Hi,
I have read through lots of post with similar issues, but have not found a solution. So, I've decided to open a new thread.
FYI...I am an novice user of OpenVPN and VPN technologies
After I describe the problem, I will provide more details about my test environment below.
THE PROBLEM
When I use
iperf to test bandwidth between OpenVPN server and my Windows 7 workstation, I consistently get bandwidth in range of 0.5-2 Mbits. It does not matter if I run test over wireless or wired connection.
I have another personal laptop at home, also running Windows 7, and I consistently get 10-15 Mbits. My MBP from home also consistenly gets 10-15 Mbits.
Other colleagues from work, using very similar workstations as me, running Windows 7, get 10-15 Mbits.
ENVIRONMENT - OPEN VPN SERVER
The server is runninng in a SoftLayer data center on a Brocade Vyatta Gateway Appliance (bare-metal) Here are outputs which show Vyatta version details and OpenVPN server configuraiton
vyatta@vyatta:~$ show version
Version: VSE6.7R6
Description: Brocade Vyatta 5415 vRouter 6.7 R6
Copyright: 2006-2015 Vyatta, Inc.
Built by: autobuild@vyatta.com
Built on: Sat Feb 28 01:31:51 UTC 2015
Build ID: 1502280134-4f8d625
System type: Intel 64bit
Boot via: image
HW model: X9SCI/X9SCA
HW S/N: 0123456789
HW UUID: 00259057-DACE-0607-0025-9057DACE0E0F
Uptime: 10:06:35 up 7 days, 3:43, 2 users, load average: 0.09, 0.13, 0.14
vyatta@vyatta# show interfaces openvpn
openvpn vtun0 {
encryption aes256
hash sha1
local-port 1194
mode server
server {
push-route 10.50.20.128/26
subnet 192.168.101.0/24
}
tls {
ca-cert-file /config/auth/keys/ca.crt
cert-file /config/auth/keys/vyatta.somedomain.com.crt
crl-file /config/auth/keys/crl.pem
dh-file /config/auth/keys/dh2048.pem
key-file /config/auth/keys/vyatta.somedomain.com.key
}
}
[edit]
vyatta@vyatta#
IPERF = iperf version 2.0.4 (7 Apr 2008) pthreads
ENVIRONMENT - THE CLIENT
ThinkPad T420
Windows 7 Pro SP 1 64 bit
WIRED NETWORK ADAPTER = Intel(R) 82579LM Gigabit Network Connection
WIFI ADAPTER = Intel(R) Centrino(R) Advanced-N 6205
IPERF = iperf version 2.0.4 (7 Apr 2008) pthreads
OPENVPN CLIENT FILE
client
dev tun
proto udp
remote <IP-OMITTED> 1194
resolv-retry infinite
nobind
persist-key
persist-tun
<ca>
-----BEGIN CERTIFICATE-----
CERT NOT OMITTED
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
CERT NOT OMITTED
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN RSA PRIVATE KEY-----
RSA KEY OMITTED
-----END RSA PRIVATE KEY-----
</key>
ns-cert-type server
verb 3
cipher aes-256-cbc
IPERF TESTS
This is how I start server on my thin client
iperf -s -i1 -fm
This is how I run iperf client on the Vyatta, which is also the OpenVPN server
root@vyatta:~# iperf -c 192.168.101.3 -i1 -fm
------------------------------------------------------------
Client connecting to 192.168.101.3, TCP port 5001
TCP window size: 0.02 MByte (default)
------------------------------------------------------------
[ 3] local 192.168.101.1 port 56722 connected with 192.168.101.3 port 5001
[ ID] Interval Transfer Bandwidth
[ 3] 0.0- 1.0 sec 0.26 MBytes 2.16 Mbits/sec
[ 3] 1.0- 2.0 sec 0.15 MBytes 1.25 Mbits/sec
[ 3] 2.0- 3.0 sec 0.09 MBytes 0.79 Mbits/sec
[ 3] 3.0- 4.0 sec 0.04 MBytes 0.33 Mbits/sec
[ 3] 4.0- 5.0 sec 0.09 MBytes 0.79 Mbits/sec
[ 3] 5.0- 6.0 sec 0.09 MBytes 0.72 Mbits/sec
[ 3] 6.0- 7.0 sec 0.05 MBytes 0.39 Mbits/sec
[ 3] 7.0- 8.0 sec 0.05 MBytes 0.39 Mbits/sec
[ 3] 8.0- 9.0 sec 0.05 MBytes 0.39 Mbits/sec
[ 3] 0.0- 9.7 sec 0.91 MBytes 0.79 Mbits/sec
CLIENT CONNECTION LOG
Fri May 22 11:38:01 2015 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Mar 19 2015
Fri May 22 11:38:01 2015 library versions: OpenSSL 1.0.1m 19 Mar 2015, LZO 2.08
Enter Management Password:
Fri May 22 11:38:01 2015 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25342
Fri May 22 11:38:01 2015 Need hold release from management interface, waiting...
