28

I am trying to figure out what is the realistic "speed of service" that my Internet company provides to my house. Here are the test that I am running:

  1. Internet ↔ modem ↔ wireless router ↔ laptop: Internet speed (using an internet speedometer test): about 19 Mbit/s download and 18 Mbit/s upload.
  2. Internet ↔ modem ↔ WIRED router (using cable; turned off wireless on laptop) ↔ laptop: about 40 Mbit/s down/ 38 Mbit/s up
  3. Internet ↔ modem ↔ laptop (no router at all; cable to modem): 4 (four) Mbit/s up and 2 (two) Mbit/s up?! WHAT?!

How is this possible?

11
  • 8
    When you plug direct to the modem does the ethernet adaptor negotiate full duplex?
    – J...
    Commented May 2, 2019 at 12:45
  • 5
    Also which router/modem are you using? I would imagine a router would have dedicated hardware for things that your computer would do in software. Additionally, what type of connection and modem? Is this an ADSL modem? VDSL modem? Is this a copper or a fibre optic line? How is the laptop connected to the modem? USB 2? USB 3? USB-C? Ethernet? Commented May 2, 2019 at 13:53
  • 1
    @tomjnowell This is typically incorrect. The vast majority of SOHO routers do routing in software (ie using Linux and an embedded CPU). The router has to be an Ethernet / Ethernet.router based on the description.
    – davidgo
    Commented May 2, 2019 at 19:22
  • 5
    You should probably give a few more details, including: the brand and model of the modem, how you connect your laptop to that modem, how you connect either of the routers to the modem, what settings you have in your router for the WAN connection (including things like PPPoE). Many "modems" are actually routers, so the settings of the modem could be useful as well. What type of connection is it (fiber, cable, DSL...)? Are you sure your laptop is actually going through the modem and not via some mobile hotspot or a distant Wi-Fi network?
    – jcaron
    Commented May 2, 2019 at 23:23
  • 1
    It would really help to know what kind of connection and hence modem you are using. If possible provide the modem and router brand and model as well. To exclude certain problems, (1) reboot both devices after connecting them; (2) try different cables (3) try different computers. Tell us what happened. Commented May 3, 2019 at 12:02

9 Answers 9

36

The first two are easy to explain - you live in an area with a fair amount of Wi-Fi noise or are far away from the router or have a crappy router, so a wired connection is faster - indeed that represents the typical maximum speed you will get.

Your Internet -> modem -> laptop is a lot harder to answer. In the naive case, yes, connecting to the laptop should be the fastest option, however it assumes a number of things which may not be true.

My speculation is that there is some kind of authentication going on on the router - possibly through PPPoE or using its MAC address. This authentication is failing and the router is being put in a very low bandwidth pool by the ISP. It's also possible that VLANS are involved that the router knows about but your PC doesn't. These kinds of thing are deliberately set up by telecommunications companies for a number of reasons on about which I can only speculate.

It is, of-course possible that there is a negotiation issue between the router and the modem.

17

It could possibly be a QoS issue. I recently attended a presentation at work that included some discussion about a problem where people who paid for a 100 Mbit/s Internet connection could only use 5 Mbit/s.

QoS refers to the way your bandwidth is limited. I'm simplifying this for a general audience, but in this case (that I was told about) the Internet connection was very strict about the 100 Mbit/s limit - you couldn't go over that amount, even for a few milliseconds. If you did, the ISP's equipment would simply drop (discard) the traffic. Your computer thinks the dropped traffic means that your Internet connection is at its maximum capacity, even though it's only sent a little bit of traffic, so it slows right down.

If this is the problem, it would be because your ISP has configured your router with the right QoS settings so this doesn't happen (your router would hold onto the extra traffic for a few milliseconds instead, to avoid going over 100 Mbit/s or whatever your speed is). But your laptop doesn't have the right settings so it runs into the problem.

6
  • 1
    I'm pretty sure this is wrong on multiple levels. First off, a 100 megabit connection is very strict about the limit and won't go over it even for a few ms, but does not require QoS. Secondly, TCP is DESIGNED to back off if there are lost packets and ramp up again to hone in on the maximum speed. It also does not address the discrepancy between WIFI and ethernet.
    – davidgo
    Commented Oct 16, 2020 at 3:49
  • @davidgo This is an ISP. The way they work is they give everyone a fast fibre-optic connection (so they don't need to replace it when people upgrade) and then throttle it. Commented Oct 16, 2020 at 9:37
  • I think you misunderstood what I was trying to communicate. Also, an ISP would not use QoS for limiting speed, they would use rate limiting. BTW, I might just know a thing or 2 about running an ISP :)
    – davidgo
    Commented Oct 16, 2020 at 10:33
  • @davidgo Rate limiting falls under the category of QoS Commented Oct 16, 2020 at 10:34
  • @davidgo The company which operates the physical network was not allowed to introduce delay, so they had to drop packets instead of buffering them. And so the company that provided the Internet service over that network had to do buffering in their provided routers. Commented Oct 16, 2020 at 10:36
11

I may be able to offer an explanation for #3, at least.

