Very low speed on OpenVPN

JMartinelli

I'm getting close to 900 Mbps speed for D/U without VPN. However, when OpenVPN is enabled on the Pfsense router, I'm only getting around 50 Mbps D/U. What could the reason be?

@jmartinelli, Pfsense Is Clint Or OpenVPN Server?

don't forget, that your side and side speed must be 900Mbps

JMartinelli

@silence OpenVPN server

p.dang

Is it a netgate box or diy? What the spec on the pfsense box?

@jmartinelli,
So before using the OPENNVPN It has 900 Mbps And when it connects it only has 50Mbps (can you test your speed on the pfsense side too?

Example: I have 100 Mbps and my vpn client has 500 Mbps When it connects to my pfsense via OPENVPN (And Measures its speed it has a maximum of 100 Mbps because obviously it is the maximum that I can offer you.

now do you understand me?

JMartinelli

@silence I do understand - on my home network with no VPN, I'm getting 400/22 for D/U. When I connect to the VPN at work I'm getting 50 max. The ISP line at work is 1 GB D/U - I'm thinking that the issue is with the OpenVPN config on Pfsense - below is the config file any issues here?

dev tun
persist-tun
persist-key
cipher AES-256-CBC
ncp-disable
auth SHA256
tls-client
client
resolv-retry infinite
remote xx.xx.xx.xx 11940 udp4
lport 0
comp-lzo no
verify-x509-name "pfsense-vpn.mycorp.com" name
auth-user-pass
remote-cert-tls server
reneg-sec 0

@jmartinelli 1GB/1GB ? OR 1GB/50 Mbps ?

JMartinelli

@silence The Line is 1GB/1GB business line

@jmartinelli said in Very low speed on OpenVPN:

e

JMartinelli

@silence how much improvement would that do to the throughput?

@jmartinelli said in Very low speed on OpenVPN:

how much improvement would that do to the throughput?

not much but it improves.

If you really want speed, try wireguard

JMartinelli

@silence I thought that wiregard was dropped from pfsense support (i.e; no longer supported)

@jmartinelli said in Very low speed on OpenVPN:

I thought that wiregard was dropped from pfsense support (i.e; no longer supported)

EXPERIMENTAL