Hi, I have installed OpenVPN on my own server and the connection is very slow. [b]Server-Config[/b] [code]port 40912 #with the standard port I have the same trouble proto udp dev tun ca ca.crt cert server.crt key server.key dh dh2048.pem server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt keepalive 10 120 comp-lzo persist-key persist-tun status openvpn-status.log verb 3 [/code] [b]Speedtest Server:[/b] 100.00M 5.80MB/s in 25s [b]Speedtest Computer Home Network[/b] 100.00M 3.13MB/s in 31s [b]Speedtest Computer Home Network with OpenVPN[/b] 2.23M 8.79KB/s eta 49m 22s But when I connect now from a other network (e.g. from a cafe, university,...) with the same computer I get fullspeed over the connection. So I don't know where to search for the error. Is it my network, is the ISP limiting me or is something wrong with my server config? Thank you!

[quote="Traffic"]What is your VPN Server ISP bandwidth supposed to be ?[/quote][quote="Traffic"]For proper advice .. Post full details.[/quote]ISP [b]Download and Upload[/b] speed that your server can expect .. try speedtest.net

Sorry for the misunderstanding. The bandwidth of the server is (tested with speedtest_cli): [code]Testing download speed........................................ Download: 193.44 Mbit/s Testing upload speed.................................................. Upload: 120.58 Mbit/s [/code] So I think sufficient for my purpose. On other networks (cafe, university,..) I always get full speed (e.g. 30Mbit), so I think the bandwith of the server isn't the problem Best wishes

[quote="who"]Speed at [b]Home[/b] Network with OpenVPN: 0.98MBit[/quote]Is your server and your client in your [b]home[/b] ?

Very Slow OpenVPN connection

who

Hi,

I have installed OpenVPN on my own server and the connection is very slow.

Server-Config

port 40912 #with the standard port I have the same trouble
proto udp
dev tun

ca ca.crt
cert server.crt
key server.key
dh dh2048.pem

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

Speedtest Server:
100.00M 5.80MB/s in 25s

Speedtest Computer Home Network
100.00M 3.13MB/s in 31s

Speedtest Computer Home Network with OpenVPN
2.23M 8.79KB/s eta 49m 22s

But when I connect now from a other network (e.g. from a cafe, university,...) with the same computer I get fullspeed over the connection.

So I don't know where to search for the error. Is it my network, is the ISP limiting me or is something wrong with my server config?

Thank you!

Traffic

What is your VPN Server ISP bandwidth supposed to be ?

who

Hi

server bandwith should be 100mbit and home network 30mbit

Traffic

For proper advice .. Post full details.

who

Hi,

here all my configs and logs:
server.conf

port 40912
proto udp
dev tun

ca ca.crt
cert server.crt
key server.key
dh dh2048.pem

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 4
push "redirect-gateway def1"

client.conf

client
dev tun
proto udp
remote IP 40912
 
resolv-retry infinite
nobind
persist-key
persist-tun
 
ca ca.crt
cert user.crt
key user.key
ns-cert-type server
 
comp-lzo
verb 4

push "redirect-gateway def1" 
push "dhcp-option DNS 10.8.0.1"

vpn log on client:

