Hi guys! Just managed to install and configure openvpn on my Centos 6 VPS. Info: OpenVZ container using tun Centos 6 64bit OS 100mb port Openvpn 2.2.2-1 Connecting from win 7 pc Speedtest before connection: [img]http://www.speedtest.net/result/1964599019.png[/img] Speedtest after connection: [img]http://www.speedtest.net/result/1964600517.png[/img] I can sometimes hit 2-3mb down/up speed throught the vpn, but rarely :( My host confirms that their connection is fine ([url="http://baltimore.speedtest.net"]they are even a speedtest host[/url]) Server config: [code] local 199.15.254.xxx #- change it with your server ip address port 1194 #- change the port you want proto udp #- protocol can be tcp or udp dev tun mssfix 1400 tun-mtu 1440 ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt cert /etc/openvpn/easy-rsa/2.0/keys/server.crt key /etc/openvpn/easy-rsa/2.0/keys/server.key dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login client-cert-not-required username-as-common-name server 10.8.0.0 255.255.255.0 push "redirect-gateway def1" push "dhcp-option DNS 8.8.8.8" push "dhcp-option DNS 8.8.4.4" keepalive 5 30 comp-lzo persist-key persist-tun status server-tcp.log verb 3 [/code] Client config: [code] client dev tun proto udp remote 199.15.254.xxx 1194 resolv-retry infinite nobind mssfix 1400 tun-mtu 1440 persist-key persist-tun ca ca.crt auth-user-pass comp-lzo verb 3 [/code] Could anyone give me some hints on what is causing this enormous slowdown and how I could fix this? Many thanks

Read this post for hints: https://forums.openvpn.net/topic9379.html

[quote="Mimiko"]Read this post for hints: https://forums.openvpn.net/topic9379.html[/quote] Thanks for the reply, I have already tried BF-CBC cipher but notice no real difference. Any other ideas

Did you tried same speedtest from the OpenVPN server? Try disabling comp-lzo

Speedtest when I asked my host if their network was having issues: [quote] wget http://cachefly.cachefly.net/100mb.test --2012-05-16 16:50:50-- http://cachefly.cachefly.net/100mb.test Resolving cachefly.cachefly.net... 205.234.175.175 Connecting to cachefly.cachefly.net|205.234.175.175|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 104857600 (100M) [application/octet-stream] Saving to: `100mb.test' 0% [ ] 0 --.-K/s 100%[==========================================================================================>] 104,857,600 11.1M/s in 9.1s 2012-05-16 16:50:59 (11.0 MB/s) - `100mb.test' saved [104857600/104857600] Also, I have attached a screen shot of our http://baltimore.speedtest.net site we run from my work comcast business connection and got our full 100mbit speed. Also, we are having no alerts or anything like that from our monitoring sites. [/quote] His speed test from home to their servers: http://img138.imageshack.us/img138/329/speedtestnet1.jpg Also, I can download files from my host maxing my connection @ 4mb/s download :o Disabling lzo: (nicer ping & upload increase) [img]http://www.speedtest.net/result/1965462261.png[/img] Still horrible, horrible download :( Edit: fastest test to date (speedtest to local server via vpn) [img]http://www.speedtest.net/result/1965486410.png[/img]

Also tried changing ports a few time, no difference :(

Could you do a traceroute to speedtest with vpn enabled. Also, using wget on windows download a test file from OpenVPN server with vpn connected.

Speedtest.net traceroute: [code] 1 102 ms 102 ms 101 ms 10.8.0.1 2 102 ms 103 ms 102 ms vps01.reliablehostingservices.net [199.15.252.xxx] 3 105 ms 105 ms 102 ms cr1.iad1.inforelay.net [66.231.176.53] 4 109 ms 107 ms 108 ms xe-3-0-7-303.ar2.iad1.us.nlayer.net [69.31.30.33] 5 105 ms 105 ms 104 ms as3491.xe-4-0-7.ar2.iad1.us.nlayer.net [69.31.31.190] 6 187 ms 187 ms 187 ms netriver.ge2-16.br01.sea01.pccwbtn.net [63.216.14.162] 7 187 ms 188 ms 187 ms static-74-209-160-12.lynnwood.netriver.net [74.209.160.12] [/code] Download test with accelerator: [img]http://img15.imageshack.us/img15/4368/temphm.png[/img] Without accelerator: [img]http://img853.imageshack.us/img853/6490/tempai.png[/img]

It's like your VPN server has a overall upload speed limit. Try to download a file from VPN server without VPN connection.

