More than 2 openvpn clients?

[CaptainCarrot]

Hey Guys,

I'm using the merlin firmware on my RT-87U, I would love to run more than 2 OpenVPN clients simultaneously.

Is there any way to increase the number in the web interface to 3 or 4?

Alternatively can I do this by SSH somehow?

 

[RMerlin]

Hey Guys,

I'm using the merlin firmware on my RT-87U, I would love to run more than 2 OpenVPN clients simultaneously.

Is there any way to increase the number in the web interface to 3 or 4?

Alternatively can I do this by SSH somehow?

This is not a webui limitation, this is something limited throughout the whole firmware code.

You will quickly run out of nvram and CPU cycles by running too many instances. You might want to consider running these on a computer instead.

 

[XIII]

Will the router only run out of resources when actually handling connections, or also if multiple servers are configured, but idle?

Reason for asking: I have currently an OpenVPN server configured on port 1194, but on one of the locations I work that port is blocked, so I want a fallback to port 443 and I was thinking of implementing that by running a second server which is identically configured as the first server, except for the port number. In practice, at most one of these servers will handle connections at any point in time.

What do you advice?

 

[RMerlin]

All the stored key/certs will permanently take space in nvram, regardless of whether the instances are started or not.

CPU/RAM performance comes into play if the instances get started.

 

[XIII]

Ah, perhaps I'd better only use just one server on port 443 then (Even though I have read somewhere that performance will be less on port 443, compared to 1194. Unfortunately I can't remember why).

 

[RMerlin]

Ah, perhaps I'd better only use just one server on port 443 then (Even though I have read somewhere that performance will be less on port 443, compared to 1194. Unfortunately I can't remember why).

Port won't have any impact on performance, unless there is some sketchy traffic shaping at work (for instance, an ISP who would decide to throttle encrypted traffic on non-standard ports).

 

[XIII]

Thanks. I'm going to try 1 server with port 443 only then.