i have a 50mbps down/10mbps up Comcast business class connection, a 3GHz AMD 6000+ Linux router PC with 2 gigabit PCI-E network cards, and an Intel Core 2 Duo 2.4GHz linux machine as an openvpn server. I have gotten it setup so that a remote client can access the whole server-side network via push-routes. My problem is that, when transferring files from the server-side network to the client, I can never even come close to maxing out my upload speed (should be 10mbps or ~1.2MB/s). In the BEST possible conditions I have managed to get ~4mbps or ~500KB/s. I am completely at my wits end on this; EVERY other service that I have setup outside of this openvpn has no problem maxing out 10mbps - i have set up a temporary apache http server and a vsftp server just to test this, and these are perfectly capable of achieving normal speeds. In fact I even set them to run on port 1194, just to see if there might be some throttling going on - worked fine. Even within the local LAN, I am getting roughyl 35-40mbps iperf transfers from the VPN server. But when I connect from the internet somewhere (doesn't matter if its wifi or hardwired, although wifi seems to be even worse) I can never get much past 4mbps. Additionally, I am seeing TONS (i mean hundreds per minute) of these messages on the server:
Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #22931 ]
Even though I have set the replay-window option on the server to "1024 60". The research I have done says that this is because of a router that is dropping packets, but when I do many repeated tests of pingtest.net on both the server internet connection and the client connections, they all come back with 0 packet loss and an "A" rating. As well, as I said every other type of server (web, ftp) that I have setup seems to have no problem; its just openvpn that is the problem. I have played around with different fragment and mssfix options, to absolultely no effect.
Here are my configs, PLEASE if any one has any idea where I might be able to turn for assistance on this; I am primarily intending to do audio work on WAV files and the difference between 500KB/s and 1.2MB/s is fairly huge.
SERVER:
local 172.16.16.4
port 1194
proto udp
dev tun
fragment 0
mssfix 0
replay-window 1024 60
ca /etc/openvpn/ca.crt
cert /etc/openvpn/KS.crt
key /etc/openvpn/KS.key
dh /etc/openvpn/dh2048.pem
server 10.11.12.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-config-dir ccd
route 10.11.12.0 255.255.255.0
push "route 172.16.0.0 255.255.0.0"
push "route 192.168.192.0 255.255.255.0"
client-to-client
keepalive 10 120
tls-auth /etc/openvpn/ta.key 0
cipher AES-128-CBC
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 5
reneg-sec 10800
CLIENT:
client
dev tun
port 1194
proto udp
fragment 0
mssfix 0
replay-window 1024 60
dev-node OPENVPN
remote 70.90.247.33
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C:\\Program Files (x86)\\OpenVPN\\config\\pLAN9\\ca.crt"
cert "C:\\Program Files (x86)\\OpenVPN\\config\\pLAN9\\pLAN9-Laptop.crt"
key "C:\\Program Files (x86)\\OpenVPN\\config\\pLAN9\\pLAN9-Laptop.key"
ns-cert-type server
tls-auth "C:\\Program Files (x86)\\OpenVPN\\config\\pLAN9\\ta.key" 1
cipher AES-128-CBC
verb 4
reneg-sec 10800
