eldude_123
Hi,
Apologies if I have put this in the wrong area - I'm not really 100% sure what I'm trying to do is called. If I've put it the wrong place please advise and I'll move it.
Basically I have OpenVPN running on my DD-WRT router using Private Internet Access(PIA) VPN (I have tried TorGuard and ExpressVPN, PIA seems to give me the best performance). Unfortunately the performance is pretty poor (between 10 - 25% of my connection speed). Have discussed with PIA and they advised a couple of potential tweaks like changing port numbers, changing between UDP and TCP and changing MTU settings - nothing improved performance. Based on this they advised that the problem must be to do with my DD-WRT router (TP-Link WR1043ND) in that it doesn't have a powerful enough processor (it's only 400 MHz).
What I want to do:
Use a raspberry pi (overclocked to 1.0GHz) or a Beaglebone Black running Ubuntu (or whatever appropriate distro) with OpenVPN installed on that to do the job that my router is currently performing:
Internet <----------> DD-WRT router <----------> Linux running OpenVPN using PIA <----------> My LAN (containing a server, 2 laptops, 2 phones and 2 tablets (not all devices on the LAN are in use at the same time). I want all LAN devices to be using the VPN connection.
Would such a setup be possible? I essentially want the Linux device to just run OpenVPN as I have had it running on my router but doing so with a significant performance improvement.
I've looked at a lot of guides online and they seem to be geared towards setting up a PTP connection for secure VPN access of your home network. There doesn't seem to be much of a focus on having the Linux box as a gateway.
If I was to do this would my router still be able to do all of the other functions and literally just have the VPN running on the Linux box or will the Linux one take care of everything? (I would prefer the former so that I don't leave my network open to attack from me doing something stupid.)
Sorry if anything I've said isn't clear, I'm happy to provide more details if required.
Many thanks
brendan
the reason performance suffers such utter suckage is because you not only dont have the needed grunt from the processor, but they likely dont have a math co-processor to offload the intense math functions needed for SSL. encryption plain and simple is math that blows the average persons mind. if you dont have a decent processor with a math co-processor (think celeron chips or if you remember them, the 286/386/486 SX chips), you will run into performance issues with SSL.
eldude_123
Would neither of the pi or beaglebone be suitable? Just want to get something cheap to buy and run to stick between my router and LAN. Although would this just be a different bottleneck? VPN performance was rubbish on my router and waaaay too difficult on my NAS so I thought this could be a good solution?
Cheers