I already said I can max my download speed @ 4.5MB/s when downloading files from my vps Also the host has made it clear to me they do not impose ANY speed restrictions. :(

could you try my conf to see if it works for you or not , make sure backup all your config anf cerfificate anh try this one let do on server first , place everything in config file and start on the server , make sure change iptable to TCP protocol [code] server 10.10.100.0 255.255.255.0 port 1194 proto tcp dev tun0 comp-noadapt comp-lzo yes keysize 256 route 10.10.100.0 255.255.255.0 10.10.100.1 topology subnet mode server tls-server tun-mtu 1500 mssfix 1500 push "redirect-gateway def1 " push " ip-win32 adaptive " push "dhcp-option DNS 8.8.8.8" push "dhcp-option DNS 8.8.4.4" duplicate-cn client-to-client keepalive 10000 1200000 persist-remote-ip persist-key persist-tun verb 3 mute 2 mlock tls-cipher AES256-SHA cipher AES-256-CBC # AES socket-flags TCP_NODELAY push "socket-flags TCP_NODELAY" script-security 3 -----BEGIN DH PARAMETERS----- MIGHAoGBAKHDOs+mwxW96SQhTdpbO7CG6FtVhvbgA8A+4rrpS9js0tWiBbqHY0CN 6uMy3WP9A7wuAhO1dV3/2lhnA0oMO7uj5aGgz2kwOhIH20/pXBy9XEQWLAbRTjhY ge3xfUeuRRllZ8A0fh10c6KZcXF63tXsOljZO3+T61NEx0j26girAgEC -----END DH PARAMETERS----- -----BEGIN CERTIFICATE----- MIIDTzCCArigAwIBAgIJAOGR9d7NJf/rMA0GCSqGSIb3DQEBBAUAMHkxCzAJBgNV BAYTAlVTMQswCQYDVQQIEwJDQTEVMBMGA1UEBxMMU2FuRnJhbmNpc2NvMRQwEgYD VQQKEwtGb3J0RnVuc3RvbjEPMA0GA1UEAxMGbWF5Y2h1MR8wHQYJKoZIhvcNAQkB FhBtYWlsQGhvc3QuZG9tYWluMB4XDTA5MDUyNTE2MzI0NVoXDTE5MDUyMzE2MzI0 NVoweTELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRUwEwYDVQQHEwxTYW5GcmFu Y2lzY28xFDASBgNVBAoTC0ZvcnRGdW5zdG9uMQ8wDQYDVQQDEwZtYXljaHUxHzAd BgkqhkiG9w0BCQEWEG1haWxAaG9zdC5kb21haW4wgZ8wDQYJKoZIhvcNAQEBBQAD gY0AMIGJAoGBAK3G3nWPY3uMMZU+Zuo+TF6sbMTOsbAv5dNyE0g1YPsg+y46Zf98 EaurSyaF9MPAMODjyEAaaoZR9NKkaEkdbSh+PSwF3bRhQ4vvOR0A51a5XZjan2fc XELEuimx6DpdYraZPrQHO8fRUViwxOHi8ywbnagLIwuM2Yg5riv3+W2tAgMBAAGj gd4wgdswHQYDVR0OBBYEFOKxsfqlayO0LQHnYsw2P5xAiThPMIGrBgNVHSMEgaMw gaCAFOKxsfqlayO0LQHnYsw2P5xAiThPoX2kezB5MQswCQYDVQQGEwJVUzELMAkG A1UECBMCQ0ExFTATBgNVBAcTDFNhbkZyYW5jaXNjbzEUMBIGA1UEChMLRm9ydEZ1 