Hello everyone,
my first post here, im new to openvpn.
if i forgot some important info relevant to diagnose the problem please ask.
first of all:
my vpn server works flawlessly while remotely connecting to it via LAN/WIFI, both my iphone and on my laptop.
if i check my ip, it gives the external (wan) ip adress of my VPN server.
however, when i connect via 3G/4G (laptop or iphone) i run into major connectivity issues while trying to transfer data from websites / skype calls etc.
- the vpn connects perfectly and very fast.
- i can ping all the websites, so the DNS should be working (right?) the ping is about 220ms on average.
- when i start to visit websites it connects to that site, but stops loading for approx 15 seconds and then loads the site all the sudden, at high speeds.
- some web pages load instantly / very fast, however when i reconnect to my vpn and revisit that same page it might take ages to load.
- this issue is with all types of data: internet calls / skype / email / etc.
- i can access my router at home (which is intended) but also the same "lag issues" arise.
- some pages load, but content is missing.
- if i check my ip, it gives the external (wan) ip adress of my VPN server.
this topic i found describes my problem when connecting via 3G/4G exactly:
https://community.openvpn.net/openvpn/wiki/271-i-can-ping-through-the-tunnel-but-any-real-work-causes-it-to-lock-up-is-this-an-mtu-problem
however i tried the mentioned values / commands but none of them really gave a stable performance boost over 3G/4G.
i might have mis-used the commands/values for my connection type.
im using UDP/1194
im using a synology NAS as VPN server
my server config:
push "route 192.168.0.0 255.255.255.0"
push "route 10.8.0.0 255.255.255.0"
dev tun
management 127.0.0.1 1195
server 10.8.0.0 255.255.255.0
sndbuf 393216
rcvbuf 393216
dh /var/packages/VPNCenter/target/etc/openvpn/keys/dh3072.pem
ca /var/packages/VPNCenter/target/etc/openvpn/keys/ca.crt
cert /var/packages/VPNCenter/target/etc/openvpn/keys/server.crt
key /var/packages/VPNCenter/target/etc/openvpn/keys/server.key
max-clients 5
persist-tun
persist-key
verb 3
#log-append /var/log/openvpn.log
keepalive 10 60
reneg-sec 0
plugin /var/packages/VPNCenter/target/lib/radiusplugin.so /var/packages/VPNCenter/target/etc/openvpn/radiusplugin.cnf
client-cert-not-required
username-as-common-name
duplicate-cn
status /tmp/ovpn_status_2_result 30
status-version 2
proto udp6
port 1194
cipher AES-128-CBC
auth SHA1
my client config:
dev tun
tls-client
remote my.vpn.adress 1194
redirect-gateway def1
dhcp-option DNS 8.8.8.8
dhcp-option DNS 8.8.4.4
sndbuf 393216
rcvbuf 393216
mssfix 1200
pull
proto udp
script-security 2
reneg-sec 0
cipher AES-128-CBC
auth SHA1
auth-user-pass
<ca>
-----BEGIN CERTIFICATE-----
(removed on purpose)
-----END CERTIFICATE-----
</ca>
can someone share some thoughts on what might go wrong here? 🙂
thanks in advance,
jimi
