Openvpn site-to-site seems capped @ 10mbit
-
Hi everyone,
I am experiencing lately a drastic reduction of the speed to/from remote openvpn site. Seems like every transfer (from whichever protocol) between local and remote are capped @ 10mbit. If i try the same test without the ovpn connection speed goes up to 90mbit
Actually my configuration is as follow:
Remote1 (FR) 250mbit/250mbit conn -> Openvpn -> Local (IT) 100mbit/100Mbit
Remote2 (DE) 1gb/1gb conn -> Openvpn -> Local (IT) 100Mbit/100Mbit
Both ovpn connections are on AES-128-CBC.
Remote1 and Remote2 have pfsense running on VM over Proxmox and Local is running on alix board (AMD GX-412TC SOC 4 CPUs: 1 package(s) x 4 core(s) AES-NI CPU Crypto: Yes (active) )
I tried also to swap the alix board with a Xeon server but no luck.
Usually speed were around 50mbit each way.
All install are running pfsense 2.4.4-p2 and no traffic shaping configuration at all (neither isp capping the connection).Any suggestion where to look?
-
So you had a working setup with VPN speeds around 50MBit/s and without touching anything it's down to 10MBit/s?
Definitely sounds upstream/ISP to me. Not implicitly incident, maybe they capped some Ports or low QoS VPN traffic?
You are in TLS Authentication mode? Try TLS Encryption and Authentication.
Also try to change Port for OpenVPN, e.g. some real-time application port like SSH (22) for testing.
Should not be your actual problem but I'd go for AES-128-GCM or AES-256-GCM not CBC.-Rico
