Super slow speeds using gigabit internet

tyrindor

I have a VPN going between two locations roughly 20 miles apart, both are on gigabit internet with 500Mbps upload. I get roughly 1.7MB/s average both ways which is pitifully slow. I cannot figure out how to fix this.

Here's my [edited] config:

{
  "Default": {
    "admin_ui.https.ip_address": "all", 
    "admin_ui.https.port": "943", 
    "auth.ldap.0.name": "My LDAP servers", 
    "auth.ldap.0.ssl_verify": "never", 
    "auth.ldap.0.timeout": "4", 
    "auth.ldap.0.use_ssl": "never", 
    "auth.module.type": "pam", 
    "auth.pam.0.service": "openvpnas", 
    "auth.radius.0.acct_enable": "false", 
    "auth.radius.0.name": "My Radius servers", 
    "cs.cws_proto_v2": "true", 
    "cs.https.ip_address": "all", 
    "cs.https.port": "943", 
    "cs.prof_sign_web": "true", 
    "cs.ssl_method": "SSLv3", 
    "cs.tls_version_min": "1.0", 
    "host.name": "", 
    "sa.initial_run_groups.0": "web_group", 
    "sa.initial_run_groups.1": "openvpn_group", 
    "vpn.client.routing.inter_client": "false", 
    "vpn.client.routing.reroute_dns": "true", 
    "vpn.client.routing.reroute_gw": "true", 
    "vpn.daemon.0.client.netmask_bits": "20", 
    "vpn.daemon.0.client.network": "", 
    "vpn.daemon.0.listen.ip_address": "all", 
    "vpn.daemon.0.listen.port": "9443", 
    "vpn.daemon.0.listen.protocol": "tcp", 
    "vpn.daemon.0.server.ip_address": "all", 
    "vpn.server.daemon.enable": "true", 
    "vpn.server.daemon.tcp.n_daemons": 4, 
    "vpn.server.daemon.tcp.port": "9443", 
    "vpn.server.daemon.udp.n_daemons": 4, 
    "vpn.server.daemon.udp.port": "1194", 
    "vpn.server.group_pool.0": "", 
    "vpn.server.port_share.enable": "true", 
    "vpn.server.port_share.ip_address": "1.2.3.4", 
    "vpn.server.port_share.port": "1234", 
    "vpn.server.port_share.service": "admin+client", 
    "vpn.server.routing.private_access": "nat", 
    "vpn.server.routing.private_network.0": "", 
    "vpn.server.routing.private_network.1": "", 
    "vpn.tls_refresh.do_reauth": "true", 
    "vpn.tls_refresh.interval": "360"
  }, 
  "_INTERNAL": {
    "run_api.active_profile": "Default", 
    "webui.edit_profile": "Default"
  }
}

I tried doing this following, but had no effect: https://lowendtalk.com/discussion/40099/why-openvpn-is-so-slow-cool-story

I tried:
sndbuf 0
rcvbuf 0

and:
"sndbuf": "0"
"rcvbuf": "0"

For whatever reason my config file seems formatted different and contains different things than most? I am using an OpenVPN plugin for unraid.

Can anyone help please?

TinCanTech

tyrindor wroteI have a VPN going between two locations roughly 20 miles apart

is that by micro-wave link ?

tyrindor

TinCanTech wrote
tyrindor wroteI have a VPN going between two locations roughly 20 miles apart
is that by micro-wave link ?

What do you mean? I am new to VPN, it took me like 8 hours to properly get working today, so my technical level is pretty low.

Why does my config file look different than any of the others posted?

TinCanTech

tyrindor wroteit took me like 8 hours to properly get working today

Good Work .. It could take months or even years.

tyrindor wroteWhy does my config file look different than any of the others posted?

On what OS are you working ?

tyrindor

I'm using an unraid plugin thats based on linux. https://lime-technology.com/forum/index.php?topic=43317.0

A few years back a friend set up a built-in router VPN for us and it had the same problem, <2MB/s speeds, we ended up giving up on it.

I was going to just attempt to install it on two windows computers, thinking it'd be easy, but I literally can't find anything on how to do it... Everything assumes you know things that I don't.

tyrindor

https://community.openvpn.net/openvpn/wiki/Easy_Windows_Guide

For example, this guide tells me exactly what to do but I get stuck on the very firsts steps. There is no easy-rsa folder.

TinCanTech

tyrindor wroteI'm using an unraid plugin thats based on linux. https://lime-technology.com/forum/index ... ic=43317.0

This is Openvpn Access Server not OpenVPN Free version.

tyrindor wroteI was going to just attempt to install it on two windows computers, thinking it'd be easy, but I literally can't find anything on how to do it... Everything assumes you know things that I don't.

I would use a Linux system but if you have to use windows, re-stall and select the option for EastRSA during the install process.

tyrindor

So here's the update...

We messed with this all day, tried multiple VPN hosts on different devices, every transfer direction possible, even added a 3rd party on another ISP and had him connect to the VPN. Still ~2MB/s for everything.

We then tried FTP hosting, and it was still 2MB/s. So we downloaded CuteFTP and set the multi-part connections to 8 to allow 8 connections. Boom, ~16MB/s.

I don't understand whats going on, I seem to need multiple connections to get good speeds. Perhaps a hub that it's being routed through limits bandwidth per connection?

mwandelaar

This:

We then tried FTP hosting, and it was still 2MB/s. So we downloaded CuteFTP and set the multi-part connections to 8 to allow 8 connections. Boom, ~16MB/s.

Makes sense. It looks like the hoster of your vpn-server (a vps?) is limiting bandwidth per session. If that's true, openvpn cannot solve this problem for you.

Have you managed to get the openvpn-free up and running?

tyrindor

I am the hoster, I have 500Mbps up, and definitely didn't set any limits. We set up a openvpn server on his side too, and same thing.

mwandelaar

I did a test to see if could reconstruct your findings.
My setup is:
Server: VPS in my own country, running Debian and Openvpn 2.3.12
Client: Raspberry Pi Debian Jessie, openvpn 2.3.4 (Stock jessie, ancient)

I ran the test using iperf. Connection outside the tunnel:

pi@Desktop-Pi:~ $ iperf -c server.outside.tunnel
------------------------------------------------------------
Client connecting to server.outside.tunnel, TCP port 5001
TCP window size: 43.8 KByte (default)
------------------------------------------------------------
[  3] local 192.168.xx.xx port 33276 connected with xx.xx.xx.xx port 5001
[ ID] Interval       Transfer     Bandwidth
[  3]  0.0-10.1 sec  49.2 MBytes  41.1 Mbits/sec

The speed is approx 100% off my download-speed.
Connection inside the tunnel:

pi@Desktop-Pi:~ $ iperf -c 172.20.10.1
------------------------------------------------------------
Client connecting to 172.20.10.1, TCP port 5001
TCP window size: 43.8 KByte (default)
------------------------------------------------------------
[  3] local 172.20.10.5 port 40862 connected with 172.20.10.1 port 5001
[ ID] Interval       Transfer     Bandwidth
[  3]  0.0-10.0 sec   144 MBytes   121 Mbits/sec

This speed increase is explained by using comp-lzo on the tunnel.

Both tests shows me that on the default setup off Linux and OpenVPN there's no bandwith-limiting. If you encounter something like that, i guess there's something in between doing QoS or traffic-shaping.

Please try the test on TCP port 80 and 443 (using iperf -p 80) and some tests on UDP. Both might give you an indication of the network between both systems.