@rico said in Improve OpenVPN throughput: @gsmornot I don't think GCM use multiple cores... With my SG-3100 the max in real world tests is around 83 MBit/s OpenVPN AES-256-GCM. But you can share your config if you want. :-) -Rico Nothing special in the config, just offering to reply with any detail asked for in my current settings. Looking, I thought it was multicore but I think what I want to say is capable of parallel processing. I am a bit more basic in my understanding. I tested the performance versus CBC and found it to be much better, maybe double, so I stuck with it. IPSec was much faster but I kept reading people say they would always pick OpenVPN first so I stuck with it. So far no issues. My main use is access through my firewall while mobile so I can make use of public wifi at times and even bigger for me block ad's with pfBlocker.

@chedxb Please try to isolate the issue and be more specific. And a net diagram of what you are trying to do would also help azure, ubuntu and containers are nice trendy technologies, but don't really add any usable information on the situation.

After upgrading the router and creating a new VPN server with the wizard all the needed settings were there. The VPN is now working and connecting correctly. Thanks very much for the help on this!

With IPsec, yes. With OpenVPN, no. OpenVPN shared key mode isn't compatible with GCM (IIRC it requires SSL/TLS)

Maybe describe exactly what you are trying to accomplish in detail.

Yeah new package available, 0.7_3 Now when you click you get the gui like you should.. Thanks jimp

ok thanks man, appreciate it.

You can check data usage per Firewall Rule. :-) -Rico

You should NOT give any IP Configuration to the assigned OpenVPN Inerface (check https://www.netgate.com/docs/pfsense/book/openvpn/assigning-openvpn-interfaces.html). Why don't you just hand out one separate pfSense local User for each of your real User? This will add more Security and you are able to give different access rights based on Firewall Rules. -Rico

Thanks for sharing gateway settings

I think I found a solution. From https://www.reddit.com/r/PFSENSE/comments/7or0bt/pia_vpn_leaking_ipv6/ System -> General Setup -> DNS Server Override (unchecked) System -> General Setup -> Disable DNS Forwarder (checked) Services -> DNS Resolver -> DNS Query Forwarding (checked) Reboot I am now posting on this forum while using my pfSense router and all seems good

Yeah, you need an additional phase 2 for the routing between the remote network and the OpenVPN tunnel subnet. So the phase 2 has to be added on both site of the IPSec tunnel, of course. In the OpenVPN server settings add the remote network 10.50.0.0/20 to the "IPv4 Local network/s".

Actually I don't have any problem with 6.7 (running Windows Server and Ubuntu Server VMs), seems also strange that problem is caused by vmware because it should affect also traffic from the Windows client that it's behind pfSense but runs VPN flawless without packet loss. I've followed all requirements and suggestions in order to virtualize pfSense on ESXi so everything it's already enabled (with VMXNET ethernet interfaces) and it's working fine since some years & upgrades (I think I've installed it when there was pfSense 2.1 and ESXi 5.5/6.0)

You have this firewall rule on your WAN interface : [image: 1537551394239-166422c1-9ef1-4195-b266-4e1289058c2f-image-resized.png] My 1194 is your 1200. Just for testing :if you make this firewall rule on WAN : [image: 1537551643036-1dde5799-c17c-4a72-a525-86796299fe66-image-resized.png] can you access the pfSense GUI from "Internet" ? Using https://myvpn.my-fqdn.tld or https://a.n.c.d ? If not : something is blocking between pfSense and the rest of Internet.

Ended up finding that Client Override needed to be enabled on the Server Side PFsense. Once we enabled this, everything started working.