very slow speed when using Routing all client traffic

lost01

Hi

I want to use open vpn to bypass filtering.
When i activated Routing all client traffic (including web-traffic) through the VPN
with this command :

push "redirect-gateway def1"

and connect to my server from my pci all of my traffic went through open vpn but the connection speed
is terrible and when i use normal proxy and socks i have a fast speed ...
is't any way to solve it or it's natural?
so we can't use openvpn for bypass filtering?

Regards.

janjust

test the connection speed of your openvpn link itself, e.g. by running iperf on both openvpn client and server.

An OpenVPN tunnel will always be a bit slower compared to using a direct (or even SOCKS based) connection, but it is possible to preserve 95+ % of bandwidth.

lost01

janjust wrotetest the connection speed of your openvpn link itself, e.g. by running iperf on both openvpn client and server.

An OpenVPN tunnel will always be a bit slower compared to using a direct (or even SOCKS based) connection, but it is possible to preserve 95+ % of bandwidth.

janjust wrotetest the connection speed of your openvpn link itself, e.g. by running iperf on both openvpn client and server.

sorry i can't understand what you said.
how can i test the speed?

janjust

what OS are your openvpn server and client running?

lost01

janjust wrotewhat OS are your openvpn server and client running?

Server have Windows server 2003

client have windows 7

lost01

any suggestion?

janjust

post your sanitized server and client config files - without them it's impossible to tell what is going on.

lost01

janjust wrotepost your sanitized server and client config files - without them it's impossible to tell what is going on.

Here you are:

server:

                                   
;local 178.162.154.157

push "redirect-gateway def1"
push "dhcp-option DNS 4.2.2.4"

port 80

;proto tcp
proto udp

dev tap
;dev tun


;dev-node MyTap

ca ca.crt
cert server.crt
key server.key  # This file should be kept secret


dh dh1024.pem


server 10.8.0.0 255.255.255.0


ifconfig-pool-persist ipp.txt


;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100


;server-bridge


;push "route 178.162.154.157 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"

;client-config-dir ccd
;route 192.168.40.128 255.255.255.248

;client-config-dir ccd
;route 10.9.0.0 255.255.255.252

;learn-address ./script

;push "redirect-gateway def1 bypass-dhcp"

;push "dhcp-option DNS 208.67.222.222"
;push "dhcp-option DNS 208.67.220.220"

;client-to-client

;duplicate-cn

keepalive 10 120

;tls-auth ta.key 0 # This file is secret

;cipher BF-CBC        # Blowfish (default)
;cipher AES-128-CBC   # AES
;cipher DES-EDE3-CBC  # Triple-DES

comp-lzo


;max-clients 100


;user nobody
;group nobody


persist-key
persist-tun


status openvpn-status.log


log         openvpn.log


verb 3


;mute 20

client:


client

dev tap
;dev tun

;dev-node MyTap

;proto tcp
proto udp

remote 178.162.154.157 80
;remote my-server-2 1194

;remote-random

resolv-retry infinite

nobind

;user nobody
;group nobody

persist-key
persist-tun

;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]

;mute-replay-warnings

ca ca.crt
cert client1.crt
key client1.key

ns-cert-type server

;tls-auth ta.key 1

;cipher x

comp-lzo

verb 3

;mute 20

janjust

try adding

fragment 1400
mssfix

to both client and server configs to see if that helps performance.

Mimiko

Use http://www.speedtest.net/ to test the speed with VPN and without it. It's not quite a good speed tester, but will see the relative results. Post the results here.