Comparative Study of Modern VPN Solutions: Impact of Cloudflare, ZeroTier, and WireGuard on Network and Server Performance
DOI:
https://doi.org/10.55003/ETH.420203Keywords:
VPN Solutions, Cloudflare, ZeroTier, WireGuard, Network Performance, Server CPU UtilizationAbstract
This research investigates of the performance of three popular VPN solutions namely Cloudflare, ZeroTier and WireGuard, by measuring their effect on network performance and server resource usage across multiple metrics such as file upload/download speeds, round-trip time (RTT), web latency, and server CPU usage. The aim is to find the best solution for certain workloads by benchmarking these solutions in a controlled manner. The results of these experiments showed large performance differences. The results were consistent for all tests: WireGuard provided the fastest upload and download speed (19 seconds and 52 seconds, for 1000 MB files, respectively), the lowest web latency (50 milliseconds for 1000 connections), and the most efficient CPU utilization (24% at 1000 connections). For small size of packets (less than 700 bytes), Cloudflare provided competitive RTTs around 10 milliseconds and balanced performance for light workloads. However, it was not scalable indicated by web latency about 200 milliseconds and CPU utilization higher than 32% in high-concurrency scenarios. Conversely with lower workloads, ZeroTier struggled with download of heavy file sizes and lots of connections such as downloading with 1000 MB in size took 84 seconds and up to 62% of CPU utilization. WireGuard emerges as the best-suited high-performance solution for scalable applications. Cloudflare and ZeroTier offer trade-offs helpful to particular use cases, providing perspective on which VPN solution to choose depending on workload requirements and resource constraints.
References
Cloudflare. “Cloudflare.” cloudflare.com. https://www.cloudflare.com/. (accessed Jun. 25, 2024).
ZeroTier. “Zerotier.” zerotier.com. https://www.zerotier.com (accessed Jun. 25, 2024).
J. A. Donenfeld, “Wireguard: Fast, modern, secure VPN tunnel,” wireguard.com. https://www.wireguard.com (accessed Jun. 25, 2024).
E. Bajrami, F. Idrizi, and A. RUSHITI, “Enhancing Website Speed and Security with Cloudflare CDN: A Case Study on WordPress Websites,” JNSM Journal of Natural Sciences and Mathematics of UT, vol. 9, no. 17–18, pp. 294–304, 2024, doi: 10.62792/ut.jnsm.v9.i17-18.p2824.
J. John, O. Obikwelu, G. Akawuku and C. L. Onyagu, “Detecting and preventing of DDoS Attack in Cloud Computing Environment Based on Hybrid Technique (Cloudflare and WAF),” Newport International Journal of Engineering and Physical Sciences (NIJEP), vol. 3, no. 3, pp. 28–40, 2023, doi: 10.59298/NIJEP/2023/10.4.1100.
K. Bhargavan, I. Boureanu, P. -A. Fouque, C. Onete and B. Richard, “Content delivery over TLS: A cryptographic analysis of keyless SSL,” in 2017 IEEE European Symposium on Security and Privacy (EuroS&P), Paris, France, 2017, pp. 1–16, doi: 10.1109/EuroSP.2017.52.
J. Zirngibl, P. Sattler and G. Carle, “A first look at SVCB and HTTPS DNS resource records in the wild,” in 2023 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW), Delft, Netherlands, 2023, pp. 470-474, doi: 10.1109/EuroSPW59978.2023.00058.
E. J. Dewi, U. Rusydi, and R. Imam, “Implementation of Cloudflare hosting for speeds and protection on the website,” M.S. thesis, Dept. of Technology, Universitas Ahmad Dahlan, Yogyakarta, Indonesia, 2019. [Online]. Available: https://core.ac.uk/download/pdf/231724704.pdf.
D. Dykstra, B. Bockelman, J. Blomer and L. Field, “The open high throughput computing content delivery network,” presented at EPJ Web of Conferences, Sofia, Bulgaria, Jul. 9–13, 2018, Paper 04023.
S. Tarahomi, R. Holz, and A. Sperotto, “Quantifying security risks in cloud infrastructures: A data-driven approach,” in 2023 IEEE 9th International Conference on Network Softwarization (NetSoft), Madrid, Spain, 2023, pp. 346–349, doi: 10.1109/NetSoft57336.2023.10175501.
