ubuntu openvpn interface tap using eth (LAN to LAN)

[hank1]

Hello, this is openvpn 2.4.12 & ubuntu 20.04 user.

Since I wanted to know how much performance degradation is there for applying vpn, I checked with tun using wifi.
But it was too affected by wifi quality.
So, now I am trying to compare delay with / without openvpn using ethernet.

I was following the ethernet-bridging doc. - https://openvpn.net/community-resources ... -bridging/

I modified /etc/openvpn/server/server.conf & /usr/share/doc/openvpn/examples/sample-scripts/bridge-start like below

Code: Select all

local 192.168.10.41
port 1194
proto udp
dev tap
ca ca.crt
cert server.crt
key server.key
dh dh.pem
auth SHA512
tls-crypt tc.key
topology subnet
;server 10.8.0.0 255.255.255.0
server-bridge 192.168.10.41 255.255.255.0 192.168.10.42 192.168.10.255
push "redirect-gateway def1 bypass-dhcp"
ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 168.126.63.1"
push "dhcp-option DNS 168.126.63.2"
push "block-outside-dns"
keepalive 10 120
user nobody
group nogroup
persist-key
persist-tun
verb 3
crl-verify crl.pem
explicit-exit-notify

Code: Select all

#!/bin/sh

#################################
# Set up Ethernet bridge on Linux
# Requires: bridge-utils
#################################

# Define Bridge Interface
br="br0"

# Define list of TAP interfaces to be bridged,
# for example tap="tap0 tap1 tap2".
tap="tap0"
tap_ip="10.8.0.1"
tap_netmask="255.255.255.0"
tap_broadcast="10.8.0.255"

# Define physical ethernet interface to be bridged
# with TAP interface(s) above.
# eth="eth0"
# eth_ip="192.168.10.41"
# eth_netmask="255.255.255.0"
# eth_broadcast="192.168.10.255"

for t in $tap; do
    openvpn --mktun --dev $t
done

brctl addbr $br
brctl addif $br $eth

for t in $tap; do
    brctl addif $br $t
done

for t in $tap; do
    ifconfig $t 0.0.0.0 promisc up
done

ifconfig $eth 0.0.0.0 promisc up

ifconfig $br $eth_ip netmask $eth_netmask broadcast $eth_broadcast

Q. What is wrong with my configuration? Of course, I did rerun bridge-start and restart openvpn.

p.s. After starting openvpn with ./openvpn-install.sh, it automatically sets up with tun0. But I want to set up with tap and assign tap as a 10.8.0.1.