Real limits for max users is better TUN or TAP

[mytrash]

Hello,

we are preparing VPN server where will be approximately 600 users connected at the same time. Does anybody have some tests if is TUN or TAP better for this solution and how much users can be connected at the same time to the vpn server. We will use VPS with 1 CPU, 1 GB ram. Only OpenVpn will be installed on this computer.

Thank you for your ideas.
Best Regards
Myth

[krzee]

a) you must use tun when building a vpn of that size, google the term "broadcast storm"

b) you will kill that cpu WAY before 600 users, i have heard of people having problems around 200 users with stronger hardware.
no i cant tell you the hardware which you will need, or how many users you will get from your setup, but i do know you wont get 600 users on that.

[krzee]

you will likely need to break the load across multiple servers

[mytrash]

Thank you for your answer. Do you think that another type of vpn can increase number of users which can be connected to this vpn - computer (in example PPTP, L2TP,...) or the limit will be approximately same?

Myth

[krzee]

the limiting factor is just openvpn itself, it is monolithic for now (this will change in openvpn 3).
changing the vpn will change the limits, although i cant tell you what they will be, or if they will be higher (i dont use the other ones) one think i can tell you is that openvpn is better as far as security goes.