Asus Router, Rmerlin Firmware and OpenVPN options for best performance

[HairyA00]

Is your home upload speed also 200Mbps?

Upload is capped at 10mbps

 

[Adamm]

Upload is capped at 10mbps

Thats your issue, when connecting to your VPN Server, the server has to upload the data to your client, whereas the client downloads the data.

 

[HairyA00]

Thats your issue, when connecting to your VPN Server, the server has to upload the data to your client, whereas the client downloads the data.

Fair enough... residential cable customers in the US are basically stuck then.

 

[Makaveli]

Fair enough... residential cable customers in the US are basically stuck then.

Yup because of the Asymmetrical nature of current cable systems the poor upload speeds will make for a slow experience using the vpn server on the router.

 

[elorimer]

Asymmetrical nature of current cable systems

Yes, extorters vs extortees.

 

[doczenith1]

It is my understanding that the GCM ciphers are a little faster than the CBC's. Below is how I have my server configured and it seems to work well (Note that HMAC Authentication is built into the GCM cipher).

 

[outlaw78]

Don't forget your VPN download speed on your client is your upload speed on your VPN server. So if you get 200d/5u, when checking speeds on your VPN client, your download is only going to be 5.

 

[unclebuk]

Hello,
I have 500/500Mbps fiber service and the OpenVPN server i setup on the AC86U achieves only 65Mbps when I connect to my other ISP which is 1000/500Mbps fiber service.
If i connect to an OpenVPN service/server half way around the world I easily get 250Mbps.
What can I check to improve the OpenVPN server sppeds on the AC86U?

Thanks in advance.

 

[L&LD]

@unclebuk, please don't cross-post.

Please see my response in the other thread I've responded to already.

 

[brec]

I'd appreciate a pointer to an install procedure for an OpenVPN client -- no need for a server -- on my 68U running Merlin 384.18.

 

[L&LD]

@brec, go to OpenVPN Clients, import the OpenVPN config file for the server you're connecting to and done.

 

[unclebuk]

@unclebuk, please don't cross-post.

Please see my response in the other thread I've responded to already.

Ok, thanks.

 

[RMerlin]

@brec, go to OpenVPN Clients, import the OpenVPN config file for the server you're connecting to and done.

And also enter your username/password if your server requires them.

 

[brec]

And also enter your username/password if your server requires them.

It doesn't! But instead of thanking you and L&LD immediately for your replies, I thought I'd wait until I could say: it works! So: thanks!

I was a little concerned when, after seeing that it's working I clicked Logout on the 86U GUI and it took a long time -- a minute? -- with the browser drumming its fingers before the login page appeared. But the next logout was instant. I assumed that on the first one after setting up a VPN client it was putting all the new stuff away in various desk drawers.

The only minor puzzle -- not problem -- is that on my iPhone an attempt to browse ipleak.net (reports ip address, shows webRTC leaks) fails with an address not found DNS error. No such problem on my Mac. No problem on iPhone getting to other sites, including whatismyip.com.

 

[brec]

Could a shell script on my Mac invoke ssh to access the 86U and turn the OpenVPN client on or off? If so, could it also poll the state for a while until confirmation of mission accomplished?

 

[L&LD]

Anything is possible.

 

[brec]

OK, first hurdle cleared! Anyone want to help on step 2?

 

[brec]

I found the keys and certificates files in /jffs, but I haven't been able to find where the other parameters are stored. Being a newbie, I don't know where stuff might be stored other than in jffs. I am also wondering why the .ovpn file I supplied was pulled apart. And I'm wondering if I could just upload it to jffs and come up with a script containing 'openvpn --config /jffs/myclient.ovpn'

Edit: I guess the other place for parameter storage is nvram. But I haven't yet tried wading through it.

 

[brec]

Progress report: I found the individual settings in nvram. --Except, so far, for the Custom Configuration parameters displayed at the bottom of the VPN::VPN Client tab.

 

[Wycleff]

Im currently messing around with UDP and im wondering if this additional settings are still valid to add even if i have an MTU of 1492 and not 1500 ?

fragment 1400
mssfix
tun-mtu 64800