Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    OpenVPN server low upload throughput

    OpenVPN
    3
    6
    458
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      ElMacko last edited by

      I have created an openvpn server in pfsense which listens on port 9002, clients can connect fine and I have run tests using iperf3. Results are as follows:

      • OpenVPN Client as iperf client
      • ubuntu server on LAN as iperf server

      Bandwidth: ~25Mbit/s

      • OpenVPN Client as iperf server
      • ubuntu server on LAN as iperf client

      Bandwidth: ~700kbit/s

      Both ends have 100/100 internet from provider. I have also tested upload speed from the same ubuntu server using the following command:

      curl -s https://raw.githubusercontent.com/sivel/speedtest-cli/master/speedtest.py | python -

      Which shows an upload speed of ~97Mbit/s. This is another indication that the problem might be with the openvpn server. Hardware should not be a problem since the server is brand new, the processor only show around 3% load when running iperf tests. Worth noting is that I am running pfsense and the ubuntu server as virtual servers in vmware esxi 6.0. I am attaching my openvpn server config as images.

      pfsense version: 2.4.0-RELEASE
      ubuntu server version: 16.04

      What could be the cause of the low speeds for uploading data to connected openvpn clients? Thanks.
      ![Screen Shot 2017-12-09 at 18.24.11.png_thumb](/public/imported_attachments/1/Screen Shot 2017-12-09 at 18.24.11.png_thumb)
      ![Screen Shot 2017-12-09 at 18.24.11.png](/public/imported_attachments/1/Screen Shot 2017-12-09 at 18.24.11.png)
      ![Screen Shot 2017-12-09 at 18.24.04.png_thumb](/public/imported_attachments/1/Screen Shot 2017-12-09 at 18.24.04.png_thumb)
      ![Screen Shot 2017-12-09 at 18.24.04.png](/public/imported_attachments/1/Screen Shot 2017-12-09 at 18.24.04.png)
      ![Screen Shot 2017-12-09 at 18.23.57.png_thumb](/public/imported_attachments/1/Screen Shot 2017-12-09 at 18.23.57.png_thumb)
      ![Screen Shot 2017-12-09 at 18.23.57.png](/public/imported_attachments/1/Screen Shot 2017-12-09 at 18.23.57.png)
      ![Screen Shot 2017-12-09 at 18.23.49.png_thumb](/public/imported_attachments/1/Screen Shot 2017-12-09 at 18.23.49.png_thumb)
      ![Screen Shot 2017-12-09 at 18.23.49.png](/public/imported_attachments/1/Screen Shot 2017-12-09 at 18.23.49.png)
      ![Screen Shot 2017-12-09 at 18.23.36.png_thumb](/public/imported_attachments/1/Screen Shot 2017-12-09 at 18.23.36.png_thumb)
      ![Screen Shot 2017-12-09 at 18.23.36.png](/public/imported_attachments/1/Screen Shot 2017-12-09 at 18.23.36.png)
      ![Screen Shot 2017-12-09 at 18.23.22.png_thumb](/public/imported_attachments/1/Screen Shot 2017-12-09 at 18.23.22.png_thumb)
      ![Screen Shot 2017-12-09 at 18.23.22.png](/public/imported_attachments/1/Screen Shot 2017-12-09 at 18.23.22.png)
      ![Screen Shot 2017-12-09 at 18.23.10.png_thumb](/public/imported_attachments/1/Screen Shot 2017-12-09 at 18.23.10.png_thumb)
      ![Screen Shot 2017-12-09 at 18.23.10.png](/public/imported_attachments/1/Screen Shot 2017-12-09 at 18.23.10.png)

      1 Reply Last reply Reply Quote 0
      • E
        ElMacko last edited by

        bump

        1 Reply Last reply Reply Quote 0
        • johnpoz
          johnpoz LAYER 8 Global Moderator last edited by

          I would try the fast i/o option and play with your send/recv buffers while doing your testing  Does that help?

          1 Reply Last reply Reply Quote 0
          • K
            kejianshi last edited by

            You didn't say how far apart the vpns are in miles or kilometers or what sort of processor the two ends have.

            1 Reply Last reply Reply Quote 0
            • E
              ElMacko last edited by

              @kejianshi:

              You didn't say how far apart the vpns are in miles or kilometers or what sort of processor the two ends have.

              Both ends are in the same city in Sweden.

              pfsense is installed as a virtual machine on a Dell PowerEdge T20 server with an Intel Xeon E3-1225V3 3.2 GHz, I will check how many cores I have assigned the virtual machine when i get home later but I think it's one. The client connects using tunnelblick on a macbook pro with an Intel Core i5 2.4 GHz.

              Speed tests from server and client:

              server:
              Hosted by AllTele AB (Umea) [96.32 km]: 18.34 ms
              Testing download speed….............................................................................
              Download: 89.77 Mbit/s
              Testing upload speed................................................................................................
              Upload: 92.06 Mbit/s

              client:
              Hosted by NORDUnet A/S (Stockholm) [0.87 km]: 16.015 ms
              Testing download speed….............................................................................
              Download: 87.76 Mbit/s
              Testing upload speed................................................................................................
              Upload: 58.52 Mbit/s

              1 Reply Last reply Reply Quote 0
              • E
                ElMacko last edited by

                @johnpoz:

                I would try the fast i/o option and play with your send/recv buffers while doing your testing  Does that help?

                It got a little better when enabling fast i/o, It seemed like I got the best speed (~4 Mbit/s) with 2.00 MiB send/receive buffer. I still think I could expect higher speed than this no?

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post

                Products

                • Platform Overview
                • TNSR
                • pfSense
                • Appliances

                Services

                • Training
                • Professional Services

                Support

                • Subscription Plans
                • Contact Support
                • Product Lifecycle
                • Documentation

                News

                • Media Coverage
                • Press
                • Events

                Resources

                • Blog
                • FAQ
                • Find a Partner
                • Resource Library
                • Security Information

                Company

                • About Us
                • Careers
                • Partners
                • Contact Us
                • Legal
                Our Mission

                We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

                Subscribe to our Newsletter

                Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

                © 2021 Rubicon Communications, LLC | Privacy Policy