Fri May 22 11:38:01 2015 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25342
Fri May 22 11:38:01 2015 MANAGEMENT: CMD 'state on'
Fri May 22 11:38:01 2015 MANAGEMENT: CMD 'log all on'
Fri May 22 11:38:01 2015 MANAGEMENT: CMD 'hold off'
Fri May 22 11:38:01 2015 MANAGEMENT: CMD 'hold release'
Fri May 22 11:38:02 2015 Socket Buffers: R=[8192->8192] S=[64512->64512]
Fri May 22 11:38:02 2015 UDPv4 link local: [undef]
Fri May 22 11:38:02 2015 UDPv4 link remote: [AF_INET]A.B.C.D:1194
Fri May 22 11:38:02 2015 MANAGEMENT: >STATE:1432309082,WAIT,,,
Fri May 22 11:38:08 2015 MANAGEMENT: >STATE:1432309088,AUTH,,,
Fri May 22 11:38:08 2015 TLS: Initial packet from [AF_INET]A.B.C.D:1194, sid=a386de5e c838fe1b
Fri May 22 11:38:09 2015 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=Fort-Funston CA, name=EasyRSA, emailAddress=
me@myhost.mydomain
Fri May 22 11:38:09 2015 VERIFY OK: nsCertType=SERVER
Fri May 22 11:38:09 2015 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=vyatta.somedomain.com, name=EasyRSA, emailAddress=
me@myhost.mydomain
Fri May 22 11:38:10 2015 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Fri May 22 11:38:10 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 22 11:38:10 2015 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Fri May 22 11:38:10 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 22 11:38:10 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Fri May 22 11:38:10 2015 [vyatta.somedomain.com] Peer Connection Initiated with [AF_INET]A.B.C.D:1194
Fri May 22 11:38:11 2015 MANAGEMENT: >STATE:1432309091,GET_CONFIG,,,
Fri May 22 11:38:12 2015 SENT CONTROL [vyatta.somedomain.com]: 'PUSH_REQUEST' (status=1)
Fri May 22 11:38:13 2015 PUSH: Received control message: 'PUSH_REPLY,route 10.50.20.128 255.255.255.192,route-gateway 192.168.101.1,topology subnet,ping 10,ping-restart 60,ifconfig 192.168.101.3 255.255.255.0'
Fri May 22 11:38:13 2015 OPTIONS IMPORT: timers and/or timeouts modified
Fri May 22 11:38:13 2015 OPTIONS IMPORT: --ifconfig/up options modified
Fri May 22 11:38:13 2015 OPTIONS IMPORT: route options modified
Fri May 22 11:38:13 2015 OPTIONS IMPORT: route-related options modified
Fri May 22 11:38:13 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri May 22 11:38:13 2015 MANAGEMENT: >STATE:1432309093,ASSIGN_IP,,192.168.101.3,
Fri May 22 11:38:13 2015 open_tun, tt->ipv6=0
Fri May 22 11:38:13 2015 TAP-WIN32 device [Local Area Connection 3] opened: \\.\Global\{548BF1D1-AA85-499E-A1E1-EB0E4393F90D}.tap
Fri May 22 11:38:13 2015 TAP-Windows Driver Version 9.9
Fri May 22 11:38:13 2015 Set TAP-Windows TUN subnet mode network/local/netmask = 192.168.101.0/192.168.101.3/255.255.255.0 [SUCCEEDED]
Fri May 22 11:38:13 2015 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.101.3/255.255.255.0 on interface {548BF1D1-AA85-499E-A1E1-EB0E4393F90D} [DHCP-serv: 192.168.101.254, lease-time: 31536000]
Fri May 22 11:38:13 2015 Successful ARP Flush on interface [23] {548BF1D1-AA85-499E-A1E1-EB0E4393F90D}
Fri May 22 11:38:18 2015 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Fri May 22 11:38:18 2015 MANAGEMENT: >STATE:1432309098,ADD_ROUTES,,,
Fri May 22 11:38:18 2015 C:\windows\system32\route.exe ADD 10.50.20.128 MASK 255.255.255.192 192.168.101.1
Fri May 22 11:38:18 2015 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri May 22 11:38:18 2015 Route addition via IPAPI succeeded [adaptive]
Fri May 22 11:38:18 2015 Initialization Sequence Completed
Fri May 22 11:38:18 2015 MANAGEMENT: >STATE:1432309098,CONNECTED,SUCCESS,192.168.101.3,A.B.C.D
