EXTREMELY slow speeds!

aciid

Hi guys!

Just managed to install and configure openvpn on my Centos 6 VPS.

Info:
OpenVZ container using tun
Centos 6 64bit OS
100mb port
Openvpn 2.2.2-1
Connecting from win 7 pc

Speedtest before connection:

Speedtest after connection:

I can sometimes hit 2-3mb down/up speed throught the vpn, but rarely 🙁
My host confirms that their connection is fine (they are even a speedtest host)

Server config:

local 199.15.254.xxx #- change it with your server ip address
port 1194 #- change the port you want
proto udp #- protocol can be tcp or udp
dev tun
mssfix 1400
tun-mtu 1440
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login
client-cert-not-required
username-as-common-name
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status server-tcp.log
verb 3

Client config:

client
dev tun
proto udp
remote 199.15.254.xxx 1194
resolv-retry infinite
nobind
mssfix 1400
tun-mtu 1440
persist-key
persist-tun
ca ca.crt
auth-user-pass
comp-lzo
verb 3

Could anyone give me some hints on what is causing this enormous slowdown and how I could fix this?

Many thanks

Mimiko

Read this post for hints: https://forums.openvpn.net/topic9379.html

aciid

Mimiko wroteRead this post for hints: https://forums.openvpn.net/topic9379.html

Thanks for the reply, I have already tried BF-CBC cipher but notice no real difference.

Any other ideas

Mimiko

Did you tried same speedtest from the OpenVPN server?
Try disabling comp-lzo

aciid

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

aciid

Also tried changing ports a few time, no difference 🙁

Mimiko

Could you do a traceroute to speedtest with vpn enabled. Also, using wget on windows download a test file from OpenVPN server with vpn connected.

aciid

Speedtest.net traceroute:

  1   102 ms   102 ms   101 ms  10.8.0.1
  2   102 ms   103 ms   102 ms  vps01.reliablehostingservices.net [199.15.252.xxx]
  3   105 ms   105 ms   102 ms  cr1.iad1.inforelay.net [66.231.176.53]
  4   109 ms   107 ms   108 ms  xe-3-0-7-303.ar2.iad1.us.nlayer.net [69.31.30.33]
  5   105 ms   105 ms   104 ms  as3491.xe-4-0-7.ar2.iad1.us.nlayer.net [69.31.31.190]
  6   187 ms   187 ms   187 ms  netriver.ge2-16.br01.sea01.pccwbtn.net [63.216.14.162]
  7   187 ms   188 ms   187 ms  static-74-209-160-12.lynnwood.netriver.net [74.209.160.12]

Download test with accelerator:

Without accelerator:

Mimiko

It's like your VPN server has a overall upload speed limit. Try to download a file from VPN server without VPN connection.

aciid

I already said I can max my download speed @ 4.5MB/s when downloading files from my vps

Also the host has made it clear to me they do not impose ANY speed restrictions. 🙁

300000

could you try my conf to see if it works for you or not , make sure backup all your config anf cerfificate anh try this one

let do on server first , place everything in config file and start on the server , make sure change iptable to TCP protocol