Thu Mar 17 22:18:51 2016 us=87267 Current Parameter Settings:
Thu Mar 17 22:18:51 2016 us=87366   config = 'client.ovpn'
Thu Mar 17 22:18:51 2016 us=87395   mode = 0
Thu Mar 17 22:18:51 2016 us=87421   persist_config = DISABLED
Thu Mar 17 22:18:51 2016 us=87445   persist_mode = 1
Thu Mar 17 22:18:51 2016 us=87469   show_ciphers = DISABLED
Thu Mar 17 22:18:51 2016 us=87493   show_digests = DISABLED
Thu Mar 17 22:18:51 2016 us=87519   show_engines = DISABLED
Thu Mar 17 22:18:51 2016 us=87543   genkey = DISABLED
Thu Mar 17 22:18:51 2016 us=87578   key_pass_file = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=87602   show_tls_ciphers = DISABLED
Thu Mar 17 22:18:51 2016 us=87625 Connection profiles [default]:
Thu Mar 17 22:18:51 2016 us=87649   proto = udp
Thu Mar 17 22:18:51 2016 us=87672   local = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=87702   local_port = 0
Thu Mar 17 22:18:51 2016 us=87727   remote = 'IP'
Thu Mar 17 22:18:51 2016 us=87754   remote_port = 40912
Thu Mar 17 22:18:51 2016 us=87779   remote_float = DISABLED
Thu Mar 17 22:18:51 2016 us=87807   bind_defined = DISABLED
Thu Mar 17 22:18:51 2016 us=87833   bind_local = DISABLED
Thu Mar 17 22:18:51 2016 us=87857   connect_retry_seconds = 5
Thu Mar 17 22:18:51 2016 us=87879   connect_timeout = 10
Thu Mar 17 22:18:51 2016 us=87911   connect_retry_max = 0
Thu Mar 17 22:18:51 2016 us=87935   socks_proxy_server = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=87962   socks_proxy_port = 0
Thu Mar 17 22:18:51 2016 us=87986   socks_proxy_retry = DISABLED
Thu Mar 17 22:18:51 2016 us=88011   tun_mtu = 1500
Thu Mar 17 22:18:51 2016 us=88035   tun_mtu_defined = ENABLED
Thu Mar 17 22:18:51 2016 us=88057   link_mtu = 1500
Thu Mar 17 22:18:51 2016 us=88083   link_mtu_defined = DISABLED
Thu Mar 17 22:18:51 2016 us=88107   tun_mtu_extra = 0
Thu Mar 17 22:18:51 2016 us=88130   tun_mtu_extra_defined = DISABLED
Thu Mar 17 22:18:51 2016 us=88153   mtu_discover_type = -1
Thu Mar 17 22:18:51 2016 us=88178   fragment = 0
Thu Mar 17 22:18:51 2016 us=88202   mssfix = 1450
Thu Mar 17 22:18:51 2016 us=88226   explicit_exit_notification = 0
Thu Mar 17 22:18:51 2016 us=88251 Connection profiles END
Thu Mar 17 22:18:51 2016 us=88275   remote_random = DISABLED
Thu Mar 17 22:18:51 2016 us=88298   ipchange = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=88321   dev = 'tun'
Thu Mar 17 22:18:51 2016 us=88344   dev_type = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=88368   dev_node = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=88393   lladdr = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=88417   topology = 1
Thu Mar 17 22:18:51 2016 us=88457   tun_ipv6 = DISABLED
Thu Mar 17 22:18:51 2016 us=88484   ifconfig_local = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=88509   ifconfig_remote_netmask = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=88537   ifconfig_noexec = DISABLED
Thu Mar 17 22:18:51 2016 us=88562   ifconfig_nowarn = DISABLED
Thu Mar 17 22:18:51 2016 us=88585   ifconfig_ipv6_local = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=88616   ifconfig_ipv6_netbits = 0
Thu Mar 17 22:18:51 2016 us=88644   ifconfig_ipv6_remote = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=88675   shaper = 0
Thu Mar 17 22:18:51 2016 us=88702   mtu_test = 0
Thu Mar 17 22:18:51 2016 us=88727   mlock = DISABLED
Thu Mar 17 22:18:51 2016 us=88754   keepalive_ping = 0
Thu Mar 17 22:18:51 2016 us=88777   keepalive_timeout = 0
Thu Mar 17 22:18:51 2016 us=88799   inactivity_timeout = 0
Thu Mar 17 22:18:51 2016 us=88823   ping_send_timeout = 0
