L&LD
Part of the Furniture
http://www.snbforums.com/threads/my-openvpn-configuration.13917/
The above thread got me interested in trying to optimize some settings for a customer in their OpenVPN configuration (RT-AC68U as an OpenVPN client to an RT-AC66U as an OpenVPN server) to get the fastest performance over the VPN connection.
They are using RDP to connect to the RT-AC66U's attached computers and in this type of use, it is fast (enough).
But they are also using SMB (\\192.168.1.154) to share files and doing this, the maximum file copy (either way) seems to be capped at 355KB/s. The ISP speeds on both ends are 25d/5u Mbps and can peak at 30d/8u Mbps on a good day.
I have already told them that they really should upgrade the RT-AC66U to at least an RT-AC68U. Better yet, upgrade both routers to the higher clocked processor models available (RT-AC1900P, RT-AC3100, RT-AC5300, RT-AC88U).
Is there any specific settings for the Digest Auth, Encryption Cipher and Compression settings that will still have them secure but give them a little extra speed?
Is it worth to play with the 'tun-mtu xxxx' setting to optimize the MTU of the VPN? Where would this setting be applied in the gui today? Do both the server and the client need it specified (and then both routers rebooted) for it to take effect? Or, will simply turning the server and client on and off be enough to test different configurations?
Looking forward to a discussion of these parameters and how they will affect the performance.
The above thread got me interested in trying to optimize some settings for a customer in their OpenVPN configuration (RT-AC68U as an OpenVPN client to an RT-AC66U as an OpenVPN server) to get the fastest performance over the VPN connection.
They are using RDP to connect to the RT-AC66U's attached computers and in this type of use, it is fast (enough).
But they are also using SMB (\\192.168.1.154) to share files and doing this, the maximum file copy (either way) seems to be capped at 355KB/s. The ISP speeds on both ends are 25d/5u Mbps and can peak at 30d/8u Mbps on a good day.
I have already told them that they really should upgrade the RT-AC66U to at least an RT-AC68U. Better yet, upgrade both routers to the higher clocked processor models available (RT-AC1900P, RT-AC3100, RT-AC5300, RT-AC88U).
Is there any specific settings for the Digest Auth, Encryption Cipher and Compression settings that will still have them secure but give them a little extra speed?
Is it worth to play with the 'tun-mtu xxxx' setting to optimize the MTU of the VPN? Where would this setting be applied in the gui today? Do both the server and the client need it specified (and then both routers rebooted) for it to take effect? Or, will simply turning the server and client on and off be enough to test different configurations?
Looking forward to a discussion of these parameters and how they will affect the performance.