Quantcast
Viewing all articles
Browse latest Browse all 20028

OpenVPN site-to-site tunnel - ERLite to ERLite - best performance settings?

Hi guys,

After years of struggles with various ipsec tunnels, I switched to an OpenVPN site-to-site tunnel between two of my sites and it came online immediately and worked exactly as expected. It's great!

 

With that said, the tunnel speed is not quite what I am expecting so I'm looking for ways to optimize my config. 

 

Both sites are located in the downtown Chicagoland area, where network speeds are higher than expected.

SITE A - Comcast - 150mbps down / 20mbps up (Actual results = 180 mbps down / 24 mbps up)

SITE B - Comcast - 75 mbps down / 10mbps up (Actual results = 90 mbps down / 12 mbps up)

 

 

Yet, transferring files from site A to site B only yields max of 9mbps. Why is it not closer to 20 mbps? There is no other network activity. Is this due to the OpenVPN configuration?

 

Site A config:

    openvpn vtun1 {
        description "Site A Tunnel"
        local-address 10.xx.xx.2 {
        }
        local-port 1195
        mode site-to-site
        openvpn-option --float
        openvpn-option "--ping 10"
        openvpn-option "--ping-restart 20"
        openvpn-option --ping-timer-rem
        openvpn-option --persist-tun
        openvpn-option --persist-key
        openvpn-option "--user nobody"
        openvpn-option "--group nogroup"
        remote-address 10.xx.xx.1
        remote-host site-b.dyndns.org
        remote-port 1195
        shared-secret-key-file /config/auth/secret
    }

Site B config:

    openvpn vtun1 {
        description "Site B Tunnel"
        local-address 10.xx.xx.1 {
        }
        local-port 1195
        mode site-to-site
        openvpn-option --float
        openvpn-option "--ping 10"
        openvpn-option "--ping-restart 20"
        openvpn-option --ping-timer-rem
        openvpn-option --persist-tun
        openvpn-option --persist-key
        openvpn-option "--user nobody"
        openvpn-option "--group nogroup"
        remote-address 10.xx.xx.2
        remote-host site-a.dyndns.org
        remote-port 1195
        shared-secret-key-file /config/auth/secret
    }

What settings can be changed to make the host-host transfers faster while maintaing a reasonable level of encryption?

 

I am not specifying the encryption because I believe the OpenVPN defaults are used if nothing is specified.

 

Thanks

Bob

 

 


Viewing all articles
Browse latest Browse all 20028

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>