Thu Mar 17 22:18:51 2016 us=88848   ping_rec_timeout = 0
Thu Mar 17 22:18:51 2016 us=88864   ping_rec_timeout_action = 0
Thu Mar 17 22:18:51 2016 us=88880   ping_timer_remote = DISABLED
Thu Mar 17 22:18:51 2016 us=88903   remap_sigusr1 = 0
Thu Mar 17 22:18:51 2016 us=88926   persist_tun = ENABLED
Thu Mar 17 22:18:51 2016 us=88949   persist_local_ip = DISABLED
Thu Mar 17 22:18:51 2016 us=88975   persist_remote_ip = DISABLED
Thu Mar 17 22:18:51 2016 us=88992   persist_key = ENABLED
Thu Mar 17 22:18:51 2016 us=89007   passtos = DISABLED
Thu Mar 17 22:18:51 2016 us=89022   resolve_retry_seconds = 1000000000
Thu Mar 17 22:18:51 2016 us=89037   username = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=89052   groupname = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=89066   chroot_dir = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=89080   cd_dir = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=89096   writepid = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=89110   up_script = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=89125   down_script = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=89140   down_pre = DISABLED
Thu Mar 17 22:18:51 2016 us=89155   up_restart = DISABLED
Thu Mar 17 22:18:51 2016 us=89170   up_delay = DISABLED
Thu Mar 17 22:18:51 2016 us=89185   daemon = DISABLED
Thu Mar 17 22:18:51 2016 us=89200   inetd = 0
Thu Mar 17 22:18:51 2016 us=89215   log = DISABLED
Thu Mar 17 22:18:51 2016 us=89230   suppress_timestamps = DISABLED
Thu Mar 17 22:18:51 2016 us=89245   nice = 0
Thu Mar 17 22:18:51 2016 us=89259   verbosity = 4
Thu Mar 17 22:18:51 2016 us=89274   mute = 0
Thu Mar 17 22:18:51 2016 us=89289   gremlin = 0
Thu Mar 17 22:18:51 2016 us=89304   status_file = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=89318   status_file_version = 1
Thu Mar 17 22:18:51 2016 us=89333   status_file_update_freq = 60
Thu Mar 17 22:18:51 2016 us=89348   occ = ENABLED
Thu Mar 17 22:18:51 2016 us=89362   rcvbuf = 0
Thu Mar 17 22:18:51 2016 us=89377   sndbuf = 0
Thu Mar 17 22:18:51 2016 us=89392   mark = 0
Thu Mar 17 22:18:51 2016 us=89406   sockflags = 0
Thu Mar 17 22:18:51 2016 us=89420   fast_io = DISABLED
Thu Mar 17 22:18:51 2016 us=89435   lzo = 7
Thu Mar 17 22:18:51 2016 us=89450   route_script = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=89465   route_default_gateway = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=89483   route_default_metric = 0
Thu Mar 17 22:18:51 2016 us=89506   route_noexec = DISABLED
Thu Mar 17 22:18:51 2016 us=89529   route_delay = 0
Thu Mar 17 22:18:51 2016 us=89552   route_delay_window = 30
Thu Mar 17 22:18:51 2016 us=89578   route_delay_defined = DISABLED
Thu Mar 17 22:18:51 2016 us=89594   route_nopull = DISABLED
Thu Mar 17 22:18:51 2016 us=89609   route_gateway_via_dhcp = DISABLED
Thu Mar 17 22:18:51 2016 us=89624   max_routes = 100
Thu Mar 17 22:18:51 2016 us=89639   allow_pull_fqdn = DISABLED
Thu Mar 17 22:18:51 2016 us=89654   management_addr = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=89670   management_port = 0
Thu Mar 17 22:18:51 2016 us=89685   management_user_pass = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=89701   management_log_history_cache = 250
Thu Mar 17 22:18:51 2016 us=89716   management_echo_buffer_size = 100
Thu Mar 17 22:18:51 2016 us=89732   management_write_peer_info_file = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=89747   management_client_user = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=89762   management_client_group = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=89777   management_flags = 0
