28

I am trying to figure out what is the realistic "speed of service" that my Internet company provides to my house. Here are the test that I am running:

  1. Internet ↔ modem ↔ wireless router ↔ laptop: Internet speed (using an internet speedometer test): about 19 Mbit/s download and 18 Mbit/s upload.
  2. Internet ↔ modem ↔ WIRED router (using cable; turned off wireless on laptop) ↔ laptop: about 40 Mbit/s down/ 38 Mbit/s up
  3. Internet ↔ modem ↔ laptop (no router at all; cable to modem): 4 (four) Mbit/s up and 2 (two) Mbit/s up?! WHAT?!

How is this possible?

  • 8
    When you plug direct to the modem does the ethernet adaptor negotiate full duplex? – J... May 2 at 12:45
  • 5
    Also which router/modem are you using? I would imagine a router would have dedicated hardware for things that your computer would do in software. Additionally, what type of connection and modem? Is this an ADSL modem? VDSL modem? Is this a copper or a fibre optic line? How is the laptop connected to the modem? USB 2? USB 3? USB-C? Ethernet? – Tom J Nowell May 2 at 13:53
  • 1
    @tomjnowell This is typically incorrect. The vast majority of SOHO routers do routing in software (ie using Linux and an embedded CPU). The router has to be an Ethernet / Ethernet.router based on the description. – davidgo May 2 at 19:22
  • 5
    You should probably give a few more details, including: the brand and model of the modem, how you connect your laptop to that modem, how you connect either of the routers to the modem, what settings you have in your router for the WAN connection (including things like PPPoE). Many "modems" are actually routers, so the settings of the modem could be useful as well. What type of connection is it (fiber, cable, DSL...)? Are you sure your laptop is actually going through the modem and not via some mobile hotspot or a distant Wi-Fi network? – jcaron May 2 at 23:23
  • 1
    It would really help to know what kind of connection and hence modem you are using. If possible provide the modem and router brand and model as well. To exclude certain problems, (1) reboot both devices after connecting them; (2) try different cables (3) try different computers. Tell us what happened. – Peter A. Schneider May 3 at 12:02
37

The first two are easy to explain - you live in an area with a fair amount of Wi-Fi noise or are far away from the router or have a crappy router, so a wired connection is faster - indeed that represents the typical maximum speed you will get.

Your Internet -> modem -> laptop is a lot harder to answer. In the naive case, yes, connecting to the laptop should be the fastest option, however it assumes a number of things which may not be true.

My speculation is that there is some kind of authentication going on on the router - possibly through PPPoE or using its MAC address. This authentication is failing and the router is being put in a very low bandwidth pool by the ISP. It's also possible that VLANS are involved that the router knows about but your PC doesn't. These kinds of thing are deliberately set up by telecommunications companies for a number of reasons on about which I can only speculate.

It is, of-course possible that there is a negotiation issue between the router and the modem.

17

It could possibly be a QoS issue. I recently attended a presentation at work that included some discussion about a problem where people who paid for a 100 Mbit/s Internet connection could only use 5 Mbit/s.

QoS refers to the way your bandwidth is limited. I'm simplifying this for a general audience, but in this case (that I was told about) the Internet connection was very strict about the 100 Mbit/s limit - you couldn't go over that amount, even for a few milliseconds. If you did, the ISP's equipment would simply drop (discard) the traffic. Your computer thinks the dropped traffic means that your Internet connection is at its maximum capacity, even though it's only sent a little bit of traffic, so it slows right down.

If this is the problem, it would be because your ISP has configured your router with the right QoS settings so this doesn't happen (your router would hold onto the extra traffic for a few milliseconds instead, to avoid going over 100 Mbit/s or whatever your speed is). But your laptop doesn't have the right settings so it runs into the problem.

11

I may be able to offer an explanation for #3, at least.

First, my assumptions going into this, since there's a good deal of detail missing from your question. Please do correct anything I got wrong (by adding the relevant details to your question).

