DEV Community

yaroslav
yaroslav

Posted on

The VPN Bandwidth Throttling Problem: When Providers Secretly Limit Your Speed

Introduction

You subscribe to a VPN provider advertising "blazing fast speeds" and "unlimited bandwidth," but when you download files or stream video, your connection crawls. This isn't always a coincidence. Many VPN providers engage in bandwidth throttling—deliberately limiting your speed after you exceed usage thresholds or hit peak hours—without disclosing the practice upfront. For remote workers relying on stable throughput, travelers managing data-heavy tasks, and privacy-conscious users who've paid for a premium service, this hidden limitation becomes frustrating, expensive, and sometimes business-breaking.

This article examines what bandwidth throttling really is, how to identify it, and which providers are transparent (or not) about their practices.

What Is Bandwidth Throttling?

How VPNs Work and Why Speed Matters

A VPN encrypts your traffic and routes it through a provider's server before reaching its destination. This process naturally introduces a small overhead—typically 10–20% latency increase—because your data takes an extra hop. However, this baseline slowdown is not bandwidth throttling; it's the cost of privacy.

Throttling, by contrast, is an artificial speed cap imposed after encryption, often applied selectively: you might get full speed during off-peak hours but face 50% slowdown during 7–10 PM. The user perceives this as inconsistent, unpredictable performance.

When and Why Throttling Happens

Providers throttle for several reasons:

  1. Cost management: Handling millions of users on high-speed connections is expensive. Throttling reduces their server load and bandwidth costs.
  2. Tiered service: Free and budget tiers are throttled to encourage upgrades to premium plans.
  3. Fair use policies: Providers claim throttling prevents a small number of heavy users from congesting shared infrastructure (though this rationale is often exaggerated).
  4. Network management during peak hours: Legitimate during genuine congestion, but some providers default to throttling rather than investing in capacity.
  5. Hidden monetization: Some providers throttle the "unlimited" tier and sell faster speeds as a separate add-on.

The problem: most throttling policies are buried in 15-page terms of service, and detection is deliberately difficult.

Red Flags That Indicate Throttling

Watch for these warning signs:

  • Inconsistent speeds: You get 500 Mbps at 2 AM but 50 Mbps at 8 PM, with no correlation to your ISP's actual capacity.
  • Speed drops after a threshold: Many providers throttle after you hit 200 GB, 500 GB, or 1 TB in a month. Once you disconnect and reconnect, speed returns temporarily.
  • Different speeds by server: Some providers throttle their free or shared servers while keeping premium servers unthrottled. This is bait-and-switch pricing.
  • Promotional speed claims vs. reality: The provider advertises "up to 1 Gbps" but most real-world users report 10–100 Mbps, especially for BitTorrent.
  • Slow torrent-specific speeds: Throttling P2P traffic is particularly common. You'll get fast HTTPS speeds but crawl on torrents.
  • No official speed guarantee: Legitimate providers publish minimum guaranteed speeds (e.g., "10 Mbps on all connections"); throttlers avoid this.

Providers: Transparency vs. Hidden Throttling

The Honest Ones

A small number of providers are transparent:

  • Proton VPN (starting $119.88/year): Publishes speed test results, no throttling on paid tiers, throttles only their free tier predictably.
  • IVPN (starting $60/year): No throttling on any tier; publishes infrastructure specs and audit results. Small network, prioritizes quality over growth.
  • Mullvad (pay-as-you-go, $5/month): No bandwidth limits, no throttling, no usage logs. Minimal marketing; very transparent.

The Problematic Ones

  • ExpressVPN (starting $99.99/year): Users report unpredictable slowdowns, especially during peak hours. The company claims this is ISP throttling, but independent tests show it's their infrastructure.
  • NordVPN (starting $65.28/year): Throttles P2P traffic to 10–50 Mbps while HTTPS speeds remain high. Free tier (NordVPN Free) is heavily throttled.
  • Surfshark (starting $48.99/year): Budget tier users report severe throttling after 50 GB/month. Premium tier has no stated limits but shows inconsistent speeds.
  • CyberGhost (starting $45.99/year): Optimized servers for streaming have different (often slower) throughput than general-purpose servers; throttling isn't mentioned in marketing.

Comparison Table

Provider Starting Price Throttling Policy P2P Throttled? Transparency Rating
Proton VPN $119.88/yr None (paid tiers) No High — publishes audits ★★★★★
IVPN $60/yr None No Very high — infrastructure published ★★★★★
Mullvad $5/month None No Very high — no logging, open source ★★★★★
ExpressVPN $99.99/yr Peak-hour slowdowns Selective Low — blames ISPs ★★★
NordVPN $65.28/yr P2P + free tier heavy Yes Low — hidden in ToS ★★
Surfshark $48.99/yr Budget tier, data caps Moderate Low — terms vague ★★
CyberGhost $45.99/yr Streaming servers reduced Selective Low — marketing vs. reality mismatch ★★

How to Test for Throttling

Self-Testing Methods

  1. Speed test before and after VPN: Use speedtest.net without the VPN, connect to VPN, test again. A consistent 50%+ drop (beyond the expected 10–20% overhead) suggests throttling.
  2. Multi-protocol testing: Test the same server via OpenVPN, WireGuard, and IKEv2. If one protocol is notably slower, throttling may be traffic-type specific.
  3. Time-of-day pattern: Test the same server at 3 AM, 8 AM, 1 PM, 8 PM, and midnight. Throttling shows repeating slowdowns at certain hours.
  4. Heavy usage trigger: Download 300 GB in a month on a paid "unlimited" tier and track if speeds drop.
  5. P2P-specific test: Download a Linux ISO via torrent. Compare speed to HTTPS downloads of the same file size. If P2P is 10× slower, they're throttling.

Third-Party Testing

Websites like VPNToolPick regularly test real-world speeds and publish results. Look for providers that invite third-party audits rather than hiding behind marketing claims.

Solutions and Workarounds

If You're Already Throttled

  • Rotate servers: Throttling is often per-server. Try different server locations; one may have more capacity.
  • Switch protocols: WireGuard often performs better than OpenVPN on congested servers; try it first.
  • Use smaller tunnels: Some providers offer less-marketed servers (e.g., company servers, partner servers) that have less throttling.
  • Disconnect and reconnect: This resets your session counter on some providers (temporary fix only).

How to Avoid Throttling

  • Read the fine print: Search the terms of service for "throttle," "fair use," "peak hours," and "P2P." If it's not explicitly prohibited, the provider is likely doing it.
  • Check user reviews: Reddit (r/VPN, r/privacy), forums, and recent YouTube tests reveal throttling patterns that marketing hides.
  • Prioritize open-source audits: Providers with published code audits and third-party infrastructure reviews are less likely to throttle secretly.
  • Ask support directly: Email the provider asking, "Do you throttle during peak hours?" or "What's the minimum guaranteed speed?" If they dodge, that's your answer.
  • Choose providers with SLAs: Some providers (Proton, IVPN) publish service level agreements guaranteeing minimum speeds or refunds.

Conclusion

Bandwidth throttling is common, profitable for providers, and hard to detect without deliberate testing. The gap between "unlimited" marketing and real-world 100 Mbps caps represents billions in unspoken upselling.

Your best defense is demanding transparency: choose providers that publish infrastructure details, welcome audits, and explicitly forbid throttling in their terms. If a provider won't answer direct questions about speed guarantees, assume they're hiding throttling.

For serious evaluation of provider practices and real-world speed tests, consult independent comparison resources before paying. Your privacy is worth protecting—but not at the cost of paying for speeds you never receive.

Top comments (0)