Thu Mar 17 22:18:51 2016 us=89793   shared_secret_file = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=89808   key_direction = 0
Thu Mar 17 22:18:51 2016 us=89823   ciphername_defined = ENABLED
Thu Mar 17 22:18:51 2016 us=89839   ciphername = 'BF-CBC'
Thu Mar 17 22:18:51 2016 us=89854   authname_defined = ENABLED
Thu Mar 17 22:18:51 2016 us=89869   authname = 'SHA1'
Thu Mar 17 22:18:51 2016 us=89885   prng_hash = 'SHA1'
Thu Mar 17 22:18:51 2016 us=89900   prng_nonce_secret_len = 16
Thu Mar 17 22:18:51 2016 us=89915   keysize = 0
Thu Mar 17 22:18:51 2016 us=89930   engine = DISABLED
Thu Mar 17 22:18:51 2016 us=89945   replay = ENABLED
Thu Mar 17 22:18:51 2016 us=89960   mute_replay_warnings = DISABLED
Thu Mar 17 22:18:51 2016 us=89976   replay_window = 64
Thu Mar 17 22:18:51 2016 us=89991   replay_time = 15
Thu Mar 17 22:18:51 2016 us=90006   packet_id_file = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=90021   use_iv = ENABLED
Thu Mar 17 22:18:51 2016 us=90036   test_crypto = DISABLED
Thu Mar 17 22:18:51 2016 us=90051   tls_server = DISABLED
Thu Mar 17 22:18:51 2016 us=90066   tls_client = ENABLED
Thu Mar 17 22:18:51 2016 us=90081   key_method = 2
Thu Mar 17 22:18:51 2016 us=90096   ca_file = 'ca.crt'
Thu Mar 17 22:18:51 2016 us=90121   ca_path = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=90137   dh_file = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=90153   cert_file = 'user.crt'
Thu Mar 17 22:18:51 2016 us=90168   extra_certs_file = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=90183   priv_key_file = 'user.key'
Thu Mar 17 22:18:51 2016 us=90198   pkcs12_file = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=90212   cipher_list = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=90226   tls_verify = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=90241   tls_export_cert = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=90256   verify_x509_type = 0
Thu Mar 17 22:18:51 2016 us=90270   verify_x509_name = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=90285   crl_file = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=90300   ns_cert_type = 1
Thu Mar 17 22:18:51 2016 us=90315   remote_cert_ku[i] = 0
Thu Mar 17 22:18:51 2016 us=90330   remote_cert_ku[i] = 0
Thu Mar 17 22:18:51 2016 us=90345   remote_cert_ku[i] = 0
Thu Mar 17 22:18:51 2016 us=90359   remote_cert_ku[i] = 0
Thu Mar 17 22:18:51 2016 us=90374   remote_cert_ku[i] = 0
Thu Mar 17 22:18:51 2016 us=90388   remote_cert_ku[i] = 0
Thu Mar 17 22:18:51 2016 us=90403   remote_cert_ku[i] = 0
Thu Mar 17 22:18:51 2016 us=90418   remote_cert_ku[i] = 0
Thu Mar 17 22:18:51 2016 us=90433   remote_cert_ku[i] = 0
Thu Mar 17 22:18:51 2016 us=90447   remote_cert_ku[i] = 0
Thu Mar 17 22:18:51 2016 us=90463   remote_cert_ku[i] = 0
Thu Mar 17 22:18:51 2016 us=90477   remote_cert_ku[i] = 0
Thu Mar 17 22:18:51 2016 us=90492   remote_cert_ku[i] = 0
Thu Mar 17 22:18:51 2016 us=90507   remote_cert_ku[i] = 0
Thu Mar 17 22:18:51 2016 us=90522   remote_cert_ku[i] = 0
Thu Mar 17 22:18:51 2016 us=90536   remote_cert_ku[i] = 0
Thu Mar 17 22:18:51 2016 us=90551   remote_cert_eku = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=90567   ssl_flags = 0
Thu Mar 17 22:18:51 2016 us=90581   tls_timeout = 2
Thu Mar 17 22:18:51 2016 us=90596   renegotiate_bytes = 0
Thu Mar 17 22:18:51 2016 us=90611   renegotiate_packets = 0
Thu Mar 17 22:18:51 2016 us=90626   renegotiate_seconds = 3600
Thu Mar 17 22:18:51 2016 us=90641   handshake_window = 60
