Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    APU4 - OpenVPN - Traffic above 50 M/Bit heavy paket loss

    OpenVPN
    2
    2
    216
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      Frosch1482 last edited by Frosch1482

      Hi,

      I´m running an APU4 with OpenVPN (AMD GX-412TC SOC CPU)
      Specific traffic is routed through the VPN tunnel (by device) especially to avoid geo-blocking

      I know that the CPU isn´t the most performant, but I´m encountering a really weired issue.

      As long as I have no load on the VPN, everything looks good.
      When I start downloading anything with around 5 MB / sec i start facing a packet loss (see screenshot 3%)

      ea93c747-7748-4b99-acd1-705e4a6eed36-image.png

      If I increase the download speed from 5 mb/sec to 10 mb/sec, I face a paket loss of arround 20% until the VPN tunnel goes offline.

      VPN is set up with UDP in IPv4, AES-256-GCM
      Following custom options:
      tls-client;
      remote-random;
      tun-mtu 1492;
      tun-mtu-extra 32;
      mssfix 1448;
      persist-key;
      persist-tun;
      reneg-sec 0;
      remote-cert-tls server;

      load average is obiosly pretty high around 1.5 or higher. Openvpn is using a lot of CPU. That is clear.

      Question: Anything I can do avoiding the packet loss? It is a pain that the VPN tunnel goes off and on.
      Only thing that came to my mind is a traffic limiter - but this sounds weird to me :)

      1 Reply Last reply Reply Quote 0
      • E
        emikaadeo last edited by

        I had the same issue with OpenVPN (pfSense 2.4.5-RELEASE-p1) and AMD GX-420CA SoC CPU.
        Downloading anything with speed higher than 200 Mb/s causes packet loss of over 20% until VPN_WAN Gateway goes offline.
        The best solution I've found is to use Traffic Shaper (not Limiter)
        I follow this guide and put 200 Mb/s as my download speed in step 6
        After that, packet loss stops at 3-5% when downloading with maximum speed of 200 Mb/s

        1 Reply Last reply Reply Quote 0
        • First post
          Last post