server 10.10.100.0 255.255.255.0
port  1194
proto tcp
dev tun0
comp-noadapt 
comp-lzo yes
keysize 256
route 10.10.100.0 255.255.255.0 10.10.100.1
topology subnet
mode server
tls-server
tun-mtu 1500
mssfix 1500
push "redirect-gateway def1 "
push " ip-win32 adaptive "
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
duplicate-cn
client-to-client
keepalive 10000 1200000
persist-remote-ip
persist-key
persist-tun
verb 3
mute 2
mlock 
tls-cipher AES256-SHA
cipher AES-256-CBC # AES 
socket-flags TCP_NODELAY
push "socket-flags TCP_NODELAY"
script-security 3 
<dh>
-----BEGIN DH PARAMETERS-----
MIGHAoGBAKHDOs+mwxW96SQhTdpbO7CG6FtVhvbgA8A+4rrpS9js0tWiBbqHY0CN
6uMy3WP9A7wuAhO1dV3/2lhnA0oMO7uj5aGgz2kwOhIH20/pXBy9XEQWLAbRTjhY
ge3xfUeuRRllZ8A0fh10c6KZcXF63tXsOljZO3+T61NEx0j26girAgEC
-----END DH PARAMETERS-----
</dh>
<ca>
-----BEGIN CERTIFICATE-----
MIIDTzCCArigAwIBAgIJAOGR9d7NJf/rMA0GCSqGSIb3DQEBBAUAMHkxCzAJBgNV
BAYTAlVTMQswCQYDVQQIEwJDQTEVMBMGA1UEBxMMU2FuRnJhbmNpc2NvMRQwEgYD
VQQKEwtGb3J0RnVuc3RvbjEPMA0GA1UEAxMGbWF5Y2h1MR8wHQYJKoZIhvcNAQkB
FhBtYWlsQGhvc3QuZG9tYWluMB4XDTA5MDUyNTE2MzI0NVoXDTE5MDUyMzE2MzI0
NVoweTELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRUwEwYDVQQHEwxTYW5GcmFu
Y2lzY28xFDASBgNVBAoTC0ZvcnRGdW5zdG9uMQ8wDQYDVQQDEwZtYXljaHUxHzAd
BgkqhkiG9w0BCQEWEG1haWxAaG9zdC5kb21haW4wgZ8wDQYJKoZIhvcNAQEBBQAD
gY0AMIGJAoGBAK3G3nWPY3uMMZU+Zuo+TF6sbMTOsbAv5dNyE0g1YPsg+y46Zf98
EaurSyaF9MPAMODjyEAaaoZR9NKkaEkdbSh+PSwF3bRhQ4vvOR0A51a5XZjan2fc
XELEuimx6DpdYraZPrQHO8fRUViwxOHi8ywbnagLIwuM2Yg5riv3+W2tAgMBAAGj
gd4wgdswHQYDVR0OBBYEFOKxsfqlayO0LQHnYsw2P5xAiThPMIGrBgNVHSMEgaMw
gaCAFOKxsfqlayO0LQHnYsw2P5xAiThPoX2kezB5MQswCQYDVQQGEwJVUzELMAkG
A1UECBMCQ0ExFTATBgNVBAcTDFNhbkZyYW5jaXNjbzEUMBIGA1UEChMLRm9ydEZ1
bnN0b24xDzANBgNVBAMTBm1heWNodTEfMB0GCSqGSIb3DQEJARYQbWFpbEBob3N0
LmRvbWFpboIJAOGR9d7NJf/rMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEEBQAD
gYEAdoDlwuTdkK+zRCyJYxwlZweFtwCUQsVp6z8YZOvaDvSeqAdz+UwgJjuJaGHi
SzCgO7YjKdG/c21Z0LlSN9gjEFlwJo9+dhgK8h0Xv0ADbz1Ruk30H7ozPvfQoU3Q
