I'm trying to create a simple VPN so I'm able to access my home machines from my workplace and vice-versa.
My server configuration is as follows:
mode server
tls-server
# network options
port 1194
proto tcp
dev tap
# Keys, certs
ca /etc/openvpn/ca.crt
cert /etc/openvpn/vpn.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh2048.pem
# Options
client-to-client
server-bridge 192.168.1.1 255.255.255.0 192.168.1.30 192.168.1.60
route add -host 255.255.255/32 tap0
push "dhcp-option DNS 192.168.1.1"
#comp-lzo
cipher AES-256-CBC
persist-key
persist-tun
verb 3
keepalive 10 120
log-append /var/log/openvpn.log
I am forced to use TCP as my workplace firewall drops all UDP packets.
My client configuration is:
client
tls-client
dev tap
proto tcp
remote xxx.xxx.xxx.xxx 1194
remote-cert-tls server
resolv-retry infinite
nobind
ca ca.crt
cert vpn.crt
key client.key
dh dh2048.pem
#comp-lzo
cipher AES-256-CBC
persist-tun
persist-key
verb 3
log /var/log/openvpn/vpn.log
I notice that my workplace machine (client) is often routing internet traffic via my home machine (VPN server).
I do not have packet trace proof for this, but I've noticed that often, my upload speeds are throttled to 1Mbps which is my limit at home.
Despite not specifying
redirect-gateway
, why is my internet traffic being routed through the VPN server?
