Hi all,
i have a server sitting on a 1Gbit internet line and myself have 300Mbit line (all tested with speedtest.net and it gives me great speed). Now installed openvpn 2.3.2-1 and connected to VPN but the biggest speed it gives me is 10Mbit. I am about 100 miles from the server. I watched CPU usage and it's about 2% when i am testing download speed so it's not CPU. Openvpn is running on CentOS 6.5, selinux disabled. Certs are 2048bits and sign alg is SHA256.
This my server config
local 1.1.1.1
port 1194
proto udp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key # This file should be kept secret
dh /etc/openvpn/keys/dh4096.pem
server 10.8.1.0 255.255.255.0
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/keys/ta.key 0 # This file is secret
comp-lzo adaptive
persist-key
persist-tun
status /var/log/openvpn-status1.log
verb 3
keysize 256
mssfix 1300
fragment 1300
script-security 3
remote-cert-tls client
auth SHA512
cipher AES-256-CBC
tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA
key-method 2
link-mtu 1300
And client config:
client
dev tun
proto udp
remote 184.107.240.10 55678
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
ca ca.crt
cert client.crt
key client.key
tls-auth ta.key 1
comp-lzo adaptive
verb 3
tun-mtu 1500
mssfix 1390
fragment 1390
keysize 256
ns-cert-type server
remote-cert-tls server
auth SHA512
cipher AES-256-CBC
tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA
key-method 2
