It's my first post here, so I'd first like to thanks the OpenVPN team for providing us such a great tool.
Next, my problems. I'm currently running a VPN with friends to be able to run LAN games over the VPN (in bridge mode). Everything works, except two annoying problems:
1. Broadcasting
I'm trying to make a bullet proof config, so people can use transparently the VPN or the local network; currently, users have to change their interfaces order when using the LAN or VPN. That means you can't see games running on the VPN when your local NIC is the main NIC, and vice-versa (this is mostly a broadcast / multicast problem I think).
I tried to use the Windows feature "Network Bridging" to enable broadcasting on both networks, but it seems that it breaks the OpenVPN connection (the status.log from server shows multiple routes for a computer, with each time a different MAC address).
I'm maybe doing something wrong within the configuration. Is there a way to do such a thing?
Note: the VPN server is mostly on a slow DSL Line (512k/1Mbps): I don't want to route all traffic through the VPN, as in local, people will exchange files that will take a lot of time to transfer if i'm using exclusively the VPN link.
2. Quake 3 based games lag
I don't have a clue about it; Quake based games seems to lag when submitting a lot of actions; I first suspected packet fragmentation (hence the mssfix and fragment), or VPN server slowness, but I wasn't able to fix it.
Here is my test configuration:
Server:
Code: Select all
fragment 1412
mssfix 1412
sndbuf 2048
rcvbuf 2048
port 1194
proto udp
dev tap
ifconfig 192.168.2.1 255.255.255.0
ca /etc/openvpn/conf.d/keys/ca.crt
cert /etc/openvpn/conf.d/keys/server.crt
dh /etc/openvpn/conf.d/keys/dh1024.pem
ifconfig-pool-persist /var/log/openvpn/ip_pool.log
server-bridge 192.168.2.1 255.255.255.0 192.168.2.2 192.168.2.254
client-to-client
keepalive 10 120
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn/status.log
verb 3Code: Select all
mute-replay-warnings
fragment 1412
mssfix 1412
sndbuf 2048
rcvbuf 2048
client
dev tap
proto udp
remote 1.2.3.4 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
verb 3