OpenVPN Support Forum

Posted: **Sat Mar 05, 2022 3:10 pm**

Hi all,
I have an office in Australia and I live in central Europe.

These are my config (created using https://github.com/angristan/openvpn-install )

Server.conf

Code: Select all

port 1194
proto udp
dev tun
user nobody
group nogroup
persist-key
persist-tun
keepalive 10 120
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "redirect-gateway def1 bypass-dhcp"
dh none
ecdh-curve prime256v1
tls-crypt tls-crypt.key
crl-verify crl.pem
ca ca.crt
cert server_PMXMUQOWqd9gLbgc.crt
key server_PMXMUQOWqd9gLbgc.key
auth SHA256
cipher AES-128-GCM
ncp-ciphers AES-128-GCM
tls-server
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
client-config-dir /etc/openvpn/ccd
status /var/log/openvpn/status.log
verb 4
log-append /var/log/openvpn/openvpn.log

Client:

Code: Select all

client
proto udp
explicit-exit-notify
remote xxx.com 1194
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
verify-x509-name server_PMXMUQOWqd9gLbgc name
auth SHA256
auth-nocache
cipher AES-128-GCM
tls-client
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
ignore-unknown-option block-outside-dns
setenv opt block-outside-dns # Prevent Windows 10 DNS leak
verb 4
<ca>
-----BEGIN CERTIFICATE-----
....

Server-side the fixed line connection is good:

Code: Select all

Download:   108.69 Mbps (data used: 52.9 MB )                               
     Upload:    17.00 Mbps (data used: 10.4 MB )

But on the client side when it establishes the connection is not good at all:

Code: Select all

Download:   2.41 Mbps (data used: 52.9 MB )                               
     Upload:    671.02 Kbps (data used: 10.4 MB )

Do you have any suggestion?

Posted: **Sat Mar 05, 2022 8:39 pm**

Buy better internet.

Posted: **Sun Mar 06, 2022 3:56 pm**

TinCanTech wrote: ↑
Sat Mar 05, 2022 8:39 pm
Buy better internet.

Looks like a sloppy answer. Please elaborate more, I want to understand.
I was thinking maybe switching to a less secure but faster crypto algorithm... Or... I don't know, that's the reason why I asked

Posted: **Sun Mar 06, 2022 5:05 pm**

4n4l wrote: ↑
Sun Mar 06, 2022 3:56 pm
Looks like a sloppy answer

A sloppy answer to a sloppy question.

4n4l wrote: ↑
Sat Mar 05, 2022 3:10 pm
I have an office in Australia and I live in central Europe

If you pay for business class internet you will get better performance.

Otherwise, you get what you pay for.

Sure, you can drop your security level and that might give you a tiny performance boost.

What you should really do is establish a base line to compare your VPN against.

OpenVPN Support Forum

Boost performance of a long distance connection

Boost performance of a long distance connection

Re: Boost performance of a long distance connection

Re: Boost performance of a long distance connection

Re: Boost performance of a long distance connection