Openvpn on Linksys LRT224 Router is very slow

simone.fil

Good morning.
First let me introduce myself, I'm Simone and I'm new to the VPN world. I hope I have placed my question in the correct section. I need to connect to my internal office network when I'm out of it from my laptop, and thanks to the help of a Linksys forum user, I configured my LRT224 router with an OpenVPN configuration like this:
l you need to do is enable the LRT OpenVPN Server with default settings changing the below:
Full Tunnel
Certificate * lines
Save
Create a OpenVPN Client Profile:

Server is your ISP Public IP Address
Username
Password
Certificate * lines
Save
Export OpenVPN ovpn file for import into OpenVPN Client

Well, the VPN works correctly and by activating the connection from the OpenVpn software installed on my notebook I browse as if I were in my office network seeing the local devices.
A problem has arisen: with the VPN connected I have a speed of 0.5mbps in download and upload and a ping of about 500ms. While both of my connections have speeds of around 30Mbps with 30ms ping.
Why is this slowdown so drastic? On the linksys forum they told me this is "normal" with openvpn and advised me to use IPsec VPN. Can you confirm me? Isn't there some way to get more speed and lower ping?
Thanks a lot to everyone for help and sorry for my questions maybe "trivial" but I'm a neophyte about it.

Best Regards
Simone

TinCanTech

Try taking Linksys out of your equation by running openvpn on a real computer.

simone.fil

TinCanTech wrote Try taking Linksys out of your equation by running openvpn on a real computer.

Thank you so much for your answer. I have read some guides how to install Open VPN Server on a Windows or Linux PC but that it is a cumbersome procedure :shock: , so I started from the simple; I installed OpenVPN server on my Synology NAS in five minutes, which was really simple and now the connection no longer has crazy ping and latency. The transfer speed via SMB is around 2.5Mbps, which is great for my needs. The problem now is that even if I see all my network devices in the office, my navigation does not assume the Public IP of my office network. In other words, with the old VPN server (Linksys LRT224) when I was connected to the VPN I assumed the public IP of the network in the office, now with the new server also connected to the VPN I assume my public IP of the remote connection. It is a small inconvenience, but it could become a problem in the future if I had to remotely access devices that only authorize access to the Public IP of my corporate network.

Anyone use openVPN Server on Synology DSM? could you explain to me why my connection, despite being in VPN and working in web browsing, does not assume the Public IP of the VPN Server network?
Thanks a lot to everyone.

TinCanTech

Need to see your config and/or logs.

Try getting a client log with --verb 4. See the manual for --verb

simone.fil

TinCanTech wrote Need to see your config and/or logs.

Try getting a client log with --verb 4. See the manual for --verb

Hello. Thanks for your super fast response. I hope this is the log you are talking about. In the LOG I have omitted the first sixteen bits of my corporate public IP with asterisks for privacy.

Thu Oct 29 01:29:48 2020 TUN CONFIRM
Thu Oct 29 01:30:00 2020 remove bypass route (event)
netsh interface ip delete route ***.***.17.157/32 5 192.168.3.75 store=active
OK.

Thu Oct 29 01:30:01 2020 TUN CLOSE (event)
netsh interface ip delete address 11 10.8.0.6 gateway=all store=active

netsh interface ipv6 delete route 2000::/4 interface=1 store=active
OK.

netsh interface ipv6 delete route 3000::/4 interface=1 store=active
OK.

netsh interface ipv6 delete route fc00::/7 interface=1 store=active
OK.

netsh interface ip delete route 192.168.3.0/24 11 10.8.0.5 store=active
OK.

netsh interface ip delete route 10.8.0.0/24 11 10.8.0.5 store=active
OK.

netsh interface ip delete route 10.8.0.1/32 11 10.8.0.5 store=active
OK.

ipconfig /flushdns

Configurazione IP di Windows

Cache del resolver DNS svuotata.
Thu Oct 29 01:31:40 2020 connection from C:\Program Files\OpenVPN Connect\OpenVPNConnect.exe
Thu Oct 29 01:31:40 2020 HTTP request received from NAMED_PIPE
HTTP Request
method=POST
uri=/add-bypass-route
version=1/1
[0] Host=\\.\pipe\agent_ovpnconnect
[1] Content-Type=application/json
[2] Content-Length=47
[3] Accept=*/*

Thu Oct 29 01:31:44 2020 connection from C:\Program Files\OpenVPN Connect\OpenVPNConnect.exe
Thu Oct 29 01:31:44 2020 HTTP request received from NAMED_PIPE
HTTP Request
method=POST
uri=/tun-setup
version=1/1
[0] Host=\\.\pipe\agent_ovpnconnect
[1] Content-Type=application/json
[2] Content-Length=1144
[3] Accept=*/*

Thu Oct 29 01:31:44 2020 proxy_auto_config_url 
Thu Oct 29 01:31:45 2020 TUN SETUP
TAP ADAPTERS:
guid='{81A6922C-6C80-4477-B853-91282D1483F3}' index=11 name='Connessione alla rete locale (LAN)'
Open TAP device "Connessione alla rete locale (LAN)" PATH="\\.\Global\{81A6922C-6C80-4477-B853-91282D1483F3}.tap" SUCCEEDED
TAP-Windows Driver Version 9.24
ActionDeleteAllRoutesOnInterface iface_index=11
netsh interface ip set interface 11 metric=1
OK.
netsh interface ip set address 11 static 10.8.0.6 255.255.255.252 gateway=10.8.0.5 store=active
netsh interface ipv6 add route 2000::/4 interface=1 store=active
OK.
netsh interface ipv6 add route 3000::/4 interface=1 store=active
OK.
netsh interface ipv6 add route fc00::/7 interface=1 store=active
OK.
netsh interface ip add route 192.168.3.0/24 11 10.8.0.5 store=active
OK.
netsh interface ip add route 10.8.0.0/24 11 10.8.0.5 store=active
OK.
netsh interface ip add route 10.8.0.1/32 11 10.8.0.5 store=active
OK.

ipconfig /flushdns
Configurazione IP di Windows
Cache del resolver DNS svuotata.
Thu Oct 29 01:31:45 2020 TUN CONFIRM

simone.fil

Reading information on the internet, I opened the VPNconfig.ovpn file and among other things I found this:
# If redirect-gateway is enabled, the client will redirect it's
# default network gateway through the VPN.
# It means the VPN connection will firstly connect to the VPN Server
# and then to the internet.
# (Please refer to the manual of OpenVPN for more information.)

# redirect-gateway def1
I think it may have something to do with my problem, but I don't know what to change and where to change it.

TinCanTech

It looks like you are using the "redirect-gateway" option. So disable it.

simone.fil

TinCanTech wrote It looks like you are using the "redirect-gateway" option. So disable it.

Thank you. At least I have identified the problem. It's an option that I need to enable from OpenVPN servers right? Or as a Client?
In case how do I enable? do I need to use SSH? OpenVPN is currently installed on Synology's DiskStation Manager (DSM).
Thanks so much for your invaluable help.
Have a nice day