Are you saying that performance between two systems on your LAN drops, or performance between your LAN and a system outside your LAN?
As I understand tailscale (and I could be wrong), it creates a mesh VPN. If you don't need a mesh and don't have a CGNAT internet connection at home, perhaps you should consider using a different VPN technology. I've tested both Wireguard (without tailscale) and strongswan in a standalone network (separated by two routers) and got near wire-speed. Of course this will be reduced once the actual internet is in the middle, as thagrol discussed.
Personally, I use an IPSEC VPN (strongswan, configured and managed with https://github.com/gitbls/pistrong). When I'm out on the internet the performance I get is good enough for RDP, browsing pictures, etc., although there is definitely more delay when browsing pictures than when doing the same on my home LAN. WG performance should be similar.
More info on VPN choices here and you can find some strongswan and wireguard performance data here .
As I understand tailscale (and I could be wrong), it creates a mesh VPN. If you don't need a mesh and don't have a CGNAT internet connection at home, perhaps you should consider using a different VPN technology. I've tested both Wireguard (without tailscale) and strongswan in a standalone network (separated by two routers) and got near wire-speed. Of course this will be reduced once the actual internet is in the middle, as thagrol discussed.
Personally, I use an IPSEC VPN (strongswan, configured and managed with https://github.com/gitbls/pistrong). When I'm out on the internet the performance I get is good enough for RDP, browsing pictures, etc., although there is definitely more delay when browsing pictures than when doing the same on my home LAN. WG performance should be similar.
More info on VPN choices here and you can find some strongswan and wireguard performance data here .
Statistics: Posted by bls — Mon Dec 23, 2024 2:30 pm
