Tap, Tun and Broadcasts

grootstyr

I have a working bridging configuration.
It took some time to get it working but eventually it worked.
I unfortunuatly need the bridging because of Bonjour(which uses broadcast messages)
The bridging setup is, however, not meeting my expectations performance wise.
I've heard that routed openvpn configurations are faster. My question is: how much faster is it?
And is there a possibility to route broadcast traffic over the vpn(as this is a requirement)

~Grootstyr

Mimiko

Routing mode is faster than bridge mode not by the link connection speed established, but the ammount of packets transmitted thru the tunnel. In bridging mode a lot of broadcastin packets, that are normal in a wired lan, are transmitted thru the tunnel. Mostrly those package are system packets that are not needed for normal work.

To limit such packets that goes thru tunnel, you can set-up a bridging connection, and using iptable rules, block aor allow certain packets. Or set-up a routing connection, put interfaces in promiscious mode and using iptables route needed packets.

janjust

I've heard that routed openvpn configurations are faster. My question is: how much faster is it?

a bridged setup typically cuts performance in half compared to a non-bridged setup. how fast either are also depends on a few other factors

And is there a possibility to route broadcast traffic over the vpn(as this is a requirement)

nope this is not possible from a networking point of view; for Bonjour your best bet is to use a special DNS server , but I have no clue how to set one up (read up at wikipedia for details).