Xb2qbyGw3CElmQvieEwHOcCMY0T6A/a04Krds2USEGQhVIY=
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
MIIDdzCCAuCgAwIBAgIBATANBgkqhkiG9w0BAQQFADB5MQswCQYDVQQGEwJVUzEL
MAkGA1UECBMCQ0ExFTATBgNVBAcTDFNhbkZyYW5jaXNjbzEUMBIGA1UEChMLRm9y
dEZ1bnN0b24xDzANBgNVBAMTBm1heWNodTEfMB0GCSqGSIb3DQEJARYQbWFpbEBo
b3N0LmRvbWFpbjAeFw0wOTA1MjUxNjMzMjhaFw0xOTA1MjMxNjMzMjhaMGIxCzAJ
BgNVBAYTAlVTMQswCQYDVQQIEwJDQTEUMBIGA1UEChMLRm9ydEZ1bnN0b24xDzAN
BgNVBAMTBm1heWNodTEfMB0GCSqGSIb3DQEJARYQbWFpbEBob3N0LmRvbWFpbjCB
nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAv7ZCFgGvMsIEgMNntMk/Z87zrKI/
pBpO3Z9JKh2omhZzNgS9WzLAm8shp5FPrGY6t5v61d/rd66Y+7U6436rviHaLtmc
6P3MY5cM99WYtlUWHEBHmV0JGiWyrcmKyysZsOHAW9saHzh7J4UEfLb7dSeUp5Hd
US+FCwIf5xyYCBkCAwEAAaOCASQwggEgMAkGA1UdEwQCMAAwEQYJYIZIAYb4QgEB
BAQDAgZAMDMGCWCGSAGG+EIBDQQmFiRPcGVuU1NMIEdlbmVyYXRlZCBTZXJ2ZXIg
Q2VydGlmaWNhdGUwHQYDVR0OBBYEFLfm76z0ntU4nQW0HZowSRq0N4lGMIGrBgNV
HSMEgaMwgaCAFOKxsfqlayO0LQHnYsw2P5xAiThPoX2kezB5MQswCQYDVQQGEwJV
UzELMAkGA1UECBMCQ0ExFTATBgNVBAcTDFNhbkZyYW5jaXNjbzEUMBIGA1UEChML
Rm9ydEZ1bnN0b24xDzANBgNVBAMTBm1heWNodTEfMB0GCSqGSIb3DQEJARYQbWFp
bEBob3N0LmRvbWFpboIJAOGR9d7NJf/rMA0GCSqGSIb3DQEBBAUAA4GBAAH3Y8ET
f3S57rtGktq8dp2HkiWfbYr/YvwWHFzIdLumJ1F3PtOBO55fmagRPUoqOqgsn4iI
vWIh7xOixkTfzyibU4J1nWVCAieahoyLJQlANhYhxBcWChz31CqxaM7SZ8Uq4Apt
hFS4mUyagfnztwHTQNEeii1jXnPAJRmM8f9a
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
</key>
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
f97980572a1bfedccbfe3277479fd42d
f25cf35328c37b26e9a7da655468dff3
035ae7684b5cecf6cfb322065f69746d
f414a6ee6f60f7d223b791eb4be062d9
9ed3c9a41a61470b30f194359da1e919
e6d6ec49d3af31301c3a542ddc097a8a
dedc9c93ea88cbd6bedc1b59c3a023c3
d3889e40f75bbe27bf1d689a16b2227a
2e1beedf9406e4b420725bd7cfca26ef
6b6604f7fd1b1ca41b8b9f3c22e5aef2
ceb19ab5018b9ebe29cffb22d7e1b1f0
36de56f9677e89ac7e59a087f8b2ee91
83c0586e56f691b71467bf4de5afe274
50e10b7b69a80af898c801362e1241dd
c2bbb122f8f5d0d90dde541c5cfcee70
24235c19761e1064bb208cecdbe2e35a
-----END OpenVPN Static key V1-----
</tls-auth>
key-direction 0

