hey folks, yet more openvpn slowness problems. previous to the recent update for the heartbleed bug, my openvpn servers were all running normally; near-full bandwidth. NOTHING has changed about the config or the underlying systems in any way, other than updating openssl to 1.0.1g, and openvpn to 2.3.3. ever since the update, transfers from the server to the client are VERY slow - less than 1mbit. transfers from the client to the server are full speed. no network traffic shaping is happening, the results are reproducable on a LAN between 1 machine to another, no other traffic. setting "cipher none" changes nothing, so it's not a CPU issue (even then, the testing systems range from a Core i3 3.3GHz to an i7 4770K @4GHz.) this issue is happening at 4 different remote sites that I have, all on different hardware. it really seems like the openvpn update broke itself. speeds have been measured with iperf over the tunneling adapters, but real-world attempts to transfer data absolutely reflect it.
Code:
------------------------------------------------------------
Client connecting to 10.11.12.1, TCP port 5001
TCP window size: 416 KByte
------------------------------------------------------------
[156] local 10.11.12.10 port 60519 connected with 10.11.12.1 port 5001
[ ID] Interval Transfer Bandwidth
[156] 0.0-10.0 sec 104 MBytes 86.6 Mbits/sec
Code:
------------------------------------------------------------
Client connecting to 10.11.12.10, TCP port 5001
TCP window size: 416 KByte
------------------------------------------------------------
[ 3] local 10.11.12.1 port 35682 connected with 10.11.12.10 port 5001
[ ID] Interval Transfer Bandwidth
[ 3] 0.0-12.5 sec 1.38 MBytes 923 Kbits/sec
this was a test over a direct connection between a server and a client machine - no switch or anything in between. testing without the VPN yielded 934mbit/sec. with the VPN, that abysmal result above.
anyone else experiencing this? i'd post my config files, but really i don't think they'd be helpful; as i said, nothing changed in them. have i mentioned yet about how much i love software updates?