Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PCHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
FREEDOM251

Freedom251 › Blog › bandwidth

Why Is My VPS Network Speed Slow? How to Diagnose It

By Freedom251 Team · · 10 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A VPS that feels slow is not necessarily short on bandwidth. The delay may come from DNS, a congested route, packet loss, CPU or disk contention inside the virtual machine, a virtual NIC or egress ceiling, firewall and route errors, or an MTU mismatch. Diagnose each layer separately: define the symptom, verify the VPS locally, test the path, measure controlled throughput in both directions, correlate results with VM resources, and then check the plan’s limits.

Start by defining what “slow” means

“Network speed” describes several different outcomes. A web page can take a long time to begin loading because DNS or connection setup is delayed even when bulk transfer is fast. SSH or RDP can feel laggy because of latency, jitter or packet loss, while a file copy may be limited by disk reads or writes rather than the network. A download can be slow in one direction and normal in the other.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Write down the exact symptom before changing settings:

  • Is the problem upload, download, or both?
  • Does it affect one destination, many destinations, or only a particular region?
  • Does it affect one protocol or application, such as HTTPS, SSH, RDP, UDP, or a database connection?
  • When did it occur, and does it follow a daily or workload pattern?
  • Which client network and geographic region are involved?
  • What normal endpoint can you use for comparison?

This record prevents a browser speed test or a single failed connection from being mistaken for the VPS’s overall capacity.

#1 Best Overall
Sale
TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black
  • [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
  • [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
  • [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
  • [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
  • [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.

Use a safe diagnostic order

Run tests from the VPS, from the affected client, and—when measuring throughput—from a second controlled host. Keep an out-of-band provider console session open before changing a firewall, route, or MTU. A bad rule can terminate your SSH session, leaving the machine reachable only through the console.

1. Verify addresses and routing

From the VPS console or an existing shell, run:

ip addr
ip route

ip addr should show the expected interface and addresses. ip route should show a usable default route. A missing default route, an unexpected gateway, or traffic leaving through the wrong interface can make only some destinations fail or can create severe delay.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

2. Check filtering and listeners

Review whichever firewall is active:

ufw status verbose
iptables -L -n -v
nft list ruleset

Use the command appropriate to the firewall installed on the system; the examples are alternatives, not a requirement to run all three. Check that the service is actually listening on the intended address and port:

ss -tlnp

A port that is closed, bound only to localhost, or filtered by a security group is an application or policy problem, not evidence of insufficient bandwidth.

Separate DNS delay from network reachability

Compare a numeric IP with a hostname:

ping 1.1.1.1
ping google.com

For the actual service, use a request that exercises the relevant protocol, such as curl to the real HTTPS endpoint. If the numeric address responds promptly but the hostname is slow or fails, inspect the resolver configuration and DNS path. If both are slow, continue with latency and route tests. ICMP reachability alone does not prove that an application port is healthy.

Map latency, loss and the route

Begin with a short ping to the affected destination, then trace the path:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
Sale
Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)
  • 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
  • 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
  • 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
  • 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
  • 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
ping DESTINATION
traceroute DESTINATION

For a TCP service, test the same protocol and port. An HTTPS example is:

mtr DESTINATION -T -P 443 -c 100 --report

AWS guidance explains that traceroute and MTR show each hop and its round-trip time. Matching the test protocol to the traffic matters: an ICMP path can look different from a TCP path to port 443, and UDP behavior can differ again.

How to read MTR without false conclusions

  • An intermediate router that does not answer probes is not automatically dropping your traffic. Some routers de-prioritize or block diagnostic replies.
  • Look for loss or increased latency that continues through every later hop and reaches the destination.
  • Loss visible only at one intermediate hop, with clean later hops, is usually a response-policy artifact rather than end-to-end packet loss.
  • Compare several destinations. A problem affecting one route or region points toward peering or transit; a problem affecting every destination points toward the VPS, its provider edge, or the client network.
  • Save the report with its timestamp. Routing can change, so a later clean test does not disprove an earlier incident.

Measure real throughput with controlled endpoints

Use iperf3 between two hosts you control, ideally in a nearby region and on a path representative of the workload. A public browser speed test combines the client connection, browser, test server, protocol, and route; it cannot establish the VPS’s guaranteed capacity.