  1. The router in your #1 and #2 was the same router, and nothing about its internet-side connectivity changed between those two scenarios. (Meaning, you simply changed how the laptop connected to the router, but didn't touch anything between the router, modem, and upstream connection.)

  2. You then unplugged the router from the modem, and plugged your laptop directly into the modem where the router used to be connected.

  3. You didn't reboot the modem between your #2 and #3.

Many consumer-grade "broadband" type modems, especially those provided/leased to customers by their providers, are programmed to support only a single downstream client device. I suppose it's intended as some sort of protection against wirejacking or who knows what. When they boot up, they register the MAC address of the first device they contact on their local network port, and that device becomes their sole reason for existence. Connecting any other devices directly to the modem will then either fail to communicate at all, or they'll experience vastly degraded performance, because the modem is holding out for its one true love.

TL;DR: Always, ALWAYS power-cycle your broadband modem when connecting a different device to its LAN port.

2

With the current information given, the difference between the wired connection through a router and without a router cannot be definitely answered. I want to mention one more possibility: MTU issues. I'll try a gentle description of the problem.

The connection between a router and a modem may be established via PPPoE. PPPoE adds an additional header to every transmitted packet, lowering the maximum possible payload (data) size. If some communication participant along the way does not know about this and sends IP packets with the usual maximum size of 1500 Bytes, the packet has to be fragmented before entering the PPPoE tunnel. Fragment reassembly at the receiver can cause latency jitter, which may be interpreted as a connection being close to its capacity limit, causing slowdowns.

Now, if you connect your laptop directly to the modem, your laptop should know about the correct MTU since it is the one that established the connection, making this explanation somewhat unlikely. However, the fact that there is a lower-than-normal MTU on the tunnelled connection may have been forgotten by whatever PPP implementation you are using.

Lastly, why would this issue not appear with the router? Most routers are aware of this kind of problem and "clamp the MSS", meaning they use a hack one layer above IP: to participants establishing a TCP connection, they indicate that the maximum acceptable TCP segment size is lower than usual (by modifying the connection establishment packets), effectively bringing down the size of IP packets being used for that connection.

  • This does not provide an answer to the question. To critique or request clarification from an author, leave a comment below their post. - From Review – Twisty Impersonator May 3 at 10:35
  • @TwistyImpersonator while somewhat terse, I think it does provide answer to the question. Examples (1) and (2) which are fast go via the router which fixes TCP MTU issues with MSS clamping and thus restores speed to normal levels, while (3) does not go via router, so MTU is broken, so it is slow. – Matija Nalis May 3 at 11:34
  • @TwistyImpersonator All the neceesary clarifications have been asked for by jcaron. I suppose I should have waited? Nevertheless, anyway, I tried to expand my answer a little cough. – Caesar May 3 at 12:51
  • @Caesar Your edit was the needed improvement. – Twisty Impersonator May 3 at 13:29
  • The idea that an incorrect MTU can greatly slow things down is correct, and if the router is doing MTU clamping could be correct. The post goes a bit off the rails by talking about PPPoE and the desktop knowing the MTU size from the router. – davidgo May 3 at 20:18
2

Adding to Davidgo's answer, point 3 could also be a negotiation Issue: When a device is connected, it starts to negotiate the 'terms' (speed, rates, ...) of the communication with other devices and selects the highest possible standard that both devices are able to understand.

So in your case the ISP's modem might use some protocol that your laptop is unable to understand. Your router however is ok with that protocol. It's really dependent on the hardware tho.

0

Agree with davidgo. Now, if your modem is a pure modem (or a router in bridge mode), you can try spoofing the MAC address of your router as that may be what your ISP is looking at.

Does the router have a configuration that includes a username/password or keypair information? If so, the ISP may have client software for the PC, or a Web Page for entering this data.

Also try a crossover cable. The router may have auto-MDIX.

