Hello,
I've a problem with my OpenVPN's configuration.
So first of all, let assume that all my internet traffic is routed through my VPN.
My VPN is hosted on my server, where Apache is running.
My VPN network is 10.42.0.0/16.
During the whole experiment, I've 2 pings running:
ping -t public_server_ip
ping -t 10.42.0.1
They are both are ~20ms
When I download https://public_server_ip/bigfile, I'm downloading at about 12MB/s.
The CPU charge on the server is OK and <2%.
Both pings rank up at ~150ms.
But when I download
http://10.42.0.1/bigfile, I'm downloading at about 2MB/s.
The CPU charge on the server is arround 20% of a core (used by the openvpn process)
The 10.42.0.1's ping ranks up at about 1000ms, whereas the other stays at 20ms.
I tried to mess with the MTUs but with no success.
First of all, I tried the ping -l <mtu> <ip> and found out it's OK until 1472
I tried at this value, and at 1200, 1000, 600 by adding into server.conf:
tun-mtu <mtu>
And on the windows-side the command:
netsh interface ipv4 set subinterface "VPN" mtu=<mtu> store=persistent
But I still have the same issue.
The dump while downloading the file is pretty ugly with a lot of:
From: 10.42.0.1
To: 10.42.0.5
Length: 1014
Info: http > 58181 [ACK] Seq=148770 Ack=527 Win=10752 Len=960[Reassembly error, protocol TCP: New fragment overlaps old data (retransmission?)]
Full dump:
https://stuff.stooit.com/d/1/53a095a93239c/dump.pcapng
So yeah, at this point I don't know. I'm out of idea.
Server's configuration:
mode server
port 143
proto tcp
dev tun
;tun-mtu 1000
ca easy-rsa/keys/ca.crt
cert easy-rsa/keys/kimmie.crt
key easy-rsa/keys/kimmie.key # This file should be kept secret
dh easy-rsa/keys/dh2048.pem
server 10.42.0.0 255.255.0.0
ifconfig-pool-persist ipp.txt
client-config-dir clientconfigs
push "dhcp-option DNS 10.42.0.1"
push "dhcp-option DNS 8.8.8.8"
client-to-client
keepalive 10 120
tls-auth easy-rsa/keys/ta.key 0
cipher AES-256-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log openvpn.log
log-append openvpn.log
verb 3