Run the basic test

  1. On the receiving host, start the server:
    iperf3 -s
  2. From the VPS, test toward that host:
    iperf3 -c SERVER
  3. Reverse the direction so the VPS receives traffic:
    iperf3 -c SERVER -R
  4. Repeat with multiple streams if a single TCP flow does not fill the path:
    iperf3 -c SERVER -P 4
    iperf3 -c SERVER -R -P 4
  5. Where simultaneous upload and download matter, test both directions at once:
    iperf3 -c SERVER --bidir

The Ubuntu manual documents throughput and MTU-related options, while Microsoft’s Linux VM guidance notes that an apparent network ceiling can actually be a VM or disk ceiling. Record the command, direction, stream count, duration, endpoint locations, and result for every run.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Interpret directional and stream differences

Observation What it suggests Next check
Upload and download are both low with one and several streams A shared-port, egress, vNIC, host, route, or resource ceiling is possible. Check VM graphs, plan limits, and MTR to the test host.
Only the VPS-to-host direction is low An outbound egress policy, provider shaping, route, or VPS transmit limit may be involved. Compare another destination and inspect provider terms.
Only the host-to-VPS direction is low An inbound path, receive processing, firewall, or VM receive limit may be involved. Run reverse tests from a second controlled host.
One stream is low but multiple streams improve substantially Per-flow protocol behavior, congestion, or latency may be limiting a single TCP connection. Compare with the application’s connection pattern; do not treat the multi-stream result as a single-session guarantee.
Throughput falls while CPU, disk wait, or interface counters rise The VM or its storage path is competing with the transfer. Correlate resource graphs during a repeat test.

Watch the VM while testing

Run the throughput test while observing CPU, memory, swap, disk latency or I/O wait, interface counters, and the provider’s monitoring graphs. A quiet network can still deliver poor results if the guest cannot process packets or read the data quickly enough.

CPU and vCPU limits

High CPU usage, sustained steal time where reported, or vCPU exhaustion can delay packet processing and application encryption. Google Cloud identifies vCPU exhaustion and virtual NIC saturation as causes of latency and loss. If the test improves when the workload is stopped, the bottleneck is inside the VM or its assigned quota rather than necessarily in the provider’s physical network.

Rank #3
New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord | 6.35mm Jack, Durable Design, Stage and Home Studio Use, Low Noise Shielded Electric Cord for Bass, Keyboard, Amp, Mixer
  • [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
  • [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
  • [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
  • [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
  • [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by

Disk interference

For a file transfer, the sender must read and the receiver must write. Persistent-disk activity can therefore reduce measured network throughput and add latency. Microsoft summarizes the distinction this way: “Throughput limitations often come from VM or disk limits rather than the network itself.” Repeat the test with a memory-backed or otherwise low-disk workload when practical, and compare it with a transfer whose storage path is not busy.

Virtual NIC and interface counters

Look for transmit or receive errors, drops, or a counter that approaches the provider’s documented interface ceiling. A saturated vNIC can produce both lower throughput and higher latency. Counters that remain clean while only one destination is affected point more strongly toward routing, peering, or the remote endpoint.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Check the exact plan, region and provider policy

Do not compare a measured result with a generic “gigabit VPS” claim. Limits depend on VM size, region, egress policy, shared-port design, fair-use terms, protocol, and workload. Some virtual servers use a shared network port; guaranteed throughput or private networking may require explicit confirmation before ordering.

Check the instance documentation and account console for:

  • Maximum or guaranteed egress and ingress, including whether the figure is per VM, per port, or shared.
  • Region-specific limits and differences between public and private networking.
  • Traffic shaping, fair-use rules, burst allowances, and overage or suspension behavior.
  • vCPU, vNIC, packet-per-second, and connection limits tied to the VM size.
  • Whether IPv4 and IPv6 use different routes or policies.

A provider limit is plan- and location-specific. If the same controlled test is consistently near the documented ceiling, changing DNS or MTU will not create additional capacity; a larger plan, different region, or a provider with a suitable guaranteed-bandwidth policy is the relevant decision.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Investigate MTU and fragmentation when symptoms fit

MTU problems are not the first explanation for every slow transfer, but they fit a recognizable pattern: inconsistent UDP, large transfers that stall, or failures limited to one path, tunnel, or protocol. A mismatch can trigger fragmentation; fragments may arrive late or out of order, and some networks discard them.

Rank #4
BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees
  • Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
  • Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
  • All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
  • Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
  • Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.

