Verizon Wireless snooping or throttling VPN services?

I only noticed this recently but after using a VPN service often when I’m not home, I’ve found that I still have my data throttled when watching streamed video from sources like YouTube and a Netflix. Turns out, over data, Verizon is still recognized as the ISP and thence reads my traffic and throttles accordingly.

Control, no VPN, home wifi: Ookla Speedtest.net and Netflix Fast.com

Control, no VPN, 4G LTE: Ookla Speedtest.net and Netflix Fast.com

Test, VPN connected, home wifi: Ookla Speedtest.net and Netflix Fast.com

Test, VPN connected, 4G LTE: Ookla Speedtest.net and Netflix Fast.com

I understand that all carriers throttle a majority of popular video streaming services, but a VPN used to get around it. I do also find out generally concerning that Verizon can still essentially snoop in on whatever data goes in and out of my phone even though I’m connected to a VPN in an attempt to remain private.

I’m using Private Internet Access for a VPN

I set up a VPN on my gigabit Fios connection the other day. Using Verizon LTE and connecting to my VPN at home, there is no video throttle on LTE. Even with multiple different VPN apps I’ve tried.

Might want to check your setup.

This also highly depends on VPN protocol and how much bandwidth said server has for you to connect to

It wouldn’t surprise me at all if Verizon found a way to fingerprint “suspected video” traffic and throttle some VPN methods.

Streaming video has some telltale patterns that escape HTTP packets header and data. The way is loads is in a predictable pattern that very few other means of transmission send.

Was I going to write a whitepaper on how to do it? No. Am I surprised Verizon might have found someone willing? Also no.

That being said, the easiest option to start with is to just try a different VPN and protocol, and see what happens.

PIA doesn’t scramble Open VPN packet metadata, so technically any ISP can recognize and modify a VPN connection. However, if you use a VPN that does scramble packet metadata, the ISP can’t recognize your VPN. This might be one way to decide what VPN to use depending on your needs.

I haven’t known Verizon to throttle VPNs but I know AT&T often does. The reason being that people use VPNs to get around network management controls on streaming and such. While they can’t see the traffic in some VPNs they can see the destination, and if it’s one of these consumer VPNs that people use, they have a good chance of being throttles, whereas they’ll usually leave a corporate VPN alone that someone would be using to work from home etc

I just ran a test. Verizon shared data plan, PIA Chicago server using WireGuard. Android 12. PIA app from the Play store.

No VPN: 3 Mbps
VPN: 23 Mbps.

I’m using Windscribe VPN and I have no throttle for video streaming at all on Verizon LTE.

This is using my phone and the PIA app installed via .apk file. Home internet is Fios. I don’t get throttled with home internet, just the mobile service. What VPN service do you use?

In this case, the VPN service has the bandwidth. Verizon is still seeing the traffic and throttles the Netflix data as documented

what speed test are you using and what does the speedtest say is your ISP

Fast.com on my phone’s browser and it’s not showing an ISP but it is showing an ipv6 address when not using the VPN and an IPv4 address when on the VPN so that should be enough to verify the “ISP”.

Interesting. Thanks for the additional variable of the Google Play Store install vs apk file. I wanted to use their MACE feature but it’s not available from the play store install. Looks like this does bypass the video speed throttle but Ookla’s Speedtest.net still shows Verizon being the ISP. I’ll take a half solution over nothing though. Appreciated

I’m seeing Verizon as the ISP also when on PIA and using the Ookla app. I also see Verizon as the ISP when using my own VPN server. Interesting…

Ipleak.net is showing accurate IP addresses for both PIA and my VPN.

If I’m understanding the logic right through Ookla, it’s because of the logic Ookla uses when it’s connected to cellular. When on Cellular, it goes off of the carrier name itself, regardless of VPN Status. When over WiFi, it’ll go off of ISP based on the IP Address.