Multiple servers for bridged/routed connection?

Fry-kun

Hi,

I have a setup with two private LANs bridged to each other with openvpn.
Problem is, I'm not getting the full speed (getting ~100-200M, should get about a gigabit). It looks like the application is CPU-bounded. I've already enabled hardware acceleration (AES-NI) which gave the connection a nice little boost -- but it's still not at a gigabit.

From what I understand, since the application is not multi-threaded, I'll need to run multiple instances if I want to use several CPU cores. My question is -- how do I do that with a bridged connection? If it's not possible with bridged, is it possible with a routed connection?

Thanks

P.S. current config:

port 1194
proto udp
tun-mtu 6000
fragment 0
remote re5.wan
tls-server
dev tap0
ca /root/easy-rsa/keys/ca.crt
cert /root/easy-rsa/keys/re6.crt
key /root/easy-rsa/keys/re6.key  # This file should be kept secret
dh /root/easy-rsa/keys/dh1024.pem
keepalive 10 120
cipher AES-256-CBC
engine aesni
user nobody
group nobody
persist-key
persist-tun
status /var/log/openvpn-status.log
log-append  /var/log/openvpn.log
verb 4
fast-io

maikcat

i copy paste answer from dazo about multi thread issue..

Please make sure that you really have pinned each of the OpenVPN processes to different CPUs. The taskset command can be used to do this. As OpenVPN is not multi-threaded, spreading OpenVPN processes to separate CPUs will most likely give the best performance.

From what we have heard from other users over the years is that the load is low and performance very good up to approx 150 users per OpenVPN process. From that point, the performance begins to decrease. Those clients have then all mostly been very active clients, with a lot of traffic. If you clients have less traffic, you might experience that your OpenVPN process can handle some more clients for slowing down.

And before you ask, yes, we're thinking about how to make OpenVPN multi-threaded. However, in many situations it is not efficient to have a thread per client - as applications usually perform worse if you have more threads than CPU cores. This will anyway not be implemented before OpenVPN 3.

dazo

i hope dazo doenst mind using his words... 8-)

regards,

Michael.

Fry-kun

Nevermind the multithreading.
I only have 1 process and trying to figure out if more than one is even applicable to my situation.
Since I'm using bridging, I don't have "users" - though I have a few dozen machines in each LAN, any of which potentially talk to each other.