Slow SMB performance on macOS

[1human]

Hi,

 

I was trying to transfer a 2GB file between my NAS and my MacBook on LAN and it took longer than if I was to download from iCloud Drive or the like.

I did some research into this and people suggested turning off SMB signing. I understand this makes it more insecure however if I'm using Wireguard to tunnel when I'm outside my LAN then is it that much more insecure? I assume it's more secure than NFS which I'm trying to avoid at the moment

[StDragon]

Frankly SMB/CIFS transfers on MacOS have always sucked. Not sure why, but it's been that way for well over 15 years. Anyways, I doubt disabling SMB signing would help as the encryption wouldn't have that much overhead on the CPU (at either end) anyways.

Be sure the NAS is at least supporting SMB2. Ideally have the minimum set to SMB3 or higher if all client devices support it.

[1human]

10 minutes ago, StDragon said:

Frankly SMB/CIFS transfers on MacOS have always sucked. Not sure why, but it's been that way for well over 15 years. Anyways, I doubt disabling SMB signing would help as the encryption wouldn't have that much overhead on the CPU (at either end) anyways.

Be sure the NAS is at least supporting SMB2. Ideally have the minimum set to SMB3 or higher if all client devices support it.

I set the min protocol to SMB3 server-side. Apparently turning signing off should help a lot but I'm concerned about security.

[Electronics Wizardy]

21 minutes ago, 1human said:

I set the min protocol to SMB3 server-side. Apparently turning signing off should help a lot but I'm concerned about security.

I't run the test to see if it helps first. 

 

Security wise its probably not a big issue.  You really shoudln't be sharing SMB over WAN anyways, and if you have people tapping your LAN you probably have more problems.

[1human]

2 hours ago, StDragon said:

SMB/CIFS transfers on MacOS have always sucked.

It's not worth it to deal with the bad SMB integrations on macOS so I decided to give up and just use NFS instead. I wish it was more secure but what can ya do.