I’ve been using an OpenVPN tunnel for years with good success. I have a couple of server locations set up in the US, and I connect from overseas, presently Sierra Leone. I think it’s a fairly generic configuration; I didn’t mess with presets in the configuration file other than the connection URL.
Recently, I’ve had a problem with the VPN bandwidth occasionally being VERY low (~1 Mb/s). The problem is intermittent and lasts for a few hours. Oddly, it occurs when connecting to either server (they’re 1500 km apart and on different ISPs), and concurrent speed tests to US locations without the tunnel from the same WAN connection run 150 Mb/s. I get the same behavior when I run the OpenVPN client on a computer or cell phone as opposed to the router. The server and client processors don’t appear to be anywhere near maxing out.
I’m baffled. Any suggestions for where to look for the problem?
My client configuration follows:
client
dev tun
proto udp
remote <REDACTEDURL> 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
remote-cert-tls server
verb 3
redirect-gateway def1
The server configuration follows:
proto udp
ifconfig-pool-persist ipp.txt
keepalive 10 120
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
mute 10
ca "/config/auth/ca.crt"
cert "/config/auth/server.crt"
key "/config/auth/server.key"
dh "/config/auth/dh.pem"
tls-version-min 1.2
# The following is not supported in 2.4.7.
#data-ciphers AES-256-GCM:AES-256-CBC
cipher AES-256-GCM
auth SHA256
remote-cert-tls client
port 1194
dev tun0
topology subnet
server 10.8.0.0 255.255.255.0
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "redirect-gateway def1"
#Uncomment the below to allow client to client communication
#client-to-client
#Uncomment the below and modify the command to allow access to your internal network
#push "route 192.168.0.0 255.255.255.0"
duplicate-cn
