Hi,
I've got huge speed issue with my server running ovpn.
For info, server hardware is Xeon(R) CPU E3-1225 v2 @ 3.2GHz on a P8H77-M PRO with 16GB DDR3.
It's hosted with an "advertised" 100Mb/s cnx and it runs up-to-date Ubuntu server 13.10.
Anyway, I resumed my problem within this picture:
First part is untunelled FTP here for compare.
Second part is FTP through no auth, no comp, no cipher ovpn.
Third part is FTP through wanted ovpn configuration that follows.
Note that even if it's not explicit on graph, I usually loose 1MB/s between 2d and 3rd test.
port x
proto udp
dev tun
ca ca.crt
cert x.crt
key x.key
dh dh2048.pem
server x.x.x.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-config-dir ccd
ccd-exclusive
keepalive 10 120
tls-auth ta.key 0
cipher AES-256-CBC
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
I've tried to play with mtu, mssfix, fragment, proto tcp, ciphers and comp-lzo but nothing resolved the fact that speed is at least divided by two with/without tunnel.
Besides, CPU is used at max 30%, peaks sometimes at 80%. Lot of ram, swap and disk space free.
Note that untunelled SFTP has quite same speed that tunneled FTP.
And whenever I use SFTP through ovpn it falls under 1MB/s.
I would understand a speed loss of 1/10 from untunelled to tunelled, but 1/2 seems really weird to me.
And I don't want to leave an FTP access outside tunnel.
Please, help me, i'm out of ideas 😐