bnN0b24xDzANBgNVBAMTBm1heWNodTEfMB0GCSqGSIb3DQEJARYQbWFpbEBob3N0 LmRvbWFpboIJAOGR9d7NJf/rMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEEBQAD gYEAdoDlwuTdkK+zRCyJYxwlZweFtwCUQsVp6z8YZOvaDvSeqAdz+UwgJjuJaGHi SzCgO7YjKdG/c21Z0LlSN9gjEFlwJo9+dhgK8h0Xv0ADbz1Ruk30H7ozPvfQoU3Q Xb2qbyGw3CElmQvieEwHOcCMY0T6A/a04Krds2USEGQhVIY= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDdzCCAuCgAwIBAgIBATANBgkqhkiG9w0BAQQFADB5MQswCQYDVQQGEwJVUzEL MAkGA1UECBMCQ0ExFTATBgNVBAcTDFNhbkZyYW5jaXNjbzEUMBIGA1UEChMLRm9y dEZ1bnN0b24xDzANBgNVBAMTBm1heWNodTEfMB0GCSqGSIb3DQEJARYQbWFpbEBo b3N0LmRvbWFpbjAeFw0wOTA1MjUxNjMzMjhaFw0xOTA1MjMxNjMzMjhaMGIxCzAJ BgNVBAYTAlVTMQswCQYDVQQIEwJDQTEUMBIGA1UEChMLRm9ydEZ1bnN0b24xDzAN BgNVBAMTBm1heWNodTEfMB0GCSqGSIb3DQEJARYQbWFpbEBob3N0LmRvbWFpbjCB nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAv7ZCFgGvMsIEgMNntMk/Z87zrKI/ pBpO3Z9JKh2omhZzNgS9WzLAm8shp5FPrGY6t5v61d/rd66Y+7U6436rviHaLtmc 6P3MY5cM99WYtlUWHEBHmV0JGiWyrcmKyysZsOHAW9saHzh7J4UEfLb7dSeUp5Hd US+FCwIf5xyYCBkCAwEAAaOCASQwggEgMAkGA1UdEwQCMAAwEQYJYIZIAYb4QgEB BAQDAgZAMDMGCWCGSAGG+EIBDQQmFiRPcGVuU1NMIEdlbmVyYXRlZCBTZXJ2ZXIg Q2VydGlmaWNhdGUwHQYDVR0OBBYEFLfm76z0ntU4nQW0HZowSRq0N4lGMIGrBgNV HSMEgaMwgaCAFOKxsfqlayO0LQHnYsw2P5xAiThPoX2kezB5MQswCQYDVQQGEwJV UzELMAkGA1UECBMCQ0ExFTATBgNVBAcTDFNhbkZyYW5jaXNjbzEUMBIGA1UEChML Rm9ydEZ1bnN0b24xDzANBgNVBAMTBm1heWNodTEfMB0GCSqGSIb3DQEJARYQbWFp bEBob3N0LmRvbWFpboIJAOGR9d7NJf/rMA0GCSqGSIb3DQEBBAUAA4GBAAH3Y8ET f3S57rtGktq8dp2HkiWfbYr/YvwWHFzIdLumJ1F3PtOBO55fmagRPUoqOqgsn4iI vWIh7xOixkTfzyibU4J1nWVCAieahoyLJQlANhYhxBcWChz31CqxaM7SZ8Uq4Apt hFS4mUyagfnztwHTQNEeii1jXnPAJRmM8f9a -----END CERTIFICATE----- -----BEGIN RSA PRIVATE KEY----- MIICXAIBAAKBgQC/tkIWAa8ywgSAw2e0yT9nzvOsoj+kGk7dn0kqHaiaFnM2BL1b MsCbyyGnkU+sZjq3m/rV3+t3rpj7tTrjfqu+Idou2Zzo/cxjlwz31Zi2VRYcQEeZ XQkaJbKtyYrLKxmw4cBb2xofOHsnhQR8tvt1J5Snkd1RL4ULAh/nHJgIGQIDAQAB AoGBAIm1fdsY8qRfQaTMuF3gga8rtVW4ZkaWrzf7By89hrLIlZGj7fDoj/pY+5/G fZi1BlCFtrSS2C1sOW/1SovHnc0DPD3EZZwIAC9FcwVjNEVoPy1/FD0g06UO7PUt /FENR7gZLp4/smQHZFbRCCDIEVct6Vs5OWWLjNy3MK20JdwRAkEA5iF/py4KUAUC 0+ifXe0E3nG+i4q9FPbGCktL+I4rKfHUuAFrULo7nIaKdfZPrwt8JdjflOMkR3A8 Mj+dtm/wOwJBANVDLJ2sk/7IRhXaQ66hDZo0GBvgZveE/sJ+APA8hBwUn6pqkQO/ YdOjiBUWIJZ3lEFa+nXv5LTSAX546oMW17sCQGqGFxDLvvpLV4O/qgVQMXDGNe1h yyRpFkKtl/z10gUYa97AyWwUyIMrw+vWmAvuxQi/2r6QZbqruTGJQPex2QECQCH9 +QiQz24W4gTtq0gUZ6SilQ0scX0Wd7zsdJ3WJ4CKUQDKx55/TMp9EF28Dymsmbbp F27g8+VWa+KKx2Zpp60CQAcnn4eRyO0khr2ikSP0GvwnKidj8d4Z7zu3gcZ5JKpB aO76S231A53f24lqJlQUJIIQMR1oE+ODIaPsNh33ru4= -----END RSA PRIVATE KEY----- -----BEGIN OpenVPN Static key V1----- f97980572a1bfedccbfe3277479fd42d f25cf35328c37b26e9a7da655468dff3 035ae7684b5cecf6cfb322065f69746d f414a6ee6f60f7d223b791eb4be062d9 9ed3c9a41a61470b30f194359da1e919 e6d6ec49d3af31301c3a542ddc097a8a dedc9c93ea88cbd6bedc1b59c3a023c3 d3889e40f75bbe27bf1d689a16b2227a 2e1beedf9406e4b420725bd7cfca26ef 6b6604f7fd1b1ca41b8b9f3c22e5aef2 ceb19ab5018b9ebe29cffb22d7e1b1f0 36de56f9677e89ac7e59a087f8b2ee91 83c0586e56f691b71467bf4de5afe274 50e10b7b69a80af898c801362e1241dd c2bbb122f8f5d0d90dde541c5cfcee70 24235c19761e1064bb208cecdbe2e35a -----END OpenVPN Static key V1----- key-direction 0 [/code] and then copy this and put it in the client config file [code] remote x.x.x.x client dev tun tun-mtu 1500 mssfix 1500 proto tcp-client pull comp-noadapt comp-lzo yes resolv-retry infinite nobind tap-sleep 5 keysize 256 key-direction 1 keepalive 100000 1000000 cipher AES-256-CBC # AES tls-cipher AES256-SHA persist-key persist-tun mute-replay-warnings verb 4 script-security 3 port 1194 ip-win32 adaptive route-method exe route-delay 10 10 route 0.0.0.0 128.0.0.0 10.10.100.1 route 128.0.0.0 128.0.0.0 10.10.100.1 route 0.0.0.0 255.255.255.0 10.10.100.1 -----BEGIN CERTIFICATE----- MIIDTzCCArigAwIBAgIJAOGR9d7NJf/rMA0GCSqGSIb3DQEBBAUAMHkxCzAJBgNV BAYTAlVTMQswCQYDVQQIEwJDQTEVMBMGA1UEBxMMU2FuRnJhbmNpc2NvMRQwEgYD VQQKEwtGb3J0RnVuc3RvbjEPMA0GA1UEAxMGbWF5Y2h1MR8wHQYJKoZIhvcNAQkB FhBtYWlsQGhvc3QuZG9tYWluMB4XDTA5MDUyNTE2MzI0NVoXDTE5MDUyMzE2MzI0 NVoweTELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRUwEwYDVQQHEwxTYW5GcmFu Y2lzY28xFDASBgNVBAoTC0ZvcnRGdW5zdG9uMQ8wDQYDVQQDEwZtYXljaHUxHzAd BgkqhkiG9w0BCQEWEG1haWxAaG9zdC5kb21haW4wgZ8wDQYJKoZIhvcNAQEBBQAD gY0AMIGJAoGBAK3G3nWPY3uMMZU+Zuo+TF6sbMTOsbAv5dNyE0g1YPsg+y46Zf98 EaurSyaF9MPAMODjyEAaaoZR9NKkaEkdbSh+PSwF3bRhQ4vvOR0A51a5XZjan2fc