Thu Mar 17 22:18:51 2016 us=90659   transition_window = 3600
Thu Mar 17 22:18:51 2016 us=90683   single_session = DISABLED
Thu Mar 17 22:18:51 2016 us=90708   push_peer_info = DISABLED
Thu Mar 17 22:18:51 2016 us=90732   tls_exit = DISABLED
Thu Mar 17 22:18:51 2016 us=90755   tls_auth_file = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=90777   pkcs11_protected_authentication = DISABLED
Thu Mar 17 22:18:51 2016 us=90799   pkcs11_protected_authentication = DISABLED
Thu Mar 17 22:18:51 2016 us=90821   pkcs11_protected_authentication = DISABLED
Thu Mar 17 22:18:51 2016 us=90842   pkcs11_protected_authentication = DISABLED
Thu Mar 17 22:18:51 2016 us=90865   pkcs11_protected_authentication = DISABLED
Thu Mar 17 22:18:51 2016 us=90888   pkcs11_protected_authentication = DISABLED
Thu Mar 17 22:18:51 2016 us=90910   pkcs11_protected_authentication = DISABLED
Thu Mar 17 22:18:51 2016 us=90932   pkcs11_protected_authentication = DISABLED
Thu Mar 17 22:18:51 2016 us=90957   pkcs11_protected_authentication = DISABLED
Thu Mar 17 22:18:51 2016 us=90982   pkcs11_protected_authentication = DISABLED
Thu Mar 17 22:18:51 2016 us=90997   pkcs11_protected_authentication = DISABLED
Thu Mar 17 22:18:51 2016 us=91012   pkcs11_protected_authentication = DISABLED
Thu Mar 17 22:18:51 2016 us=91032   pkcs11_protected_authentication = DISABLED
Thu Mar 17 22:18:51 2016 us=91056   pkcs11_protected_authentication = DISABLED
Thu Mar 17 22:18:51 2016 us=91080   pkcs11_protected_authentication = DISABLED
Thu Mar 17 22:18:51 2016 us=91103   pkcs11_protected_authentication = DISABLED
Thu Mar 17 22:18:51 2016 us=91127   pkcs11_private_mode = 00000000
Thu Mar 17 22:18:51 2016 us=91150   pkcs11_private_mode = 00000000
Thu Mar 17 22:18:51 2016 us=91175   pkcs11_private_mode = 00000000
Thu Mar 17 22:18:51 2016 us=91199   pkcs11_private_mode = 00000000
Thu Mar 17 22:18:51 2016 us=91221   pkcs11_private_mode = 00000000
Thu Mar 17 22:18:51 2016 us=91245   pkcs11_private_mode = 00000000
Thu Mar 17 22:18:51 2016 us=91268   pkcs11_private_mode = 00000000
Thu Mar 17 22:18:51 2016 us=91291   pkcs11_private_mode = 00000000
Thu Mar 17 22:18:51 2016 us=91314   pkcs11_private_mode = 00000000
Thu Mar 17 22:18:51 2016 us=91339   pkcs11_private_mode = 00000000
Thu Mar 17 22:18:51 2016 us=91364   pkcs11_private_mode = 00000000
Thu Mar 17 22:18:51 2016 us=91389   pkcs11_private_mode = 00000000
Thu Mar 17 22:18:51 2016 us=91413   pkcs11_private_mode = 00000000
Thu Mar 17 22:18:51 2016 us=91430   pkcs11_private_mode = 00000000
Thu Mar 17 22:18:51 2016 us=91445   pkcs11_private_mode = 00000000
Thu Mar 17 22:18:51 2016 us=91460   pkcs11_private_mode = 00000000
Thu Mar 17 22:18:51 2016 us=91478   pkcs11_cert_private = DISABLED
Thu Mar 17 22:18:51 2016 us=91500   pkcs11_cert_private = DISABLED
Thu Mar 17 22:18:51 2016 us=91520   pkcs11_cert_private = DISABLED
Thu Mar 17 22:18:51 2016 us=91542   pkcs11_cert_private = DISABLED
Thu Mar 17 22:18:51 2016 us=91565   pkcs11_cert_private = DISABLED
Thu Mar 17 22:18:51 2016 us=91590   pkcs11_cert_private = DISABLED
Thu Mar 17 22:18:51 2016 us=91608   pkcs11_cert_private = DISABLED
Thu Mar 17 22:18:51 2016 us=91623   pkcs11_cert_private = DISABLED
Thu Mar 17 22:18:51 2016 us=91638   pkcs11_cert_private = DISABLED
Thu Mar 17 22:18:51 2016 us=91653   pkcs11_cert_private = DISABLED
Thu Mar 17 22:18:51 2016 us=91667   pkcs11_cert_private = DISABLED
Thu Mar 17 22:18:51 2016 us=91682   pkcs11_cert_private = DISABLED
Thu Mar 17 22:18:51 2016 us=91696   pkcs11_cert_private = DISABLED
Thu Mar 17 22:18:51 2016 us=91711   pkcs11_cert_private = DISABLED
