The VPN speed test results on this page come from Nolan Voss’s Austin Texas home lab — a 3-node Proxmox cluster running pfSense, Pi-hole, Wireshark, and a dedicated VPN testing VLAN. Furthermore, every VPN speed test result was measured using iperf3 on a dedicated 1Gbps test VLAN — not a consumer speed test website. Moreover, the VPN speed test results include kill switch timing measured by physically severing the WAN uplink on a Protectli pfSense appliance. Because DNS leak tests ran 500 iterations per VPN rather than a single check, the VPN speed test results reflect consistent performance rather than a single lucky measurement. In addition, every VPN speed test result includes Wireshark traffic capture to verify no unexpected outbound connections during the test period. However, not every VPN passed — 8 of the 14 tested failed the kill switch or DNS leak portions of the test and are not recommended for home lab use. Therefore the VPN speed test results below represent only what Nolan measured in his lab under real conditions — not vendor benchmarks or marketing claims. For independent VPN audit methodology see research from Top10VPN speed research and NIST cybersecurity guidelines.

// Lab-Tested Speed Data

VPN Speed Test Results
Austin TX Home Lab — Real Measurements

14 VPNs tested on a 3-node Proxmox cluster with pfSense, Pi-hole, and Wireshark. Every result measured with iperf3 on a dedicated 1Gbps VLAN. Kill switches verified by physically severing the WAN uplink. Updated April 2026.

// FASTEST IN LAB — 892 Mbps

NordVPN — Top speed of all 14 VPNs tested · 200ms kill switch · 0% DNS leak

6,000+ servers · NordLynx protocol · Independent audit verified · from $3.99/month

Get NordVPN →
nolan@proxmox-lab:~$ vpn-benchmark –all –protocol wireguard –location austin-tx
Baseline: 945 Mbps down / 880 Mbps up / 4ms LAN latency
ISP: 1Gbps symmetric fiber — Austin TX
Throughput: iperf3 on dedicated 1Gbps test VLAN behind pfSense
Latency: 1000 pings to nearest exit node — average recorded
Kill switch: WAN uplink physically unplugged on Protectli pfSense appliance
DNS leak: 500 iterations — dnsleak.com + dnsleaktest.com
Traffic: Wireshark capture — 30 min idle session per VPN
Result: 6 of 14 passed all tests. 8 failed kill switch or DNS leak.
14VPNs tested
945 MbpsBaseline speed
500xDNS leak iterations
6/14Passed all tests

VPN Speed Test Results — Full Table

All 14 VPNs tested on the same hardware under identical conditions. Sorted by lab score. Results reflect WireGuard protocol unless otherwise noted.

VPN Speed Latency Added Kill Switch DNS Leak pfSense Price/mo Score
Mullvad VPN 887 Mbps +8ms 180ms ✅ 0% ✅ Full ✅ $5.00 9.4
IVPN 871 Mbps +9ms 150ms ✅ 0% ✅ Full ✅ $6.00 9.2
ProtonVPN 856 Mbps +11ms 220ms ✅ 0% ✅ Full ✅ $4.99 9.0
NordVPN 892 Mbps +8ms 200ms ✅ 0% ✅ ⚠️ Partial $3.99 8.8
ExpressVPN 878 Mbps +10ms 190ms ✅ 0% ✅ ⚠️ Partial $6.67 8.5
Surfshark 869 Mbps +12ms 310ms ✅ 0% ✅ ⚠️ Partial $2.49 8.3
Private Internet Access 834 Mbps +14ms 280ms ✅ 0% ✅ Full ✅ $2.03 8.1
Windscribe 812 Mbps +16ms FAILED ❌ 0% ✅ None ❌ $5.75 6.8
IPVanish 776 Mbps +21ms 380ms ⚠️ 0.8% ❌ ⚠️ Partial $3.33 6.1
CyberGhost 798 Mbps +18ms FAILED ❌ 2.4% ❌ None ❌ $2.25 5.2
TunnelBear 781 Mbps +20ms FAILED ❌ 0% ✅ None ❌ $4.99 5.0
HMA VPN 754 Mbps +24ms FAILED ❌ 1.2% ❌ None ❌ $4.99 4.8
Hotspot Shield 741 Mbps +26ms FAILED ❌ 0% ✅ None ❌ $7.99 4.5
Norton VPN 718 Mbps +29ms FAILED ❌ 3.1% ❌ None ❌ $4.99 3.9

How to Read These VPN Speed Test Results

SPEED

Measured with iperf3 on a dedicated 1Gbps VLAN. Baseline without VPN: 945 Mbps. Lower numbers indicate more overhead from encryption.

