This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Dramatically lower speed tests with SSL/TLS disabled

Just got 1000/100 Mbps internet installed and have been testing speeds, mostly using speedtest.net. Nothing serious, just wanted to get an idea of how the XG would hold up.

Was getting about 700 Mbps down (XG 230 50% CPU) and decided to see if I could get a full 1000 Mbps by disabling SSL/TLS scanning. I was rather confounded to see the speed drop to 200 Mbps. It made no difference if I globally turned SSL/TLS off or had an exemption rule.

I tried it again with an XG 430 and while not so dramatic, there was still a drop in speed (from about 800 to 600).

Can anybody explain what could be happening here as it is the opposite of what I would expect?



This thread was automatically locked due to age.
Parents Reply Children
  • Could be related to certain techniques, which XG uses to ensure, the speedtest is running smoothly. 

    Try to verify, as i posted in the other thread, things like download and upload tests.

    https://www.speedtestx.de/ 

  • I tried the site you recommended and got about 240 Mbps with SSL/TLS disabled and only 30 Mbps with it enabled. Checking the logs I was getting multiple Dropped due to TLS engine error: FLOW_TIMEOUT[5] errors for that site so maybe that is why the download speed was so poor.

    Tried downloading a large Centos 8GB ISO and got 400 Mbps whether SSL/TLS was enabled or disabled.

    All just goes to show how difficult it is to get any meaningful info using third party sites, every one just shows something different. It would be nice to have another site on the same ISP that I could run tests between but I don't have one.