Thu Mar 17 22:18:51 2016 us=91726   pkcs11_cert_private = DISABLED
Thu Mar 17 22:18:51 2016 us=91740   pkcs11_cert_private = DISABLED
Thu Mar 17 22:18:51 2016 us=91755   pkcs11_pin_cache_period = -1
Thu Mar 17 22:18:51 2016 us=91770   pkcs11_id = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=91785   pkcs11_id_management = DISABLED
Thu Mar 17 22:18:51 2016 us=91802   server_network = 0.0.0.0
Thu Mar 17 22:18:51 2016 us=91818   server_netmask = 0.0.0.0
Thu Mar 17 22:18:51 2016 us=91846   server_network_ipv6 = ::
Thu Mar 17 22:18:51 2016 us=91862   server_netbits_ipv6 = 0
Thu Mar 17 22:18:51 2016 us=91878   server_bridge_ip = 0.0.0.0
Thu Mar 17 22:18:51 2016 us=91894   server_bridge_netmask = 0.0.0.0
Thu Mar 17 22:18:51 2016 us=91909   server_bridge_pool_start = 0.0.0.0
Thu Mar 17 22:18:51 2016 us=91925   server_bridge_pool_end = 0.0.0.0
Thu Mar 17 22:18:51 2016 us=91940   push_entry = 'redirect-gateway def1'
Thu Mar 17 22:18:51 2016 us=91956   push_entry = 'dhcp-option DNS 10.8.0.1'
Thu Mar 17 22:18:51 2016 us=91979   ifconfig_pool_defined = DISABLED
Thu Mar 17 22:18:51 2016 us=92005   ifconfig_pool_start = 0.0.0.0
Thu Mar 17 22:18:51 2016 us=92033   ifconfig_pool_end = 0.0.0.0
Thu Mar 17 22:18:51 2016 us=92066   ifconfig_pool_netmask = 0.0.0.0
Thu Mar 17 22:18:51 2016 us=92093   ifconfig_pool_persist_filename = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=92119   ifconfig_pool_persist_refresh_freq = 600
Thu Mar 17 22:18:51 2016 us=92143   ifconfig_ipv6_pool_defined = DISABLED
Thu Mar 17 22:18:51 2016 us=92165   ifconfig_ipv6_pool_base = ::
Thu Mar 17 22:18:51 2016 us=92180   ifconfig_ipv6_pool_netbits = 0
Thu Mar 17 22:18:51 2016 us=92195   n_bcast_buf = 256
Thu Mar 17 22:18:51 2016 us=92210   tcp_queue_limit = 64
Thu Mar 17 22:18:51 2016 us=92224   real_hash_size = 256
Thu Mar 17 22:18:51 2016 us=92238   virtual_hash_size = 256
Thu Mar 17 22:18:51 2016 us=92253   client_connect_script = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=92268   learn_address_script = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=92283   client_disconnect_script = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=92297   client_config_dir = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=92312   ccd_exclusive = DISABLED
Thu Mar 17 22:18:51 2016 us=92327   tmp_dir = '/tmp'
Thu Mar 17 22:18:51 2016 us=92342   push_ifconfig_defined = DISABLED
Thu Mar 17 22:18:51 2016 us=92358   push_ifconfig_local = 0.0.0.0
Thu Mar 17 22:18:51 2016 us=92373   push_ifconfig_remote_netmask = 0.0.0.0
Thu Mar 17 22:18:51 2016 us=92395   push_ifconfig_ipv6_defined = DISABLED
Thu Mar 17 22:18:51 2016 us=92421   push_ifconfig_ipv6_local = ::/0
Thu Mar 17 22:18:51 2016 us=92455   push_ifconfig_ipv6_remote = ::
Thu Mar 17 22:18:51 2016 us=92484   enable_c2c = DISABLED
Thu Mar 17 22:18:51 2016 us=92529   duplicate_cn = DISABLED
Thu Mar 17 22:18:51 2016 us=92553   cf_max = 0
Thu Mar 17 22:18:51 2016 us=92580   cf_per = 0
Thu Mar 17 22:18:51 2016 us=92604   max_clients = 1024
Thu Mar 17 22:18:51 2016 us=92629   max_routes_per_client = 256
Thu Mar 17 22:18:51 2016 us=92652   auth_user_pass_verify_script = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=92678   auth_user_pass_verify_script_via_file = DISABLED
Thu Mar 17 22:18:51 2016 us=92705   port_share_host = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=92721   port_share_port = 0
Thu Mar 17 22:18:51 2016 us=92738   client = ENABLED
Thu Mar 17 22:18:51 2016 us=92763   pull = ENABLED
Thu Mar 17 22:18:51 2016 us=92789   auth_user_pass_file = '[UNDEF]'