Check the interface MTU and compare behavior across paths before changing it. Cloud guidance warns that MTU mismatches particularly affect UDP and that fragmentation can add delay and reordering. Make any MTU change only with console access and a rollback plan, then repeat the same TCP, UDP, and MTR tests. A change that fixes one destination but breaks another indicates a path-specific issue rather than a universal improvement.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Explain common “slow” symptoms

SSH feels delayed while CPU is normal

Interactive sessions are sensitive to round-trip time, jitter, and even small amounts of packet loss. Run ping and a TCP MTR to the SSH destination, then compare from another client network. If bulk iperf3 throughput is healthy but keystrokes lag, investigate the path and client connection before resizing the VPS.

RDP or another remote desktop freezes

Remote desktop protocols react badly to loss and variable latency. A high average throughput result does not rule out brief loss bursts. Capture an MTR during the incident and check whether CPU, vNIC, or disk activity spikes at the same time.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A website is slow but file transfers are fast

Measure DNS separately, then inspect connection setup and the application’s listening socket with ss -tlnp. A slow database query, overloaded web worker, TLS processing, or origin disk can delay the page without a network-capacity problem. Test the service’s actual TCP port rather than relying only on ICMP.

Only large downloads fail or hang

Check MTU and fragmentation, firewall state, receive-side resource use, and disk write latency. Compare a small request with a controlled transfer and test from more than one destination.

IPv6 or one region is unreliable

Run separate MTR or traceroute reports for the affected address family and destinations. Persistent loss on one route, while another family or region is clean, is evidence for a routing or peering escalation rather than a general VPS bandwidth shortage.

Use a failure-pattern decision table

Pattern Most useful evidence Likely area to investigate
Hostname slow, numeric IP responsive Separate ping or application request to IP and hostname Resolver configuration or DNS path
Loss continues from an intermediate hop to the destination MTR report with 100 probes to the service port End-to-end route, transit, or provider edge
Only one destination or region is affected Comparative MTR and iperf3 runs to another region Peering, transit, remote network, or destination service
All destinations slow while CPU or disk wait is high Resource graphs captured during iperf3 vCPU, storage, or guest workload contention
Results stop near a published plan ceiling Repeated directional tests and instance specification Shared port, egress, vNIC, or fair-use limit
UDP or large packets fail selectively Protocol-matched tests and MTU comparison MTU mismatch, fragmentation, or filtering

Prepare an escalation that support can reproduce

Send evidence rather than a single speed-test screenshot. Include:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Service or instance ID, affected public IP address, operating system, region, and VM size.
  • The symptom, direction, application or protocol, destination addresses and ports, client network, and exact UTC timestamps.
  • Outputs from ip addr, ip route, and the relevant firewall listing.
  • The listening-service check from ss -tlnp.
  • MTR or traceroute reports, using TCP and the service port where appropriate.
  • iperf3 results in both directions, including stream count and whether --bidir was used.
  • CPU, memory, swap, disk-I/O, and interface graphs covering the test window.
  • The exact plan, region, egress policy, and any shared-port or fair-use language.

Provider guidance for routing, IPv6, and multi-network packet loss commonly asks for the service, IP, operating system, location, and MTR or traceroute output. Supplying the complete test conditions lets support distinguish a route problem from a plan limit or a busy guest.

Compare providers or fixes on the measurements that matter

If the diagnosis leads to a plan change or migration, compare like for like instead of relying on a headline port speed:

  • Latency and jitter from the regions where users actually connect.
  • Packet loss by destination and by protocol, especially TCP to the application port.
  • Single-stream and multi-stream throughput, separately for upload and download.
  • vCPU, vNIC, packet-processing, and egress limits for the exact VM size.
  • Whether disk I/O can interfere with network performance.
  • MTU behavior across public, private, and tunneled paths.
  • Region selection, peering, shared-port design, and fair-use policy.
  • Whether support will analyze reproducible MTR and traceroute evidence.

Keep the same endpoints, commands, stream counts, test duration, and timestamps when comparing alternatives. Otherwise, a change in the client or route can masquerade as an improvement in the VPS.

Make changes conservatively

  1. Preserve console access and record the current firewall, route, and MTU state.
  2. Change one variable at a time; for example, correct a firewall rule before altering the MTU.
  3. Repeat the same DNS, MTR, directional iperf3, and application tests after each change.
  4. Keep a rollback command or documented previous value for every network change.
  5. Stop and revert if SSH, IPv6, or a previously working destination becomes unreachable.

This method leaves you with a defensible result: a demonstrated application issue, a path-specific loss problem, a VM resource bottleneck, an MTU fault, or a provider limit that can be escalated or compared accurately.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

bandwidthiperf3LatencyLinuxMTRNetwork TroubleshootingTracerouteVPS

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.