and then copy this and put it in the client config file

remote x.x.x.x
client
dev tun
tun-mtu 1500
mssfix 1500
proto tcp-client
pull
comp-noadapt 
comp-lzo yes
resolv-retry infinite
nobind
tap-sleep 5
keysize 256
key-direction 1
keepalive 100000 1000000
cipher AES-256-CBC # AES 
tls-cipher AES256-SHA
persist-key
persist-tun
mute-replay-warnings
verb 4
script-security 3
port  1194
ip-win32 adaptive
route-method exe
route-delay 10 10
route 0.0.0.0 128.0.0.0 10.10.100.1
route 128.0.0.0 128.0.0.0 10.10.100.1
route 0.0.0.0 255.255.255.0 10.10.100.1
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
MIIDXjCCAsegAwIBAgIBAjANBgkqhkiG9w0BAQQFADB5MQswCQYDVQQGEwJVUzEL
MAkGA1UECBMCQ0ExFTATBgNVBAcTDFNhbkZyYW5jaXNjbzEUMBIGA1UEChMLRm9y
dEZ1bnN0b24xDzANBgNVBAMTBm1heWNodTEfMB0GCSqGSIb3DQEJARYQbWFpbEBo
b3N0LmRvbWFpbjAeFw0wOTA1MjUxNjM0MjRaFw0xOTA1MjMxNjM0MjRaMGMxCzAJ
BgNVBAYTAlVTMQswCQYDVQQIEwJDQTEUMBIGA1UEChMLRm9ydEZ1bnN0b24xEDAO
BgNVBAMTB2NsaWVudDExHzAdBgkqhkiG9w0BCQEWEG1haWxAaG9zdC5kb21haW4w
gZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAMNlRFVE7kqsXs6iajMhhWWoKZdo
JiCN1zYnYT72ziZ6R6iasjUQno//bREy+XbUaG0ZYUCCNRf+jl0WwxQF5mAFytUN
U+cd4XrRxqN9tjZwC5vSvAUIu9JXBgslnfSpbVAhGb6WnLuh4edlIF8hqwYvIf6W
shrs69NHpsetBv17AgMBAAGjggEKMIIBBjAJBgNVHRMEAjAAMCwGCWCGSAGG+EIB
DQQfFh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQUcffh
QFjcWmmxMHBjJNBuw95XQOEwgasGA1UdIwSBozCBoIAU4rGx+qVrI7QtAedizDY/
nECJOE+hfaR7MHkxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJDQTEVMBMGA1UEBxMM
U2FuRnJhbmNpc2NvMRQwEgYDVQQKEwtGb3J0RnVuc3RvbjEPMA0GA1UEAxMGbWF5
Y2h1MR8wHQYJKoZIhvcNAQkBFhBtYWlsQGhvc3QuZG9tYWluggkA4ZH13s0l/+sw
DQYJKoZIhvcNAQEEBQADgYEAVFnj3x3wymNtO2PhVY8E2ms+0lXLV0ldGXcU+yDP
AkYLrp8mkK+kVgKILkldcnUPwYkRDFIp2juCJXOUvhI/9EQ5pPkjUs53VDAP69Xc
y1AVxDC/cpFjrGSBfhOGsY5g6oPESRreN4oQVutbFO5BDpLGrIUI58d8TDhoOLgf
kD0=
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN RSA PRIVATE KEY-----
MIICXQIBAAKBgQDDZURVRO5KrF7OomozIYVlqCmXaCYgjdc2J2E+9s4mekeomrI1
EJ6P/20RMvl21GhtGWFAgjUX/o5dFsMUBeZgBcrVDVPnHeF60cajfbY2cAub0rwF
CLvSVwYLJZ30qW1QIRm+lpy7oeHnZSBfIasGLyH+lrIa7OvTR6bHrQb9ewIDAQAB
AoGAeI1YFYvLwUKL080c3KMH3GpeDs3xCBC7AOxW8TPwiIjVAU9AN8EjMxCSSBQ9
GXV/YCBSgixTeZRSXViXzxi8wtgwi30IltX+YlDMF24ABJby85B3Viitw9jx1SsI
+nLqGBUtLdb6fJSyS36iQU6R8b4hXmdOY6ukqG6S6NoTh3ECQQD3TXA1wdMwF3BL
JJ+thkjCiMdaPXLH9ztls6/YUA4qzuSHDK0aJdAvE1nDd2xiyRCVVckAAv1hzv6X
G1cy7YLFAkEAykR9fHZvqnEVlebCPuMjfN083WwhbdWrC+CR2NUqZ6U5+0q6kawe
Pk1XvwawncMSwyWQ5PjRepk3FT3vZpWDPwJBALN/MYLTPEYbvRXNb1izrvwD6y5E
i5s4h5Q559hJwv6vTI/5U2s3JvQER5Loi3LoHXFG4q1vfhoP9BoZbiE440ECQQCd
pH/A73Xce0J9kFo4NUNFYBC96jarqeoj2aUSQCFKomXsSrPaMTFpEVKgGZCxhIYs
/ixNqPdq+9sIfTsG0uR1AkBRjWpobSwPBZPnRRjPvcP5IZ7pDPaS4794DA0qXStX
CHrtw1yMvhg84LMfAJhbII8hC9VGi7gTi4Ye/mgP830i
-----END RSA PRIVATE KEY-----
</key>
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
f97980572a1bfedccbfe3277479fd42d
f25cf35328c37b26e9a7da655468dff3
035ae7684b5cecf6cfb322065f69746d
f414a6ee6f60f7d223b791eb4be062d9
9ed3c9a41a61470b30f194359da1e919
e6d6ec49d3af31301c3a542ddc097a8a
dedc9c93ea88cbd6bedc1b59c3a023c3
d3889e40f75bbe27bf1d689a16b2227a
2e1beedf9406e4b420725bd7cfca26ef
6b6604f7fd1b1ca41b8b9f3c22e5aef2
ceb19ab5018b9ebe29cffb22d7e1b1f0
36de56f9677e89ac7e59a087f8b2ee91
83c0586e56f691b71467bf4de5afe274
50e10b7b69a80af898c801362e1241dd
c2bbb122f8f5d0d90dde541c5cfcee70
24235c19761e1064bb208cecdbe2e35a
-----END OpenVPN Static key V1-----
</tls-auth>