First, my assumptions going into this, since there's a good deal of detail missing from your question. Please do correct anything I got wrong (by adding the relevant details to your question).

  1. The router in your #1 and #2 was the same router, and nothing about its internet-side connectivity changed between those two scenarios. (Meaning, you simply changed how the laptop connected to the router, but didn't touch anything between the router, modem, and upstream connection.)

  2. You then unplugged the router from the modem, and plugged your laptop directly into the modem where the router used to be connected.

  3. You didn't reboot the modem between your #2 and #3.

Many consumer-grade "broadband" type modems, especially those provided/leased to customers by their providers, are programmed to support only a single downstream client device. I suppose it's intended as some sort of protection against wirejacking or who knows what. When they boot up, they register the MAC address of the first device they contact on their local network port, and that device becomes their sole reason for existence. Connecting any other devices directly to the modem will then either fail to communicate at all, or they'll experience vastly degraded performance, because the modem is holding out for its one true love.

TL;DR: Always, ALWAYS power-cycle your broadband modem when connecting a different device to its LAN port.

2
  • 1
    Consumer grade "broadband" type modems only support a single client device because they are acting as a modem, not a NAT device. Also, they are sometimes hardwired to expect a MAC to assign the appropriate address to.
    – davidgo
    Commented Oct 16, 2020 at 3:51
  • @davidgo Mmm, that's a fair point, yeah... though, it does still seem a bit arbitrary because it's not like other devices CAN'T communicate over the link, they just have to do it at greatly reduced speeds. That seems harder to explain, to me — at least from a technical standpoint. (Administratively, sure.)
    – FeRD
    Commented Oct 16, 2020 at 4:09
2

With the current information given, the difference between the wired connection through a router and without a router cannot be definitely answered. I want to mention one more possibility: MTU issues. I'll try a gentle description of the problem.

The connection between a router and a modem may be established via PPPoE. PPPoE adds an additional header to every transmitted packet, lowering the maximum possible payload (data) size. If some communication participant along the way does not know about this and sends IP packets with the usual maximum size of 1500 Bytes, the packet has to be fragmented before entering the PPPoE tunnel. Fragment reassembly at the receiver can cause latency jitter, which may be interpreted as a connection being close to its capacity limit, causing slowdowns.

Now, if you connect your laptop directly to the modem, your laptop should know about the correct MTU since it is the one that established the connection, making this explanation somewhat unlikely. However, the fact that there is a lower-than-normal MTU on the tunnelled connection may have been forgotten by whatever PPP implementation you are using.

Lastly, why would this issue not appear with the router? Most routers are aware of this kind of problem and "clamp the MSS", meaning they use a hack one layer above IP: to participants establishing a TCP connection, they indicate that the maximum acceptable TCP segment size is lower than usual (by modifying the connection establishment packets), effectively bringing down the size of IP packets being used for that connection.

7
  • This does not provide an answer to the question. To critique or request clarification from an author, leave a comment below their post. - From Review Commented May 3, 2019 at 10:35
  • @TwistyImpersonator while somewhat terse, I think it does provide answer to the question. Examples (1) and (2) which are fast go via the router which fixes TCP MTU issues with MSS clamping and thus restores speed to normal levels, while (3) does not go via router, so MTU is broken, so it is slow. Commented May 3, 2019 at 11:34
  • @TwistyImpersonator All the neceesary clarifications have been asked for by jcaron. I suppose I should have waited? Nevertheless, anyway, I tried to expand my answer a little cough.
    – Caesar
    Commented May 3, 2019 at 12:51
  • @Caesar Your edit was the needed improvement. Commented May 3, 2019 at 13:29
  • The idea that an incorrect MTU can greatly slow things down is correct, and if the router is doing MTU clamping could be correct. The post goes a bit off the rails by talking about PPPoE and the desktop knowing the MTU size from the router.
    – davidgo
    Commented May 3, 2019 at 20:18
2

Adding to Davidgo's answer, point 3 could also be a negotiation Issue: When a device is connected, it starts to negotiate the 'terms' (speed, rates, ...) of the communication with other devices and selects the highest possible standard that both devices are able to understand.

So in your case the ISP's modem might use some protocol that your laptop is unable to understand. Your router however is ok with that protocol. It's really dependent on the hardware tho.