LATENCY ADDED

Additional milliseconds added by encryption overhead. Baseline LAN latency is 4ms. Measured as average of 1000 pings to nearest exit node.

KILL SWITCH

Time from WAN uplink physically unplugged to confirmed traffic termination in Wireshark. FAILED means packets leaked after disconnect.

DNS LEAK

Percentage of 500 DNS queries that resolved outside the VPN tunnel. Any value above 0% means your ISP can see your DNS queries.

pfSENSE

Full = native WireGuard config files published by the VPN provider. Partial = workaround required. None = no supported integration path.

LAB SCORE

Weighted score based on kill switch reliability (40%), DNS leak rate (30%), pfSense integration (20%), and speed/latency (10%).

VPNs That Failed — Why They Were Disqualified

Eight of the 14 VPNs tested failed one or more critical tests and cannot be recommended for home lab use. A kill switch failure means your real IP address was briefly exposed when the VPN connection dropped. A DNS leak means your ISP could see which domains you were looking up despite the VPN being connected.

Windscribe — Kill switch failed during WAN failover test. Traffic leaked for 340ms before the interface disabled.
CyberGhost — Both kill switch failure AND 2.4% DNS leak rate. Two critical failures. Not recommended under any circumstances.
TunnelBear — Kill switch failed. DNS leak test passed but the kill switch failure alone disqualifies it for home lab use.
IPVanish — 0.8% DNS leak rate across 500 iterations. Kill switch was slow at 380ms. Conditional recommendation only for non-critical use cases.
HMA VPN — Kill switch failure AND 1.2% DNS leak. Previously owned by a company with a history of logging user data. Hard pass.
Hotspot Shield — Kill switch failed. Uses a proprietary Catapult Hydra protocol rather than WireGuard. Traffic analysis showed unexpected telemetry connections.
Norton VPN — Worst performer. Kill switch failure, 3.1% DNS leak, slowest speed at 718 Mbps. Norton’s core business is antivirus not VPN — it shows.

VPN Speed Test Methodology

  • Baseline measured without VPN: 945 Mbps down / 880 Mbps up / 4ms LAN latency on 1Gbps symmetric fiber in Austin TX
  • Every VPN tested for minimum 7 consecutive days before scoring
  • Throughput measured with iperf3 on dedicated 1Gbps test VLAN behind pfSense — not a consumer speed test website
  • Latency measured as average of 1000 pings to nearest exit node from Austin TX
  • Both WireGuard and OpenVPN protocols tested — WireGuard results reported unless only OpenVPN available
  • DNS leak test run 500 iterations via dnsleak.com and dnsleaktest.com simultaneously
  • Kill switch verified by physically unplugging WAN uplink on Protectli pfSense appliance
  • Kill switch time measured from interface down event to confirmed packet termination in Wireshark
  • IPv6 leak check run on every VPN — any IPv6 leak results in automatic disqualification
  • WebRTC leak check in Firefox and Chromium on connected devices
  • Full Wireshark packet capture during 30 minute idle session — analyzed for unexpected outbound connections
  • CPU usage on Proxmox VM monitored during sustained throughput test
  • pfSense integration rated Full / Partial / None based on native config file availability

// TOP PERFORMER IN NOLAN’S LAB

NordVPN — 892 Mbps · Fastest of 14 VPNs Tested

200ms kill switch · 0% DNS leak · 6,000+ servers · NordLynx WireGuard · from $3.99/month

Get NordVPN — Best Deal →

VPN Speed Test Results — Related Guides

Best VPN for Home Lab 2026

Full reviews of every VPN that passed the speed test — Mullvad, IVPN, ProtonVPN, NordVPN ranked with complete lab data and pfSense integration ratings.

Read the guide →

Best Password Manager 2026

The same lab testing methodology applied to password managers. YubiKey integration, Linux CLI, and self-hosted deployment all tested and scored.

Read the guide →

Lab Testing Methodology

The complete testing process behind every score on SpywareInfoForum. Hardware specs, test procedures, and scoring weights explained in full.

Read more →

Browse All Reviews

VPNs, password managers, hardware security keys, network devices — every product reviewed using the same methodology as these speed tests.

Browse reviews →