XELEuimx6DpdYraZPrQHO8fRUViwxOHi8ywbnagLIwuM2Yg5riv3+W2tAgMBAAGj gd4wgdswHQYDVR0OBBYEFOKxsfqlayO0LQHnYsw2P5xAiThPMIGrBgNVHSMEgaMw gaCAFOKxsfqlayO0LQHnYsw2P5xAiThPoX2kezB5MQswCQYDVQQGEwJVUzELMAkG A1UECBMCQ0ExFTATBgNVBAcTDFNhbkZyYW5jaXNjbzEUMBIGA1UEChMLRm9ydEZ1 bnN0b24xDzANBgNVBAMTBm1heWNodTEfMB0GCSqGSIb3DQEJARYQbWFpbEBob3N0 LmRvbWFpboIJAOGR9d7NJf/rMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEEBQAD gYEAdoDlwuTdkK+zRCyJYxwlZweFtwCUQsVp6z8YZOvaDvSeqAdz+UwgJjuJaGHi SzCgO7YjKdG/c21Z0LlSN9gjEFlwJo9+dhgK8h0Xv0ADbz1Ruk30H7ozPvfQoU3Q Xb2qbyGw3CElmQvieEwHOcCMY0T6A/a04Krds2USEGQhVIY= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDXjCCAsegAwIBAgIBAjANBgkqhkiG9w0BAQQFADB5MQswCQYDVQQGEwJVUzEL MAkGA1UECBMCQ0ExFTATBgNVBAcTDFNhbkZyYW5jaXNjbzEUMBIGA1UEChMLRm9y dEZ1bnN0b24xDzANBgNVBAMTBm1heWNodTEfMB0GCSqGSIb3DQEJARYQbWFpbEBo b3N0LmRvbWFpbjAeFw0wOTA1MjUxNjM0MjRaFw0xOTA1MjMxNjM0MjRaMGMxCzAJ BgNVBAYTAlVTMQswCQYDVQQIEwJDQTEUMBIGA1UEChMLRm9ydEZ1bnN0b24xEDAO BgNVBAMTB2NsaWVudDExHzAdBgkqhkiG9w0BCQEWEG1haWxAaG9zdC5kb21haW4w gZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAMNlRFVE7kqsXs6iajMhhWWoKZdo JiCN1zYnYT72ziZ6R6iasjUQno//bREy+XbUaG0ZYUCCNRf+jl0WwxQF5mAFytUN U+cd4XrRxqN9tjZwC5vSvAUIu9JXBgslnfSpbVAhGb6WnLuh4edlIF8hqwYvIf6W shrs69NHpsetBv17AgMBAAGjggEKMIIBBjAJBgNVHRMEAjAAMCwGCWCGSAGG+EIB DQQfFh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQUcffh QFjcWmmxMHBjJNBuw95XQOEwgasGA1UdIwSBozCBoIAU4rGx+qVrI7QtAedizDY/ nECJOE+hfaR7MHkxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJDQTEVMBMGA1UEBxMM U2FuRnJhbmNpc2NvMRQwEgYDVQQKEwtGb3J0RnVuc3RvbjEPMA0GA1UEAxMGbWF5 Y2h1MR8wHQYJKoZIhvcNAQkBFhBtYWlsQGhvc3QuZG9tYWluggkA4ZH13s0l/+sw DQYJKoZIhvcNAQEEBQADgYEAVFnj3x3wymNtO2PhVY8E2ms+0lXLV0ldGXcU+yDP AkYLrp8mkK+kVgKILkldcnUPwYkRDFIp2juCJXOUvhI/9EQ5pPkjUs53VDAP69Xc y1AVxDC/cpFjrGSBfhOGsY5g6oPESRreN4oQVutbFO5BDpLGrIUI58d8TDhoOLgf kD0= -----END CERTIFICATE----- -----BEGIN RSA PRIVATE KEY----- MIICXQIBAAKBgQDDZURVRO5KrF7OomozIYVlqCmXaCYgjdc2J2E+9s4mekeomrI1 EJ6P/20RMvl21GhtGWFAgjUX/o5dFsMUBeZgBcrVDVPnHeF60cajfbY2cAub0rwF CLvSVwYLJZ30qW1QIRm+lpy7oeHnZSBfIasGLyH+lrIa7OvTR6bHrQb9ewIDAQAB AoGAeI1YFYvLwUKL080c3KMH3GpeDs3xCBC7AOxW8TPwiIjVAU9AN8EjMxCSSBQ9 