aazkan
Hi,
First time on the forum.
I have this problem that's bugging me and I couldn't figure out.
I have about 100++ or so openvpn clients connecting to an tcp 1194 Openvpn server. There are 3 clients I notice that seems to be very slow in establishing connection to my Openvpn server. It takes the client approx 10 - 25 mins to bring up the tunnel on it's end.
These 3 clients are behind a Satellite uplink somewhere in Australia. The ISP that provides us the Sat uplink has been helpful to QOS and allows unrestricted/unfiltered connection to my Openvpn server. The Sat uplink is about 1Mbits but most likely not symmetrical.
These 3 clients are running of a CentOS 4.9 32bits.
Nmap/telnet/nc from these 3 clients shows port is opened and accessible.
Tcpdump on both end, server and clients show TCP RST approx every 8-10sec, being sent from client side but eventually it will connect.
Has anyone seen anything like this before?
maikcat
are you aware of the latencies that sat links usually have?
DSL links usually have 20ms..
sat usually have over 700ms... 😉
Michael.
aazkan
It's about 700msec - 900msec on a good day.
I guessing there a firewall or router upstream doing NAT overload that looses it connection tracking but I just couldnt prove it 100% yet.
I'm drawing comparison to when connecting the clients to a nearer UDP openvpn (in AU), the udp tunnel gets connected under a minute, two mins the most.
Had a long night with the ISP engineer last night but we're nowhere near figuring this out.
