rustydusty1717
Hello,
I'm running OpenVPN on a pfsense firewall and having some issues with throughput and stability. Tried various transfer protocols to test transfer speeds and I'm seeing 2Mb maximum, and the ping goes from 20-30ms to 500-1000ms while CPU on both sides is well below 25%
I've played with the tun-mtu, fragment and mssfix settings and tried various configurations without success.
Here is the settings:
~Peer to Peer Shared Key
~UDP
~TUN
~encryption AES-128-CBC (128bit)
~Algorithm SHA1
~No hardware acceleration
~No compression
~tun-mtu 1500
Here is the result of the mtu test:
NOTE: Empirical MTU test completed [Tried,Actual] local->remote=[1556,1556] remote->local=[1556,1556]
Traffic
Please see the Forum rules (top of page)
Do your best 8-)
I also have access to pfsense but your details are seriously lacking ...
rustydusty1717
Tell me what information is needed to better troubleshoot and I will get it.
rustydusty1717
I guess what my main question is in regard to the fragment command. With my MTU settings do I even need to be using the fragment command in my configurations?
tun-mtu 1500;fragment 1400;mssfix
Using this seems to be working okay and with my MTU-test confirming that both sides of the vpn are capable of 1556. Looking for the best possible configuration with what I have. Both pfsense firewalls are virtualized and have 512Mb memory, 1 vCPU on E5-2420V2 processors using VMware ESXi.
CPU on either end doens't seem to go over 50% utilizing the entire VPN.
Any suggestions greatly appreciated.
