OpenVPN on Android vs. OpenVPN on iOS (iPad Pro)



  • HI,

    Bought an iPad Pro a couple of days ago, installed OpenVPN Connect app and ovpn file. It was able to connect to my pfSense OpenVPN server successfully. but the speed to the internet is EXTREMELY SLOWER, made the internet almost unusable. While at the same time using OpenVPN for Android, its way better to connect pfSense to the internet. Only difference I can see from the Openvpn server log is:

    Android(Samsung Note2): Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA

    iOS(iPad Pro): Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA

    Anyone has the same experience? Any idea how to improve the speed issue on iOS?  Thanks.


  • Rebel Alliance Developer Netgate

    Generally speaking any kind of issue of slowness that is hit and miss is more likely related to MTU/fragmentation.

    Though the OpenVPN connect app doesn't let you adjust anything, you could try editing the config before sending it to the device. There are a couple different config directives that can be used to adjust packet sizes, though I'm not sure which of them are supported on OpenVPN on iOS. You might want to check the OpenVPN.net forum for that.



  • @jimp:

    Generally speaking any kind of issue of slowness that is hit and miss is more likely related to MTU/fragmentation.

    Though the OpenVPN connect app doesn't let you adjust anything, you could try editing the config before sending it to the device. There are a couple different config directives that can be used to adjust packet sizes, though I'm not sure which of them are supported on OpenVPN on iOS. You might want to check the OpenVPN.net forum for that.

    Thanks much for the answer. I just found that for some web sites it works okay, but for some sites the speed was just very very slow. No idea why works for some but not for others. because of MTU/fragmentation?


  • Rebel Alliance Developer Netgate

    That's the most likely suspect at this point, I'd say.


Log in to reply