I have a Problem with my OpenVPN Tunnel. The setup is as follows: Client (windows 7) connect to the VPN Host (Linux) from outside the LAN and all the traffic goes through the VPN Machine (iptables). Everything works, but it is very slow.
I noticed that File Transfers are very, very slow, even the fast internet connections. The server has an 60/60 Mbit Connection and the Client 50/5.
Iperf:
iperf -s on Server and -c on client:
[ 4] 0.0-10.0 sec 22.2 MBytes 18.6 Mbits/sec
iperf -c on Server and -s on client:
[ 3] 0.0-10.0 sec 4.88 MBytes 4.09 Mbits/sec
However, File downloads with samba /WinSCP are really really slow:
Download (server > client - should be a 50Mbit Connection):
60 kb/s
Upload (client > server - should be 5 Mbit): 321 kb/s - this is ok!
Do you have any Idea what could be wrong?
Server Conf:
port 1194
proto udp
dev tun0
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/xxx.crt
key /etc/openvpn/easy-rsa/2.0/keys/xxx.key # This file should be kept secret
dh /etc/openvpn/easy-rsa-teacher-vpn/2.0/keys/dh1024.pem
server 10.10.9.0 255.255.255.0
topology subnet
push "route 10.10.0.101 255.255.255.255 10.10.9.1"
push "dhcp-option DNS 10.10.9.1"
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/easy-rsa-teacher-vpn/2.0/keys/ta.key 0 # This file is secret
cipher BF-CBC
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
script-security 2
up /etc/openvpn/firewall-vpn.sh
fragment 1400
mssfix
Client Conf:
client
dev tun
dev-node VPN
route-delay 2
proto udp
remote xxxx 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca C:\\Program\ Files\ (x86)\\OpenVPN\\easy-rsa\\keys-szn-teacher-vpn\\ca.crt
cert C:\\Program\ Files\ (x86)\\OpenVPN\\easy-rsa\\keys-szn-teacher-vpn\\xxx.crt
key C:\\Program\ Files\ (x86)\\OpenVPN\\easy-rsa\\keys\\xxx.key
ns-cert-type server
tls-auth C:\\Program\ Files\ (x86)\\OpenVPN\\easy-rsa\\keys\\ta.key 1
cipher BF-CBC
comp-lzo
verb 3
fragment 1400
mssfix
I tried it also without the fragment 1400, mssfix options which make uploads as slow as downloads.
Thanks for any hints!
