[Solved] OpenVPN client on VMs ESXi very slow network speed in tunnel

[freeman1doma]

I have two different ESXi hosts: 6.5 and 5.1 versions. On both have the same situation.

VM's operation systems are Windows Server 2016 Standart x64, Windows 7 x64, FreeBSD, OpenBSD, it not matter. WAN direct speed on all VMs is up to 700 mbit/s. All have one critical problem with speed through OpenVPN client to different OpenVPN servers(and network behind): very low network speed in tunnel - max up to 6-7 mbit/s. From physical computer through OpenVPN client to my OpenVPN servers speed - up to 50-80 mbit/s.

It was tested on E1000 and VMXNET3 vm network adapters - no difference, very low speed in tunnel.
VM have 2 vCPU and 2GB RAM. Host ESXi - DELL R730 128 RAM 2 Xeon CPU.

Who has seen this type of problem?

Please help

Server config (OpenBSD 5.9 amd64)

View OriginalServer config

proto udp
port 1194
dev tun0

ca /home/admin/VpnServer/ca.crt
cert /home/admin/VpnServer/server.crt
key /home/admin/VpnServer/server.key
dh /home/admin/VpnServer/dh1024.pem

server 192.168.16.0 255.255.255.0

keepalive 10 120
comp-lzo

user _openvpn
group _openvpn
daemon openvpn

persist-key
persist-tun

client-to-client

push "route 192.168.200.0 255.255.255.0"
push "route 192.168.100.0 255.255.255.0"
push "route 192.168.210.0 255.255.255.0"

client-config-dir /etc/openvpn/ccd/

route 192.168.100.0 255.255.255.0
route 192.168.210.0 255.255.255.0

sndbuf 0
rcvbuf 0

Client config (Windows 7 x64)

View OriginalClient config

client

dev tun

proto udp

remote x.x.x.x 1194

ca ca.crt

cert win.crt

key win.key

route-method exe

route-delay 2

keepalive 10 120

ns-cert-type server

comp-lzo

persist-key
persist-tun

sndbuf 0
rcvbuf 0

tun-mtu 1500

mssfix 1450

verb 3

[freeman1doma]

Server

Code: Select all

# openvpn --version                                                                                                                                                               
OpenVPN 2.3.10 x86_64-unknown-openbsd5.9 [SSL (OpenSSL)] [LZO] [MH] [IPv6] built on Feb 25 2016
library versions: LibreSSL 2.3.2, LZO 2.09

Client

Code: Select all

OpenVPN 2.4.0 -- released on 2016.12.27

[freeman1doma]

Have anybody such problem?

[TinCanTech]

I would advise you use 2.4 on your server as well as your client ..

I use openvpn and I get exactly the speed my internet/Networks can handle.

In my experience, unless you know you have a network problem and how to use openvpn to work around it, then I would suggest you try the openvpn default settings for things like MTU, mssfix, fragment and buffers.

One simple test you can try is iperf over the internet without using openvpn. Perhaps there is an actual network fault causing the problem.

[freeman1doma]

Thanks. Its really network bandwidth problem ((