Hi,
I am using OpenVPN to connect a Windows server to an IPv6 network using the TAP interface. I disabled IPv4 on the TAP interface. The only traffic going though OpenVPN is just IPv6 traffic.
What I want to inquire about is how to reduce the resource and packet overhead of OpenVPN to a minimum. The only security I need is user authentication to prevent anyone but my Windows server from connecting to this OpenVPN server. I am using the x509 certificates to achieve this for now.
I disabled both auth and cipher to try and reduce the overhead.
What I am concerned about is the "auth none" line. Does disabling auth also disable the user authentication using the x509 certificates?
Also, are there any other options I can use to further reduce the CPU and packet overhead? Like I said, the only security I need is just user authentication.
This is the script I have on my server so far.
mode server
tls-server
local xxx.xxx.xxx.xxx
port 5766
proto udp
dev tap3
ca /root/openvpn/keys/ca.crt
cert /root/openvpn/keys/server.crt
key /root/openvpn/keys/server.key
dh /root/openvpn/keys/dh2048.pem
client-to-client // Is this layer 2 or layer 3? Will IPv6 work with this?
tls-auth ./keys/ta.key 0
cipher none
auth none
persist-key
persist-tun
status openvpn-status.log
log openvpn.log
verb 3
mute 20
comp-lzo no //Says on log LZO compression initialized, not sure if it is really disabled.
crl-verify /root/openvpn/keys/kcrl.pem
mlock
mssfix
nice -5
daemon
tun-mtu 1500
keepalive 1 8
What do the values on the "Channel MTU parms" line mean by the way? Didn't find much on this.
Would no-iv and no-replay help performance?
Thanks
