OpenVPN Speed Issue

[ronan_zj]

I think I eventually find out the reason why I got slow OpenVPN connection. I got slow OpenVPN connection if I enable "Traffic Analyzer - Statistic", the speedtest was like 8 Mb/s. when I turn off the "Traffic Analyzer - Statistic", I could get full speed at 20Mb/s. I guess the AC-68R CPU is not powerful enough.

 

[sfx2000]

some tips from OpenVPN - some of these might be useful - ones that have big benefit are the MTU size on the TUN interface (feeds more data into OpenSSL) and the ciphering along with turning off fragmentation and disabling OpenVPN's TCP Max Segment Size limiter (mssfix).

If one disables ciphering all together, it really can take a lot of load off the cores, and you should get fairly good speed - which again, as I mentioned earlier, if one is just using VPN to place-shift media access, you should be fine..

https://community.openvpn.net/openvpn/wiki/Gigabit_Networks_Linux

 

[MoonDogg]

With only one device of concern, why not just run the OpenVPN client on that machine...and forget about any rules in the router.

Because the device although possible to setup OpenVPN it is not supported nor easy. It was easier to set up on the router.

Its running OpenElec Kodi. I would also like to just set it on the router and let everything be across the VPN but it is just not feasible yet.

 

[MediaMan09]

I think I eventually find out the reason why I got slow OpenVPN connection. I got slow OpenVPN connection if I enable "Traffic Analyzer - Statistic", the speedtest was like 8 Mb/s. when I turn off the "Traffic Analyzer - Statistic", I could get full speed at 20Mb/s. I guess the AC-68R CPU is not powerful enough.

Hmm, Traffic Analyzer-Statistic was already off by default, so I guess it wont help me!

 

[MediaMan09]

some tips from OpenVPN - some of these might be useful - ones that have big benefit are the MTU size on the TUN interface (feeds more data into OpenSSL) and the ciphering along with turning off fragmentation and disabling OpenVPN's TCP Max Segment Size limiter (mssfix).

If one disables ciphering all together, it really can take a lot of load off the cores, and you should get fairly good speed - which again, as I mentioned earlier, if one is just using VPN to place-shift media access, you should be fine..

https://community.openvpn.net/openvpn/wiki/Gigabit_Networks_Linux

Thanks for those tips! On the router pages, I see where MTU settings and disbling ciphering are, but where are rest, eg turning off fragmentation, disabling TCP Max Segment Size?