Re: [Openvpn-users] Performance problem

[Jon Bendtsen <jon.bendtsen@xxxxxxxxxx>]

Den torsdag 30.mar kl. 22:00 skrev Andre Tann:

> Hello everyone.
>
> I have just set up my open vpn tunnel successfully. I can reach all
> the LAN machines from the outside. The firewall forwards port 1194
> to the open vpn server, and this server routes the traffic from out
> of the vpn tunnel into the lan.
>
> Alternatively, I can access the LAN also through an ipsec tunnel. In
> this case, the firewall (=sonicwall) itself does all the vpn stuff,
> and on the notebook I use VPNTracker as the client. I want to
> replace this ipsec construction with open vpn.
>
> Now there is a performance problem: inside the LAN is a database
> server running, and on my notebook the database client is
> installed.
> It now takes about 40 seconds to fire up the database client when
> being connected through ipsec.
> But it takes more than three minutes to start the database client
> when being connected through the open vpn tunnel.
>
> I cannot see the reason: it is the same internet connection, and the
> vpn server is sleeping: the load stays below 0.1 all the time.
>
> Pinging the LAN gives the following results:
>
> ~8 ms ipsec <=> ~12 ms open vpn, with no load on the tunnel
>
> but:
>
> ~10-15 ms ipsec <=> 300-700 ms open vpn while starting the database
> client
>
>
> How come? How can I find the bottle neck?

Which openvpn setup do you use? tun or tap? bridging or routing?
UDP or TCP ? Did you enable compression? Do you have alot of
When you ping, do you have alot of packet loss?

What about MTU issues? fragmentation?

Start using a network sniffer and notice how the traffic is different  
between
IPSEC and OpenVPN.



JonB

____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users