  • 3
    If the cable type were wrong, you wouldn't connect at all. – Barmar May 2 at 19:42
  • Also, most network cards do auto crossover, too. Or, at least, at least one in every network I've ever made at home has. It was fun finding out I wasted my money on a crossover cable. – trlkly May 3 at 10:46
0

I do not feel my answer is the complete answer, but may be part of the total answer, and has not been mentioned in another answer.

In my setup, the router is placed in bridged mode, and my firewall is attached behind. I see a relatively constant incoming stream of traffic to the firewall, all dropped. Your computer may be "unaccustomed" to the constant attempted connections, all valid to a normally isolated machine. Your machine may be performing connection handshakes with, or otherwise consumed with processing, this incoming traffic. It may not be necessary for trouble, but I can only hope the handshake fails, because many of these connections are, I believe, zero day exploits to unpatched systems.

I would recommend you not connect directly to the Internet, unless you have very heavy-duty protection in place.

  • Reason for downvotes? This answer sounds plausible to me. – krubo May 4 at 9:44
0

This really sounds like a TCP window scale option problem (often conflated with MTU and MSS). Your laptop is asking the other end of the connection to only send it a small amount of data between acknowledgements. This means that a long latency in the connection will lead to a much lower throughput than the link is capable of because only a small amount of unacknowledged data can be in flight at any one time, and acknowledgements are limited by latency. This is called BDP.

When you insert the router in there, the router can use a much larger TCP window scale option going to the remote end of the connection. So you get high throughput from remote to router because of the large window size, and high throughput from the router to the laptop due to the lower latency between them.

Depending on the age and OS and OS version of your laptop, you might be able to adjust the window scale option on it.

  • This makes no sense to me.for a typical ethernet network and modern os. – davidgo May 4 at 20:39
  • His diagram includes the internet and a modem, so clearly he is not on ethernet from end to end. I don't know how modern his OS is, or what your criteria is for modernity. – jjanes May 4 at 23:02
  • modern OS = anything which has reasonable defaults for window size, ie a stack which is not expecting a dialup modem on the other end. As the upload speed is 38 megabit up, it is hugely unlikely this is a high latency connection to the nearest speedtest server as home user satellite service does not typically have that kind of bandwidth. (We know its home user because he says to my house.) In short, no reason is given to believe this is a high latency connection rather then typical home broadband. – davidgo May 4 at 23:28
-3

Also, it might be that your laptop is infected with some malware, and that firewall in router is dropping connections to/from your laptop, thus preserving all available bandwidth for your test and you get better peeds.

And when you connect your laptop directly to the modem, it is unprotected and additional malware connections are made to/from it which uses up most of the bandwidth, leaving only a little for your test.

  • I mean, it's not impossible, but this is the IT-troubleshooting equivalent of hearing hoofbeats and expecting a unicorn. – FeRD May 4 at 2:38
  • 1
    APWG reported between 20%-47% of computers were infected by malware as of 2016, depending on the country. So this answer seems plausible to me. – krubo May 4 at 9:57
  • @krubo There are a lot of issues with that report, but in this context the most salient is that their definition of malware is extremely broad. Even "PUPs" ("potentially unwanted programs", the non-malicious crapware that often tags along with application installers) count as malware by their definition. While malware in general is widespread, malware of the type that would act in the way Matija posits (the kind that would saturate a broadband connection if it could) is incredibly rare. – FeRD May 4 at 21:26
  • @FeRD actually, while some malware will try to limit bandwidth in order to remain stealth, most malware which exfiltrate data from your computer to attacker (which is by no means all of them, I agree) will opt to get as much data as possible before it is detected, and as such will saturate your outbound link (and thus severely impact not only upload, but download speeds too). – Matija Nalis May 5 at 22:15
  • @MatijaNalis Yes, and most malware that does that would do it just fine through a consumer router as well, making it incredibly unlikely the user would remain blissfully unaware of this theoretical malware, only for it to be revealed once they bypassed the router. ...Look, I agree it's possible. In fact, that was the very first sentence in my very first comment. It's still a unicorn. – FeRD May 6 at 5:20

protected by JakeGould May 3 at 22:21

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.