawk AC1900 & have they had any issues with speed
or had a tweak with encryption setting to maximize speed through put as i did read on PIA forums that this
router is meant to be excellent for VPN applications.

1 Like
2

Ok, just a quick update in-relation to the above. i have sorted the speed drop
on wireless by changing both bands to designated channels on the 2nd router for both 2gz & 5gz & also by doing numerous bandwidth tests through the available servers that PIA has to offer with out having to much of a trade off with ping / latency. I know these wont stay like this due to server saturation but for now its a lot better.

I am getting 35dl & 15up with a 25 ping :) happy days considering with out the
the VPN i actually can only get 38 /39 including overhead on dl & 15-20 up
with a 19/20 ping.

With regards to the security of the connection and many hours scrapping through jargon of what people believe to be fact as appose to fiction.

It have found that dd-wrt can only run a max of AES-128 data encryption with the PIA servers & to achieve this you need make sure you use port 1196 as appose to port 1194, I did read AES-256 is achievable but i haven't been able to replicate this to verify so never the less i am happy with using Blowfish / SHA1 if it means i can maintain a solid connection and better speed through put up & dow. If i am wrong please advise me as i am here to learn as well., Ideally i would prefer a stronger encryption but on the flip side
i am noting doing anything elicit so until i read that this isn't as secure as i am
lead to believe it will suffice.