How to improve performance
Posted: Mon Jun 29, 2009 4:25 pm
I have a bridge vpn server. 3 or 4 client server is connected with this server. Configure file is as follows. How I can improve VPN performance. Did I miss any configure option.
server.conf
----------
local x.x.x.a
port 1194
proto udp
dev tap0
server-bridge x.x.x.a 255.255.255.240 x.x.x.b x.x.x.i
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/ovpnsrv1.crt
key /etc/openvpn/keys/ovpnsrv1.key
dh /etc/openvpn/keys/dh1024.pem
duplicate-cn
keepalive 10 120
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 3
client.conf
-----------
tls-client
local y.y.y.y
port 1194
dev tap0
proto udp
remote x.x.x.a 1194
resolv-retry infinite
keepalive 10 120
user nobody
group nobody
persist-key
persist-tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/client3.crt
key /etc/openvpn/keys/client3.key
verb 3
server.conf
----------
local x.x.x.a
port 1194
proto udp
dev tap0
server-bridge x.x.x.a 255.255.255.240 x.x.x.b x.x.x.i
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/ovpnsrv1.crt
key /etc/openvpn/keys/ovpnsrv1.key
dh /etc/openvpn/keys/dh1024.pem
duplicate-cn
keepalive 10 120
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 3
client.conf
-----------
tls-client
local y.y.y.y
port 1194
dev tap0
proto udp
remote x.x.x.a 1194
resolv-retry infinite
keepalive 10 120
user nobody
group nobody
persist-key
persist-tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/client3.crt
key /etc/openvpn/keys/client3.key
verb 3