Pages open for a very long time through openvpn

This forum is for admins who are looking to build or expand their OpenVPN setup.
Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
AntonEroxin
OpenVpn Newbie
Posts: 8
Joined: Tue Jul 28, 2020 11:15 am

Pages open for a very long time through openvpn

Post by AntonEroxin » Tue Jul 28, 2020 11:20 am

Hey. I'm having problems with windows.
Vpn connects correctly.
But sites and pages take a very long time to open.
The first jump in tracing also takes a very long time.
At the same time, the dns names themselves are resolved quickly. I checked this with the nslookup utility.
Ping is fast too.
I checked the vpn config on another windows machine and it works flawlessly, so I do not post the client and server config itself.
I also saw a similar problem at this link: https://forums.openvpn.net/viewtopic.php?t=23875
I've tried disabling ipv6 and reinstalling the tap adapter.
As it is written there. But that didn't solve my problem.
What advice can you do? I would be grateful for your help. :roll:
----------------------
server

port 443
proto tcp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
tls-server
tls-timeout 120
tls-auth /etc/openvpn/ta.key 0
cipher AES-256-CBC
auth SHA256
client-to-client
topology subnet
max-clients 5

push "dhcp-option DNS 8.8.8.8"
route 10.8.0.0 255.255.255.0

user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log /etc/openvpn/1.log
verb 4
mute 10
mssfix 1380
sndbuf 0
rcvbuf 0
#crl-verify crl.pem
explicit-exit-notify 0

--------------------
client

client
dev tun
proto tcp
# IP-адрес и порт сервера OpenVPN)
remote x.x.x.x 443
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\client.crt"
key "C:\\Program Files\\OpenVPN\\config\\client.key"
tls-auth "C:\\Program Files\\OpenVPN\\config\\ta.key" 1
remote-cert-tls server
cipher AES-256-CBC
auth SHA256
#Это еще одна защита, на этот раз от "man in the middle" атаки
ns-cert-type server
#comp-lzo
verb 3

---------------------
iptables

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o ens3 -j MASQUERADE

Maybe the problem is here?:
Image
Last edited by AntonEroxin on Wed Jul 29, 2020 12:24 am, edited 1 time in total.

AntonEroxin
OpenVpn Newbie
Posts: 8
Joined: Tue Jul 28, 2020 11:15 am

Re: Pages open for a very long time through openvpn

Post by AntonEroxin » Tue Jul 28, 2020 10:40 pm

How can the problem be identified?

User avatar
TinCanTech
OpenVPN Protagonist
Posts: 7929
Joined: Fri Jun 03, 2016 1:17 pm

Re: Pages open for a very long time through openvpn

Post by TinCanTech » Tue Jul 28, 2020 11:11 pm

See --block-outside-dns in the manual.

AntonEroxin
OpenVpn Newbie
Posts: 8
Joined: Tue Jul 28, 2020 11:15 am

Re: Pages open for a very long time through openvpn

Post by AntonEroxin » Wed Jul 29, 2020 5:39 pm

TinCanTech wrote:
Tue Jul 28, 2020 11:11 pm
See --block-outside-dns in the manual.
Please accept my huge gratitude! It really helped! Websites started to open very quickly.

User avatar
TinCanTech
OpenVPN Protagonist
Posts: 7929
Joined: Fri Jun 03, 2016 1:17 pm

Re: Pages open for a very long time through openvpn

Post by TinCanTech » Wed Jul 29, 2020 6:17 pm

AntonEroxin wrote:
Wed Jul 29, 2020 5:39 pm
TinCanTech wrote:
Tue Jul 28, 2020 11:11 pm
See --block-outside-dns in the manual.
Please accept my huge gratitude! It really helped! Websites started to open very quickly.
Thank you for gratitude 8-)

Post Reply