pierre
I have been using OpenVPN successfully since 2006 (using TAP, not TUN) with clients in the country as well as abroad (i.e. several thousand miles away from the server). Up to a week ago I was still using 2.4.4, but finally found the time to upgrade my server and clients.
I had to generate new certs and keys (using 2048 bits, same as before) but I used SHA256 instead of MD5 to avoid a warning or error message (I forget which).
I also switched from using "comp-lzo" (soon to be obsolete) to using "compress lz4" (again to avoid the warning and being ready for future versions). Finally I started using "cipher AES-256-GCM". All of those changes based on recommendations I read online (in these forums or elsewhere).
Everything is working and all my clients connect just fine, but I have noticed a significant decrease in transfer speed. One of the use I make of OpenVPN is for the remote clients to be backed up on a backup server on my home network. The backups of the remote clients now take 2 to 3 times longer than before.
Given the changes I made above:
1) 2.4.4 to 2.4.7
2) MD5 to SHA256
3) comp-lzo to compress lz4
4) and cipher AES-256-GCM
is it obvious to anyone which change could be causing the slowdown? Is there something I can do to regain my previous transfer speed without sacrificing security? I have an inkling that 4) could be it but I am not sure at all.
Thanks for any guidance or troubleshooting tips.
Pierre
pierre
It turns out it was only 2 of the 3 overseas clients for which the backups were suddenly slower. But it was due to something else, and that is now corrected (it was just coincidence and poor timing). No issue with OpenVPN. Sorry for the false alarm.