0

Agree with davidgo. Now, if your modem is a pure modem (or a router in bridge mode), you can try spoofing the MAC address of your router as that may be what your ISP is looking at.

Does the router have a configuration that includes a username/password or keypair information? If so, the ISP may have client software for the PC, or a Web Page for entering this data.

Also try a crossover cable. The router may have auto-MDIX.

2
  • 3
    If the cable type were wrong, you wouldn't connect at all.
    – Barmar
    Commented May 2, 2019 at 19:42
  • Also, most network cards do auto crossover, too. Or, at least, at least one in every network I've ever made at home has. It was fun finding out I wasted my money on a crossover cable.
    – trlkly
    Commented May 3, 2019 at 10:46
0

I do not feel my answer is the complete answer, but may be part of the total answer, and has not been mentioned in another answer.

In my setup, the router is placed in bridged mode, and my firewall is attached behind. I see a relatively constant incoming stream of traffic to the firewall, all dropped. Your computer may be "unaccustomed" to the constant attempted connections, all valid to a normally isolated machine. Your machine may be performing connection handshakes with, or otherwise consumed with processing, this incoming traffic. It may not be necessary for trouble, but I can only hope the handshake fails, because many of these connections are, I believe, zero day exploits to unpatched systems.

I would recommend you not connect directly to the Internet, unless you have very heavy-duty protection in place.

1
  • Reason for downvotes? This answer sounds plausible to me.
    – krubo
    Commented May 4, 2019 at 9:44
0

This really sounds like a TCP window scale option problem (often conflated with MTU and MSS). Your laptop is asking the other end of the connection to only send it a small amount of data between acknowledgements. This means that a long latency in the connection will lead to a much lower throughput than the link is capable of because only a small amount of unacknowledged data can be in flight at any one time, and acknowledgements are limited by latency. This is called BDP.

When you insert the router in there, the router can use a much larger TCP window scale option going to the remote end of the connection. So you get high throughput from remote to router because of the large window size, and high throughput from the router to the laptop due to the lower latency between them.

Depending on the age and OS and OS version of your laptop, you might be able to adjust the window scale option on it.

3
  • This makes no sense to me.for a typical ethernet network and modern os.
    – davidgo
    Commented May 4, 2019 at 20:39
  • His diagram includes the internet and a modem, so clearly he is not on ethernet from end to end. I don't know how modern his OS is, or what your criteria is for modernity.
    – jjanes
    Commented May 4, 2019 at 23:02
  • modern OS = anything which has reasonable defaults for window size, ie a stack which is not expecting a dialup modem on the other end. As the upload speed is 38 megabit up, it is hugely unlikely this is a high latency connection to the nearest speedtest server as home user satellite service does not typically have that kind of bandwidth. (We know its home user because he says to my house.) In short, no reason is given to believe this is a high latency connection rather then typical home broadband.
    – davidgo
    Commented May 4, 2019 at 23:28
-3

Also, it might be that your laptop is infected with some malware, and that firewall in router is dropping connections to/from your laptop, thus preserving all available bandwidth for your test and you get better peeds.

And when you connect your laptop directly to the modem, it is unprotected and additional malware connections are made to/from it which uses up most of the bandwidth, leaving only a little for your test.

5
  • I mean, it's not impossible, but this is the IT-troubleshooting equivalent of hearing hoofbeats and expecting a unicorn.
    – FeRD
    Commented May 4, 2019 at 2:38
  • 1
    APWG reported between 20%-47% of computers were infected by malware as of 2016, depending on the country. So this answer seems plausible to me.
    – krubo
    Commented May 4, 2019 at 9:57
  • @krubo There are a lot of issues with that report, but in this context the most salient is that their definition of malware is extremely broad. Even "PUPs" ("potentially unwanted programs", the non-malicious crapware that often tags along with application installers) count as malware by their definition. While malware in general is widespread, malware of the type that would act in the way Matija posits (the kind that would saturate a broadband connection if it could) is incredibly rare.
    – FeRD
    Commented May 4, 2019 at 21:26
  • @FeRD actually, while some malware will try to limit bandwidth in order to remain stealth, most malware which exfiltrate data from your computer to attacker (which is by no means all of them, I agree) will opt to get as much data as possible before it is detected, and as such will saturate your outbound link (and thus severely impact not only upload, but download speeds too). Commented May 5, 2019 at 22:15
  • @MatijaNalis Yes, and most malware that does that would do it just fine through a consumer router as well, making it incredibly unlikely the user would remain blissfully unaware of this theoretical malware, only for it to be revealed once they bypassed the router. ...Look, I agree it's possible. In fact, that was the very first sentence in my very first comment. It's still a unicorn.
    – FeRD
    Commented May 6, 2019 at 5:20

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .