hy!
i got a openvpn setup to tunnel traffic from my pc over to a vps. the direct connection from my pc to the vps is at around 16mbit/sec (its from europe to the u.s.).
i used to have ~13mbit/sec while openvpn was up (udp).
around one year ago i received a new cable modem (technicolor tc7200).
since aournd that time my openvpn speed dropped to ~4mbit/sec max, while the direct connection is still 16mbit/sec.
i tested every openvpn-config option i could find (changing mtu, switching from udp to tcp, tun/tap, changing ports, updating openvpn, no encrypt, no lzo, other encryption etc etc), nothing changed.
i changed the cable modem, no change. i had the cable analyzed by the isp, everything ok.
i checked with my vps provider (linode, submitting mtr logs, cpu/io logs) - they say everything´s fine, it must be with my isp
so the conclusion is: either the new cable modem anyhow doesnt like vpn-packets or the isp is shaping (i dont know how they would detect vpn traffic)
does anybody please know what i could try (besides switching provider..)
thx!
my setup:
windows 7 64 bit windows pc --> centos5 vps
client config
comp-lzo
proto tcp
ns-cert-type server
tls-client
client
dev tap
remote xxxx xx
ca xxxx
cert xxxx
key xxx
float
no-replay
server config:
port xxx
proto tcp
dev tap1
comp-lzo
ca xxx
cert xxx
key xxx
dh xxx
server xxx xxx
duplicate-cn
keepalive 10 120
push "redirect-gateway def1 bypass-dhcp"
push "redirect-gateway def1"
push "dhcp-option DNS 10.8.0.1"
push "route 10.8.0.0 255.255.255.0"
max-clients 5
client-to-client
no-replay
status /var/log/openvpn.log
verb 1
i use no-replay to avoid these kind of messages:
PID_ERR replay-window backtrack occurred [1] [SSL-0] [0_00000011111111111111111111122222233333333333344444444455555556] 0:97 0:96 t=1382832057[0] r=[-2,64,15,1,1] sl=[31,64,64,272]
Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #15553 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
PID_ERR replay [0] [SSL-0] [0000000000000000000000000000000000000000000000111111111111111111] 0:15553 0:15553 t=1382392470[0] r=[-3,64,15,2,1] sl=[63,64,64,272]
thx!