M. Hossein, “Enhancing the security and privacy of home storage servers in private clouds using zero trust principles,” M.S. thesis, Centria University of Applied Sciences, Kokkola, Finland, 2024. [Online]. Available: https://www.theseus.fi/ handle/10024/876384.
D. -F. Hrițcan, A. Graur and D. G. Balan, “Securing IoT environments using ZeroTier and OPNsense,” in 2024 23rd RoEduNet Conference: Networking in Education and Research (RoEduNet), Bucharest, Romania, 2024, pp. 1–4, doi: 10.1109/RoEduNet64292.2024.10722755.
Q. Mo, S. Duan, W. Huang, Y. Lai and Y. Xu, “Research and design of a personal data management system,” in 2022 IEEE 5th International Conference on Information Systems and Computer Aided Education (ICISCAE), Dalian, China, 2022, pp. 574–579, doi: 10.1109/ICISCAE55891.2022.9927545.
F. A. P. Kornel, F. A. Fernanda, R. Rahardi, W. D. Lukito, P. Herdian, R. Virginio and E. Mulyana, “A low cost, compact, and easy to set up 4G telemetry module for UAV application,” in 2021 15th International Conference on Telecommunication Systems, Services, and Applications (TSSA), Bali, Indonesia, 2021, pp. 1–5, doi: 10.1109/TSSA52866.2021.9768230.
P. J. Burke, “A 4G-connected micro-rover with infinite range,” IEEE Journal on Miniaturization for Air and Space Systems, vol. 1, no. 3, pp. 154–162, 2020, doi: 10.1109/JMASS.2020.3018660.
S. Mackey, I. Mihov, A. Nosenko, F. Vega and Y. Cheng, “A performance comparison of WireGuard and OpenVPN,” in Proc. 10th ACM Conf. Data and Application Security and Privacy, New York, NY, USA, 2020, pp. 162–164, doi: 10.1145/3374664.3379532.
J. A. Donenfeld, “WireGuard: Next generation kernel network tunnel,” in Proc. 2017 Network and Distributed System Security Symposium, San Diego, CA, USA, 2017, pp. 1–12, doi: 10.14722/ndss.2017.23160.
T. Goethals, D. Kerkhove, B. Volckaert and F. D. Turck, “Scalability evaluation of VPN technologies for secure container networking,” in 2019 15th International Conference on Network and Service Management (CNSM), Halifax, NS, Canada, 2019, pp. 1–7, doi: 10.23919/CNSM46954.2019.9012673.
J. Nemčik, P. Kănuch and I. Kotuliak, “Content distribution in private networks,” in 2022 International Symposium ELMAR, Zadar, Croatia, 2022, pp. 67–70, doi: 10.1109/ELMAR55880.2022.9899785.
Y. X. Sio, R. Abdulla, N. A. Ramasenderan, and M. E. Rana, “Harnessing the Power of Drones for Precision Agriculture: A Real-Time Monitoring System Utilizing Sensor Data and RF Communication,” in 2023 IEEE 21st Student Conference on Research and Development (SCOReD), Kuala Lumpur, Malaysia, 2023, pp. 301–306, doi:10.1109/SCOReD60679.2023.10563268.
Curl. “curl: Command line tool and library for transferring data with URLs.” curl.se. https://curl.se (accessed: Sep. 17, 2024).
iputils. “iputils/iputils.” github.com. https://github. com/iputils/iputils (accessed: Sep. 18, 2024).
W. Glozer. “wrk: A modern HTTP benchmarking tool.” github.com. https://github.com/wg/wrk (accessed Sep. 18, 2024).
M. Kerrisk. “top(1) Linux manual page.” man7.org. https://man7.org/linux/man-pages/ man1/top.1. html (accessed: Sep. 18, 2024)
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2025 School of Engineering, King Mongkut’s Institute of Technology Ladkrabang
This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.
The published articles are copyrighted by the School of Engineering, King Mongkut's Institute of Technology Ladkrabang.
The statements contained in each article in this academic journal are the personal opinions of each author and are not related to King Mongkut's Institute of Technology Ladkrabang and other faculty members in the institute.
Responsibility for all elements of each article belongs to each author; If there are any mistakes, each author is solely responsible for his own articles.
