port 1194
proto udp
dev tun
ca /etc/openvpn/server/ca.crt
cert /etc/openvpn/server/hidemyhost-server.crt
key /etc/openvpn/server/hidemyhost-server.key
dh /etc/openvpn/server/dh.pem
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1 bypass-dhcp"
push "sndbuf 393216"
push "rcvbuf 393216"
fragment 1200 ##### very important you can turn it up a bit. but,the lower the safer
mssfix 1200 ##### very important
compress lz4
sndbuf 2000000 ##### important
rcvbuf 2000000 ##### important
txqueuelen 4000 ##### suggested
push "dhcp-option DNS 8.8.4.4"
push "dhcp-option DNS 144.76.164.19"
duplicate-cn
cipher AES-256-CBC
tls-version-min 1.2
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-128-GCM-SHA256:TLS-DHE-RSA-WITH-AES-128-CBC-SHA256
auth SHA512
auth-nocache
keepalive 20 60
persist-key
persist-tun
daemon
user nobody
group nobody
log-append /etc/openvpn/server/connection.log
verb 3
this is the config for the server, the connection.log states:
client01/188.40.x.x:59183 FRAG_IN error flags=0x45000043: FRAG_TEST not implemented
client01/188.40.x.x:59183 Bad LZ4 decompression header byte: 12
client01/188.40.x.x:59183 FRAG_IN error flags=0x45000041: bad fragment size
client01/188.40.x.x:59183 Bad LZ4 decompression header byte: 7
client01/188.40.x.x:59183 FRAG_IN error flags=0x45000031: bad fragment size
client01/188.40.x.x:59183 FRAG_IN error flags=0x45000044: spurrious FRAG_WHOLE flags
client01/188.40.x.x:59183 FRAG_IN error flags=0x45000043: FRAG_TEST not implemented
client01/188.40.x.x:59183 FRAG_IN error flags=0x4500004f: FRAG_TEST not implemented
client01/188.40.x.x:59183 Bad LZ4 decompression header byte: 90
client01/188.40.x.x:59183 FRAG_IN error flags=0x287f346b: FRAG_TEST not implemented
this happens on a win10 client, on an android one it's working smooth, on linux the connection is unstable but has "fast" connection speed (~60mbit/s)
the server is running on centos 8, with disabled selinux, i followed this tutorial for setting up the openvpn server:
https://www.osradar.com/how-to-install-openvpn-on-centos-8/