Thu Mar 17 22:18:51 2016 us=92809 OpenVPN 2.3.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jan 21 2016
Thu Mar 17 22:18:51 2016 us=92833 library versions: OpenSSL 1.0.2g  1 Mar 2016, LZO 2.08
Enter Private Key Password: **********
Thu Mar 17 22:18:55 2016 us=234161 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Mar 17 22:18:55 2016 us=239629 WARNING: file 'user.key' is group or others accessible
Thu Mar 17 22:18:55 2016 us=239881 LZO compression initialized
Thu Mar 17 22:18:55 2016 us=239955 Control Channel MTU parms [ L:1542 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Thu Mar 17 22:18:55 2016 us=239990 Socket Buffers: R=[212992->212992] S=[212992->212992]
Thu Mar 17 22:18:55 2016 us=240009 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:143 ET:0 EL:3 AF:3/1 ]
Thu Mar 17 22:18:55 2016 us=240028 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Mar 17 22:18:55 2016 us=240038 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Mar 17 22:18:55 2016 us=240060 Local Options hash (VER=V4): '41690919'
Thu Mar 17 22:18:55 2016 us=240075 Expected Remote Options hash (VER=V4): '530fdded'
Thu Mar 17 22:18:55 2016 us=240088 UDPv4 link local: [undef]
Thu Mar 17 22:18:55 2016 us=240099 UDPv4 link remote: [AF_INET]IP:40912
Thu Mar 17 22:18:55 2016 us=318600 TLS: Initial packet from [AF_INET]IP:40912, sid=6afa3ca7 4e765552
Thu Mar 17 22:18:55 2016 us=879607 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=Fort-Funston CA, name=EasyRSA, emailAddress=me@myhost.mydomain
Thu Mar 17 22:18:55 2016 us=879960 VERIFY OK: nsCertType=SERVER
Thu Mar 17 22:18:55 2016 us=879976 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=server, name=EasyRSA, emailAddress=me@myhost.mydomain
Thu Mar 17 22:18:56 2016 us=321512 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Mar 17 22:18:56 2016 us=321550 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Mar 17 22:18:56 2016 us=321623 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Mar 17 22:18:56 2016 us=321634 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Mar 17 22:18:56 2016 us=321672 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Thu Mar 17 22:18:56 2016 us=321700 [server] Peer Connection Initiated with [AF_INET]IP:40912
Thu Mar 17 22:18:58 2016 us=482050 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Thu Mar 17 22:18:58 2016 us=560329 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Thu Mar 17 22:18:58 2016 us=560423 OPTIONS IMPORT: timers and/or timeouts modified
Thu Mar 17 22:18:58 2016 us=560521 OPTIONS IMPORT: --ifconfig/up options modified
Thu Mar 17 22:18:58 2016 us=560538 OPTIONS IMPORT: route options modified
Thu Mar 17 22:18:58 2016 us=560732 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 IFACE=wlan0 HWADDR=00:24:d7:16:89:40
Thu Mar 17 22:18:58 2016 us=561139 TUN/TAP device tun0 opened
Thu Mar 17 22:18:58 2016 us=561170 TUN/TAP TX queue length set to 100
Thu Mar 17 22:18:58 2016 us=561193 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Mar 17 22:18:58 2016 us=561226 /sbin/ip link set dev tun0 up mtu 1500
Thu Mar 17 22:18:58 2016 us=563070 /sbin/ip addr add dev tun0 local 10.8.0.6 peer 10.8.0.5
Thu Mar 17 22:18:58 2016 us=566096 /sbin/ip route add IP/32 via 192.168.0.1
Thu Mar 17 22:18:58 2016 us=568195 /sbin/ip route add 0.0.0.0/1 via 10.8.0.5
Thu Mar 17 22:18:58 2016 us=569714 /sbin/ip route add 128.0.0.0/1 via 10.8.0.5
Thu Mar 17 22:18:58 2016 us=571818 /sbin/ip route add 10.8.0.1/32 via 10.8.0.5
Thu Mar 17 22:18:58 2016 us=574941 Initialization Sequence Completed

