Node and Latency April 27, 2026

2026 Wi-Fi bufferbloat, airtime contention, and SSH or VNC jitter to a ProxyMac Mac mini across regions

ProxyMac Engineering Team April 27, 2026 ~11 min read

Mobile developers and SREs who rent Apple Silicon M4 minis in Hong Kong, Japan, Korea, Singapore, or the United States often open tickets saying “SSH feels laggy to Tokyo” while ping shows a respectable 38 ms median. This guide answers three questions in order: whether the pain is jitter on the last hop instead of region RTT, how to separate Wi-Fi bufferbloat from airtime starvation on crowded 2.4 GHz floors, and which five reproducible steps prove the story before you ask finance to move regions. You will get a wide symptom matrix, router and laptop knobs, explicit links to cross-region latency optimization, MTR path diagnostics, and macOS SSH tuning for long RTT once Wi-Fi is ruled out. If Xcode or Bonjour discovery vanished after moving workloads to a cloud mini, Wi-Fi tuning cannot fix multicast scope—read mDNS, Bonjour & AWDL over SSH next.

Jitter versus average RTT: why ping lies to SSH operators

ICMP echo exchanges are tiny, often prioritized by consumer gateways, and usually sent at low rates. SSH interactive traffic still rides the same queues as a teammate who is uploading a 4.2 GB Xcode archive or a 900 Mbps Speedtest saturating the uplink. When the CPE buffer grows, keystrokes wait behind bulk flows: average RTT can remain near 40 ms while individual echo replies swing between 32 ms and 210 ms—that variance is what humans read as “stutter,” not the mean. VNC or Screen Sharing amplifies the effect because bitmap bursts reserve milliseconds of airtime per frame on Wi-Fi, so the scheduler may defer small ACKs and keepalive-sized packets even though the mini in Singapore is healthy.

  • Collect two traces: one from Wi-Fi, one from wired Ethernet through the same home router.
  • Log three numbers: median RTT, 95th percentile RTT, and peak RTT during upload saturation.
  • Compare SSH feel with ssh -o IPQoS=throughput versus default—our IPQoS guide explains when Apple’s defaults help or hurt.
Do not conflate guest SSIDs with production. Captive portals and DNS interception on café Wi-Fi create a different failure mode—use the guest Wi-Fi fallback guide when the SSID is untrusted.

Bufferbloat, airtime fairness, and why 2.4 GHz punishes VNC harder than SSH

Bufferbloat is oversized FIFO queueing on the bottleneck—often the ISP tail modem or the LAN bridge—where extra packets buy throughput at the cost of latency variance. Airtime fairness is a Wi-Fi-specific scheduler constraint: at 2.4 GHz with 20 MHz channels, a single client performing large airtime transfers can defer others because the medium is half-duplex and collision domains are wide. Moving the same laptop to 5 GHz with 80 MHz channel width frequently cuts per-frame airtime by roughly fourfold, which is why “just use 5 GHz” is not folklore—it is physics-backed capacity. Wi-Fi 6 improves efficiency with OFDMA, yet it does not delete bad queues on the router WAN port; you still need modern AQM (fq_codel, CAKE) or an SQM script on the choke point.

When the remote host is a ProxyMac Mac mini, the cross-ocean RTT might be 120–190 ms from North America to Tokyo—documented in our latency guide—but that number is irrelevant if the local tail adds another 80–300 ms of queueing during uploads. Your ticket should therefore cite both numbers: region RTT from Ethernet, and Wi-Fi-inflated percentiles from the same desk.

Five-column symptom matrix: classify before you buy new hardware

What you observeMost likely layerQuantitative clueFirst isolation stepDeep dive link
Keystrokes echo fine until someone starts a cloud backupLAN bufferbloat or uplink saturation95th percentile RTT jumps by more than 80 ms during uploadRun the same Speedtest on Ethernet vs Wi-FiMTR guide
VNC tiles tear only on 2.4 GHz SSIDAirtime contention on narrow channelsRetry counters rise in Wi-Fi diagnostics exportForce client to 5 GHz or 6 GHz bandVNC basics
SSH stalls on idle VPN but not on coffee-shop Wi-FiCorporate split tunnel or MTU black holePath MTU changes by 28–40 bytes when VPN togglesCompare ping -D -s 1400 patterns VPN on/offMTU article
Identical jitter from two continentsLaptop Wi-Fi driver power saveDisabling Wi-Fi AWDL test multicast noise changes nothingToggle Wi-Fi power save off for a timed testHelp center
Only SCP slow, interactive shell snappyTCP window or middlebox—not Wi-Fi jitterSingle-flow throughput caps near 42 Mbps on a 1 Gbps ISPParallelize with rsync --whole-file testKeepalive article

Five-step Wi-Fi-first runbook before you escalate “move my mini”

  1. Baseline ICMP from Wi-Fi: record median, p95, and max to the mini hostname for 60 seconds idle and 60 seconds during uplink saturation.
  2. Repeat on Ethernet through the same router; if p95 delta collapses by more than 50 ms, Wi-Fi or CPE LAN queues own the bug.
  3. Swap radio band explicitly—disable 2.4 GHz temporarily on test SSID if policy allows—and re-run the paired measurements.
  4. Capture MTR from both paths and attach CSV; follow the MTR playbook so operations sees AS hops, not screenshots.
  5. Only if Ethernet is clean, open a region discussion citing cross-region tables from the optimization guide and reserve capacity on the pricing page.
Ticket template: paste median and p95 for Wi-Fi and Ethernet, state radio band and channel width, and include one sentence on whether other blog runbooks already ruled out MTU or keepalive issues.

Router and client knobs that survive a security review

Enterprise desks often block third-party router firmware, yet many IT teams already allow SQM on the WAN for videoconferencing. Propose a bounded pilot: enable fq_codel or CAKE on the measured uplink bottleneck and cap advertised speeds to 95% of speedtest results so queues never go infinite. On macOS clients, document whether Wi-Fi power save was disabled only during the reproduction window—permanent disable is rarely needed once AQM is in place. For developers who cannot touch routers, supply a docked Thunderbolt Ethernet adapter for builds that stream to HK / JP / KR / SG / US minis; the hardware cost is far below an unnecessary region migration.

FAQ

Does ProxyMac throttle SSH on Wi-Fi? No—ProxyMac terminates TCP on the mini; anything before the ISP path is your access network. Prove it with the Ethernet A/B test above.

Is 6 GHz always better? Not if you walk out of coverage mid-session; roaming hysteresis can reintroduce jitter. Test stationary desks separately from mobile hallway use.

When should I read the CGNAT reverse tunnel guide? When Ethernet is clean yet inbound SSH fails—see CGNAT reverse SSH for asymmetric NAT cases.

Why a ProxyMac Mac mini still wins once Wi-Fi is honest

After you remove last-hop fiction, the value of a dedicated Mac mini M4 in the correct region becomes crisp: predictable SSH and Screen Sharing endpoints, unified memory for parallel builds, and native macOS toolchains without x86 translation surprises. You are not renting “a cloud VM with an Apple sticker”—you are renting measured RTT plus stable server-side scheduling that survives when your laptop finally stops fighting the air. Compare regions with data from our pricing page, keep help articles beside your Wi-Fi runbook, and use VNC documentation when GUI automation must ride alongside CLI workflows.

Pick a region after Wi-Fi stops lying

HK / JP / KR / SG / US · Apple Silicon M4