Skip to content

What are the bandwidth limits for AWS Client VPNs.

0

When connecting to an eu-west-2 AWS Client VPN with the AWS VPN Client we are seeing significantly reduced connection speeds compared to tests without the VPN connected.
The docs state there is a "10 Mbps bandwidth limit per user connection" but this does not match what we are experiencing (some users have around 100Mbps).

What bandwidth is supported by AWS for these services?
Are there any approaches to improving performance?

  • I'm seeing similar - getting around 100Mbps. If I reach the same EC2 instance using its public internet address, I get around 900Mbps, so very close to theoretical. So something about the VPN is struggling.

asked 2 years ago2.6K views
4 Answers
2
Accepted Answer

I think the 1.25 Gbps bandwidth is for Site to Site VPNs per tunnel. I cant locate any documentation regarding the AWS VPN Client Limitations

EXPERT
answered 2 years ago
  • It looks like that this hardcoded: Quote

    Verify the bandwidth limit for a Client VPN endpoint

    Problem I need to verify the bandwidth limit for a Client VPN endpoint.

    Cause The throughput depends on multiple factors, such as the capacity of your connection from your location, and the network latency between your Client VPN desktop application on your computer and the VPC endpoint. There is also a 10 Mbps bandwidth limit per user connection.

1

The limit is 1.25 Gbps per VPN tunnel. There is also a maximum packets per second per VPN tunnel of 140k PPS. The limit is shown on the AWS VPN FAQs page. The VPN bandwidth limit of 1.25 Gbps Per Tunnel means that if you have multiple connections, you can aggregate the bandwidth.

Transit Gateway supports up to 100 Gbps per VPC attachment per Availability Zone. Each VPN tunnel still has a limit of 1.25 Gbps Per Tunnel but if you use dynamic routing (BGP) you can get 2.5 Gbps per Connection. If you use dynamic routing (BGP), you can create multiple VPN connections that announce the same prefixes and enable Equal Cost Multipath (ECMP) between these connections. By load-balancing traffic over multiple paths, ECMP can increase the total throughput but no single network flow can exceed 1.25 Gbps (unless the application has a way to split the traffic, such as S3 multi-part upload).

AWS
answered 2 years ago
-1

Latest Update Each user connection has a maximum baseline bandwidth of 50 Mbps. The actual bandwidth you experience connecting through a Client VPN endpoint can vary based on several factors. These factors include packet size, traffic composition (TCP/UDP mix), network policies (shaping or throttling) on intermediate networks, internet conditions, application-specific requirements, and the total number of concurrent user connections. If you are hitting the maximum bandwidth limit, you can request an increase through AWS Support. It depends on the valid use case.

Please follow for more information: https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/what-is-best-practices.html

AWS
answered 8 months ago
  • This doesn't seem to be accurate, as we have several users who today can measure over 100Mbps.

-5

hello, AWS Client VPN has a default bandwidth limit of 1.25 Gbps for each VPN connection. The 10 Mbps limit you mentioned might be a reference to the default bandwidth limit per user connection. AWS Client VPN allows you to define a maximum bandwidth limit for each user connection, and the default is 10 Mbps. However, this can be adjusted based on your requirements.

To check and adjust the bandwidth limit for a user connection, you can follow these steps:

1.Open the AWS Management Console.
2.Navigate to the Amazon VPC console at https://console.aws.amazon.com/vpc/.
3.In the navigation pane, choose "Client VPN Endpoints."
4.Select your Client VPN endpoint.
5.Choose the "Connections" tab.
6.Select the user connection for which you want to adjust the bandwidth limit.
7.Choose the "Details" tab.
8.In the "User Connection Settings" section, adjust the "Maximum User Connection Bandwidth" as needed.

Keep in mind that other factors can contribute to reduced connection speeds, such as network latency, client device capabilities, and the underlying infrastructure. Here are some general tips for improving performance:

answered 2 years ago
  • Thanks for your answer! But I don't seem to have those options.

    After step 6 the only option for the User Connection is Terminate Connection. Going back to the Details tab (which isn't scoped to an individual user) gives me a page that doesn't have any User Connection Settings section.

    Can I politely ask if you are a Human, or a ChatGPT bot?

  • I'm seeing the same as Jethro - the "Details" tab doesn't exist.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.