log on server

Mar 17 17:18:55 5abadd30f8 ovpn-server[1525]: MULTI: multi_create_instance called
Mar 17 17:18:55 5abadd30f8 ovpn-server[1525]: 212.183.88.175:59807 Re-using SSL/TLS context
Mar 17 17:18:55 5abadd30f8 ovpn-server[1525]: 212.183.88.175:59807 LZO compression initialized
Mar 17 17:18:55 5abadd30f8 ovpn-server[1525]: 212.183.88.175:59807 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mar 17 17:18:55 5abadd30f8 ovpn-server[1525]: 212.183.88.175:59807 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mar 17 17:18:55 5abadd30f8 ovpn-server[1525]: 212.183.88.175:59807 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mar 17 17:18:55 5abadd30f8 ovpn-server[1525]: 212.183.88.175:59807 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mar 17 17:18:55 5abadd30f8 ovpn-server[1525]: 212.183.88.175:59807 Local Options hash (VER=V4): '530fdded'
Mar 17 17:18:55 5abadd30f8 ovpn-server[1525]: 212.183.88.175:59807 Expected Remote Options hash (VER=V4): '41690919'
Mar 17 17:18:55 5abadd30f8 ovpn-server[1525]: 212.183.88.175:59807 TLS: Initial packet from [AF_INET]212.183.88.175:59807, sid=627fbda5 030136b9
Mar 17 17:18:56 5abadd30f8 ovpn-server[1525]: 212.183.88.175:59807 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=Fort-Funston CA, name=EasyRSA, emailAddress=me@myhost.mydomain
Mar 17 17:18:56 5abadd30f8 ovpn-server[1525]: 212.183.88.175:59807 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=user, name=EasyRSA, emailAddress=me@myhost.mydomain
Mar 17 17:18:56 5abadd30f8 ovpn-server[1525]: 212.183.88.175:59807 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar 17 17:18:56 5abadd30f8 ovpn-server[1525]: 212.183.88.175:59807 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 17 17:18:56 5abadd30f8 ovpn-server[1525]: 212.183.88.175:59807 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar 17 17:18:56 5abadd30f8 ovpn-server[1525]: 212.183.88.175:59807 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 17 17:18:56 5abadd30f8 ovpn-server[1525]: 212.183.88.175:59807 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mar 17 17:18:56 5abadd30f8 ovpn-server[1525]: 212.183.88.175:59807 [user] Peer Connection Initiated with [AF_INET]212.183.88.175:59807
Mar 17 17:18:56 5abadd30f8 ovpn-server[1525]: MULTI: new connection by client 'user' will cause previous active sessions by this client to be dropped.  Remember to use the --duplicate-cn option if you want multiple clients using the sa$
Mar 17 17:18:56 5abadd30f8 ovpn-server[1525]: MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Mar 17 17:18:56 5abadd30f8 ovpn-server[1525]: MULTI: Learn: 10.8.0.6 -> user/212.183.88.175:59807
Mar 17 17:18:56 5abadd30f8 ovpn-server[1525]: MULTI: primary virtual IP for user/212.183.88.175:59807: 10.8.0.6
Mar 17 17:18:58 5abadd30f8 ovpn-server[1525]: user/212.183.88.175:59807 PUSH: Received control message: 'PUSH_REQUEST'
Mar 17 17:18:58 5abadd30f8 ovpn-server[1525]: user/212.183.88.175:59807 send_push_reply(): safe_cap=940
Mar 17 17:18:58 5abadd30f8 ovpn-server[1525]: user/212.183.88.175:59807 SENT CONTROL [user]: 'PUSH_REPLY,redirect-gateway def1,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Mar 17 17:18:58 5abadd30f8 ovpn-server[1525]: user/212.183.88.175:59807 MULTI: bad source address from client [192.168.0.118], packet dropped
Mar 17 17:18:58 5abadd30f8 ovpn-server[1525]: user/212.183.88.175:59807 MULTI: bad source address from client [192.168.0.118], packet dropped
Mar 17 17:18:58 5abadd30f8 ovpn-server[1525]: user/212.183.88.175:59807 MULTI: bad source address from client [192.168.0.118], packet dropped
Mar 17 17:18:58 5abadd30f8 ovpn-server[1525]: user/212.183.88.175:59807 MULTI: bad source address from client [192.168.0.118], packet dropped
Mar 17 17:18:58 5abadd30f8 ovpn-server[1525]: user/212.183.88.175:59807 MULTI: bad source address from client [192.168.0.118], packet dropped
Mar 17 17:18:58 5abadd30f8 ovpn-server[1525]: user/212.183.88.175:59807 MULTI: bad source address from client [192.168.0.118], packet dropped
Mar 17 17:18:58 5abadd30f8 ovpn-server[1525]: user/212.183.88.175:59807 MULTI: bad source address from client [192.168.0.118], packet dropped
Mar 17 17:18:58 5abadd30f8 ovpn-server[1525]: user/212.183.88.175:59807 MULTI: bad source address from client [192.168.0.118], packet dropped

cat /proc/sys/net/ipv4/ip_forward
1

-A FORWARD -i tun0 -o venet0:0 -j ACCEPT
-A FORWARD -i tun0 -o venet0 -j ACCEPT
-A fail2ban-ssh -j RETURN


iptables -L -n
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
fail2ban-ssh  tcp  --  0.0.0.0/0            0.0.0.0/0            multiport dports 22

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain fail2ban-ssh (1 references)
target     prot opt source               destination         
RETURN     all  --  0.0.0.0/0            0.0.0.0/0

Thank youn!

Traffic

Traffic wroteWhat is your VPN Server ISP bandwidth supposed to be ?

Traffic wroteFor proper advice .. Post full details.

ISP Download and Upload speed that your server can expect .. try speedtest.net

who

Sorry for the misunderstanding.

The bandwidth of the server is (tested with speedtest_cli):

Testing download speed........................................
Download: 193.44 Mbit/s
Testing upload speed..................................................
Upload: 120.58 Mbit/s

So I think sufficient for my purpose. On other networks (cafe, university,..) I always get full speed (e.g. 30Mbit), so I think the bandwith of the server isn't the problem

Best wishes

Traffic

who wroteSpeedtest Computer Home Network with OpenVPN
2.23M 8.79KB/s eta 49m 22s

who wroteBut when I connect now from a other network (e.g. from a cafe, university,...) with the same computer I get fullspeed over the connection

Please explain where you are, in detail, when you experience the problem ..

who

Speed at Home Network withouth OpenVPN: 27.8MBit
Speed at Home Network with OpenVPN: 0.98MBit

Speed at University Network without OpenVPN: 35MBit
Speed at University Network with OpenVPN: 22MBit

Tested with the same mobile computer.

Traffic

who wroteSpeed at Home Network with OpenVPN: 0.98MBit

Is your server and your client in your home ?

who

Hi
no, the server is a rented server.

Traffic

I would guess that there is something wrong with your home network.