Keep getting dropped on Openvpn?

[Find the Door]

Vpn provider: ipvanish

Connection method: hardwired (gateway)

Speed without vpn: 170 down, 25 up

Speed with: 35 down (avg), 10 up



I keep getting randomly disconnected in games of Madden. Is there anything here that would indicate a drop and why?

Also how do I change the cipher value to a lower bit? I'd rather have 128 being that it won't hog as much bandwidth.

Thanks!

Aug 17 03:12:57 openvpn[4146]: /usr/sbin/ip route add 0.0.0.0/1 via 172.20.16.1

Aug 17 03:12:57 openvpn[4146]: /usr/sbin/ip route add 128.0.0.0/1 via 172.20.16.1

Aug 17 03:12:57 openvpn-routing: Skipping, client 1 not in routing policy mode

Aug 17 03:12:57 openvpn[4146]: Initialization Sequence Completed

Aug 17 03:30:27 dnsmasq-dhcp[4193]: DHCPDISCOVER(br0) 192.168.1.50 00:d9:d1:d7:d0:bf

Aug 17 03:30:27 dnsmasq-dhcp[4193]: DHCPOFFER(br0) 192.168.1.50 00:d9:d1:d7:d0:bf

Aug 17 03:30:27 dnsmasq-dhcp[4193]: DHCPREQUEST(br0) 192.168.1.50 00:d9:d1:d7:d0:bf

Aug 17 03:30:27 dnsmasq-dhcp[4193]: DHCPACK(br0) 192.168.1.50 00:d9:d1:d7:d0:bf

Aug 17 04:12:53 openvpn[4146]: TLS: soft reset sec=0 bytes=409759404/0 pkts=545163/0

Aug 17 04:12:53 openvpn[4146]: VERIFY OK: depth=1, /C=US/ST=FL/L=Winter_Park/O=IPVanish/OU=IPVanish_VPN/CN=IPVanish_CA/emailAddress=support@ipvanish.com

Aug 17 04:12:53 openvpn[4146]: VERIFY X509NAME OK: /C=US/ST=FL/L=Winter_Park/O=IPVanish/OU=IPVanish_VPN/CN=sea-a05.ipvanish.com/emailAddress=support@ipvanish.com

Aug 17 04:12:53 openvpn[4146]: VERIFY OK: depth=0, /C=US/ST=FL/L=Winter_Park/O=IPVanish/OU=IPVanish_VPN/CN=sea-a05.ipvanish.com/emailAddress=support@ipvanish.com

Aug 17 04:12:53 openvpn[4146]: Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

Aug 17 04:12:53 openvpn[4146]: Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication

Aug 17 04:12:53 openvpn[4146]: Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

Aug 17 04:12:53 openvpn[4146]: Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication

Aug 17 04:12:53 openvpn[4146]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA

 

[Find the Door]

Does the soft reset indicate anything? That's about the time the drop occurred.

 

[Calisro]

Whats your openvpn config look like?

 

[Find the Door]

Whats your openvpn config look like?

At work at the moment, will post when I get home.

 

[Zirescu]

Likely your provider is requiring that you authenticate every hour as does mine. You won't be able to change the encryption to 128 as that's specified by the server. If you have different choices for servers you can look through the config files to see if any of the are using 128 and then use that server.

 

[Calisro]

That shouldn't manifest in a disconnect. It should be pretty transparent as long as he hasn't disabled caching of auth. That's why I wanted to see his config.

Might be able to increase this though as long as they havent enforced it server side. reneg-sec=<a large number>

 

[Find the Door]

I set reneg-sec to 0 the other night but that just caused it to happen about three hours later. Didn't have any drops last night so dunno...

 

[Find the Door]

 

[Calisro]

lools ok... btw you can remove reneg-sec and
change tls renegotion time to 0. its the same config... Shouldnt affect anything though.

You may want to increase verb. That may give better log.

 

[Find the Door]

What does verb do? How much should I increase it? I continously see it listed at 3 everywhere?

 

[Calisro]

will just give more debug in logs.. maybe verb 5? its at 3 by default.

 

[Find the Door]

will just give more debug in logs.. maybe verb 5? its at 3 by default.

Switched it. Not sure what it does lol


Quesiton, so by being behind a vpn I'll be unable to be knocked offline via ip booters on Madden? They use sniffers then flood my connection - a vpn will prevent that right?

 

[Find the Door]

Question, could I roll my own VPN server with one of these?

https://www.digitalocean.com/pricing/

Would that be less overhead being that these servers are tier 1, and are lightning fast?

Would I experience little if any bandwidth loss via this method. My cousin is a networking major and we're thinking of tackling it together.

 

[Calisro]

Question, could I roll my own VPN server with one of these?

https://www.digitalocean.com/pricing/

Would that be less overhead being that these servers are tier 1, and are lightning fast?

Would I experience little if any bandwidth loss via this method. My cousin is a networking major and we're thinking of tackling it together.

Its not hard to create your own VPN. Just install openvpn on a server.... so yes, but lots of these paid hosting servers have bandwidth limitations or significant costs involved for data transfers.

So yea, you can. You'd need to check with them on bandwidth limits/costs and CPU limits/costs.

 

[Find the Door]

Its not hard to create your own VPN. Just install openvpn on a server.... so yes, but lots of these paid hosting servers have bandwidth limitations or significant costs involved for data transfers.

So yea, you can. You'd need to check with them on bandwidth limits/costs and CPU limits/costs.

I've tried and tried but Linux command is just over my head. Every guide seems to have a missing step it seems.

I'd much rather create my own vpn but I'm having no luck lol.