GXV/YCBSgixTeZRSXViXzxi8wtgwi30IltX+YlDMF24ABJby85B3Viitw9jx1SsI +nLqGBUtLdb6fJSyS36iQU6R8b4hXmdOY6ukqG6S6NoTh3ECQQD3TXA1wdMwF3BL JJ+thkjCiMdaPXLH9ztls6/YUA4qzuSHDK0aJdAvE1nDd2xiyRCVVckAAv1hzv6X G1cy7YLFAkEAykR9fHZvqnEVlebCPuMjfN083WwhbdWrC+CR2NUqZ6U5+0q6kawe Pk1XvwawncMSwyWQ5PjRepk3FT3vZpWDPwJBALN/MYLTPEYbvRXNb1izrvwD6y5E i5s4h5Q559hJwv6vTI/5U2s3JvQER5Loi3LoHXFG4q1vfhoP9BoZbiE440ECQQCd pH/A73Xce0J9kFo4NUNFYBC96jarqeoj2aUSQCFKomXsSrPaMTFpEVKgGZCxhIYs /ixNqPdq+9sIfTsG0uR1AkBRjWpobSwPBZPnRRjPvcP5IZ7pDPaS4794DA0qXStX CHrtw1yMvhg84LMfAJhbII8hC9VGi7gTi4Ye/mgP830i -----END RSA PRIVATE KEY----- -----BEGIN OpenVPN Static key V1----- f97980572a1bfedccbfe3277479fd42d f25cf35328c37b26e9a7da655468dff3 035ae7684b5cecf6cfb322065f69746d f414a6ee6f60f7d223b791eb4be062d9 9ed3c9a41a61470b30f194359da1e919 e6d6ec49d3af31301c3a542ddc097a8a dedc9c93ea88cbd6bedc1b59c3a023c3 d3889e40f75bbe27bf1d689a16b2227a 2e1beedf9406e4b420725bd7cfca26ef 6b6604f7fd1b1ca41b8b9f3c22e5aef2 ceb19ab5018b9ebe29cffb22d7e1b1f0 36de56f9677e89ac7e59a087f8b2ee91 83c0586e56f691b71467bf4de5afe274 50e10b7b69a80af898c801362e1241dd c2bbb122f8f5d0d90dde541c5cfcee70 24235c19761e1064bb208cecdbe2e35a -----END OpenVPN Static key V1----- [/code] I make this working perfect on my system and this should work for you , after check you can change to your config and use your certificate . if this is working just post back so someone got the same trouble speed can find out how to try themself

EXTREMELY slow speeds!

aciid

Any other thoughts?

aciid

Had a 'net upgrade but vpn speed still the same obviously 🙁

netunited

Any solutions on this, we are facing same problems, 900 -1.2 Mbit down, 4 Mbit up

Also CentOS 5.8 x64

Mimiko

When you think the speed is low, please ssh to server/router and run "top" while sending or receiving a big file thru VPN. If you notice a hith CPU usage by OpenVPN, then this is a CPU limit.

Routers have lowend CPU's, so you will never get a full speed. The best speed is archieved using a standard CPU Intel or AMD, which is not a low end like Celeron.

To tweak the speed up, disable encription, certificate authentication and compression.

« Previous Page