I make this working perfect on my system and this should work for you , after check you can change to your config and use your certificate . if this is working just post back so someone got the same trouble speed can find out how to try themself

-sb

Hi,

decreasing the txqueuelen may also improve overall performance (either with --txqueuelen option when launching openvpn either with the command ifconfig ${interface} txqueuelen ${size}).

See also this recent post :

https://forums.openvpn.net/topic10609.html

Hope that will help !

Steve

aciid

300000 wrotecould you try my conf to see if it works for you or not , make sure backup all your config anf cerfificate anh try this one

let do on server first , place everything in config file and start on the server , make sure change iptable to TCP protocol

I make this working perfect on my system and this should work for you , after check you can change to your config and use your certificate . if this is working just post back so someone got the same trouble speed can find out how to try themself

When I try to start the server I get

Options error: Unrecognized option or missing parameter(s) in /etc/openvpn/server.conf:10: topology (2.0.9)

🙁

-sb wroteHi,

decreasing the txqueuelen may also improve overall performance (either with --txqueuelen option when launching openvpn either with the command ifconfig ${interface} txqueuelen ${size}).

See also this recent post :

https://forums.openvpn.net/topic10609.html

Hope that will help !

Steve

Worked wonders on my ping! Nice!
Unfortunately no change to speed 🙁

I have noticed these speed differences on TCP vs UDP

		Download:		Upload:		Ping:
TCP:		3-4Mbps		0.5Mbps		90
UDP: 		1-3Mbps		4-6Mbps		100

300000

because you run openvpn 2.0.9 and you said run openvpn 2.2.1 so that why you got that error , just delete that line and try it again or better update your openvpn to the lastest so you can run that topology subnet .

aciid

300000 wrotebecause you run openvpn 2.0.9 and you said run openvpn 2.2.1 so that why you got that error , just delete that line and try it again or better update your openvpn to the lastest so you can run that topology subnet .

# yum list installed | grep openvpn
openvpn.x86_64                   2.2.2-1.el5.rf                       @rpmforge

Also removing the topology line game another error about a line in the config, can not remember what.

aciid

Still no change on anything 🙁

Anybody else have some input, please?

-sb

Hi,

you could look at the impact of lowering the values of mssfix and tun-mtu. A transit network with a low MTU between the endpoints of your tunnel could cause lots of IP Frag.

Also, since we're talking about TCP, a Wireshark trace may help.

Steve

aciid

I have (for some reason) managed to double speeds by changing to port 11194 :o

Still maxing out at about 1/4 of my actual speed 🙁

aciid

I notice on speedtest.net I get maybe 3-4MB download but when I actually download a file using something like p2p or a download manager (something that downloads from more than 1 place simultaneously) then I can hit 1.5MB/s actual throughput. Seems like there is some sort of cap on the speed of each seperate connection between me and the vpn.

Any ideas?

aciid

-sb wroteHi,

you could look at the impact of lowering the values of mssfix and tun-mtu. A transit network with a low MTU between the endpoints of your tunnel could cause lots of IP Frag.

Also, since we're talking about TCP, a Wireshark trace may help.

Steve

Also I changed the MTU to the same as my router - My router has 1492 (PPPoE)