Re: [pfSense Support] OpenVPN super-slow upload speeds
On Mon, Nov 10, 2008 at 7:32 PM, JJB <[EMAIL PROTECTED]> wrote: > > Is there any possibility that this is a Macintosh (Tiger) issue? Yes. Does a Windows or Linux client do the same? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] OpenVPN super-slow upload speeds
JJB wrote: I, and some of our users are getting very slow, modem like upload speeds on OpenVPN from home - using Tunnelblick on my DSL (6mbit down 768 up). Download speed is OK - about 560kbps. The WAN link I am connected to is 3mbit in both directions. This might be a mac-only issue, not sure, I haven't heard any complaints from Windows OpenVPN users. - Joel Upstream from my home is still extremely slow over openvpn. I've tried some of the suggestions, but can't really try them all. I tried for example: 1. Physical copy using smb over openvpn from my computer - extraordinarily slow 2. Rsync to same server over openvpn 6 - 10kbps upstream 3. Rsync same file to webserver at colo (while connected openvpn) 60 kbps upstream 4. Send email with large attachement using office server over openvpn - slow 5. Send same email without openvpn, using same email server - fast. Is there any possibility that this is a Macintosh (Tiger) issue? We did a test over openvpn, where we ssh to a linux host that is connected to openvpn, and had it rsync a file upstream - speed was 100 - 200kbps upstream. The guy I mentioned in my post complaining about upload speed is also using Mac with Tiger & Tunnelblick. - Joel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] OpenVPN super-slow upload speeds
Scott Ullrich wrote: On Sat, Oct 25, 2008 at 6:57 PM, BSD Wiz <[EMAIL PROTECTED]> wrote: To bad it's for v10.5 only. Coming into this thread late, please forgive me if this has been asked but can this Viscosity import a configuration file? With 1.3 we can generate a windows openvpn installer with certificates bundled in and I would love to see a function to be able to export a configuration file that could be used with Viscosity. Scott - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Actually, I've experiemented with Viscosity recently, on a Leopard machine at work. It is pretty nice, imports openvpn configs nicely, however, it is Leopard only, and stricter about config file syntax than Tunnelblick - for instance: proto tcp won't work, you have to use: proto tcp-client I think there were a few other things it balked at when importing & I had to edit the config file a few times before it worked. - Joel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] OpenVPN super-slow upload speeds
On Sat, Oct 25, 2008 at 6:57 PM, BSD Wiz <[EMAIL PROTECTED]> wrote: > To bad it's for v10.5 only. Coming into this thread late, please forgive me if this has been asked but can this Viscosity import a configuration file? With 1.3 we can generate a windows openvpn installer with certificates bundled in and I would love to see a function to be able to export a configuration file that could be used with Viscosity. Scott - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] OpenVPN super-slow upload speeds
To bad it's for v10.5 only. -Phil G On Oct 25, 2008, at 3:41 PM, Paul M <[EMAIL PROTECTED]> wrote: on OpenVPN from home - using Tunnelblick on my DSL (6mbit down 768 up). OT: we've started switching Mac OSX users to viscosity, much nicer/easier to use - a proper OSX application instead of a simple GUI to openvpn executable. It will also import tunnelblick settings too. It does have a programming error whereby if you entered anything into X509 settings for CA use, it doesn't disable them if you switch to a shared key. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] OpenVPN super-slow upload speeds
>>> on OpenVPN from home - using Tunnelblick on my DSL (6mbit down 768 up). OT: we've started switching Mac OSX users to viscosity, much nicer/easier to use - a proper OSX application instead of a simple GUI to openvpn executable. It will also import tunnelblick settings too. It does have a programming error whereby if you entered anything into X509 settings for CA use, it doesn't disable them if you switch to a shared key. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] OpenVPN super-slow upload speeds
here's a thought, you could setup iperf on your src machine and pfsense. then ssh into the pfsense box and see what speeds your actually getting. that way you will at least know if it's openvpn or not. -phil On Oct 24, 2008, at 4:29 PM, JJB wrote: Your architecture is somewhat unclear - do I correctly surmise that you have a pfSense server *somewhere* on a 3/3 connection, and that several users connect to it via OpenVPN? two pfsense servers using CARP for failover with a shared vip connected to 3/3 pipe (two t1 lines bonded) Also a 10/1 dsl line. We have about 20 OpenVpn users, but rarely are all 20 connected, usually more like 3 -5. I don't believe it is related to our ISP (AT&T managed internet services), or to my ISP at home (ATT DSL) or to the other complaining users ISP (Comcast Business Class 2.5mbit upstream supposedly). Does anyone here know what Paul was talking about with PMTU in pfsense and where the setting is? Is this just an "allow ICMP on this interface" setting? - Joel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] OpenVPN super-slow upload speeds
On Fri, Oct 24, 2008 at 5:29 PM, JJB <[EMAIL PROTECTED]> wrote: > > Your architecture is somewhat unclear - do I correctly surmise that >> >> you have a pfSense server *somewhere* on a 3/3 connection, and that >> several users connect to it via OpenVPN? >> > > two pfsense servers using CARP for failover with a shared vip connected to > 3/3 pipe (two t1 lines bonded) Also a 10/1 dsl line. > > We have about 20 OpenVpn users, but rarely are all 20 connected, usually > more like 3 -5. > > I don't believe it is related to our ISP (AT&T managed internet services), > or to my ISP at home (ATT DSL) or to the other complaining users ISP > (Comcast Business Class 2.5mbit upstream supposedly). > > Does anyone here know what Paul was talking about with PMTU in pfsense and > where the setting is? Is this just an "allow ICMP on this interface" > setting? There is no such setting, it's allowed. It sounds like just a case of your users maxing out the upload on their end. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] OpenVPN super-slow upload speeds
Your architecture is somewhat unclear - do I correctly surmise that you have a pfSense server *somewhere* on a 3/3 connection, and that several users connect to it via OpenVPN? two pfsense servers using CARP for failover with a shared vip connected to 3/3 pipe (two t1 lines bonded) Also a 10/1 dsl line. We have about 20 OpenVpn users, but rarely are all 20 connected, usually more like 3 -5. I don't believe it is related to our ISP (AT&T managed internet services), or to my ISP at home (ATT DSL) or to the other complaining users ISP (Comcast Business Class 2.5mbit upstream supposedly). Does anyone here know what Paul was talking about with PMTU in pfsense and where the setting is? Is this just an "allow ICMP on this interface" setting? - Joel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] OpenVPN super-slow upload speeds
On Fri, Oct 24, 2008 at 09:16, JJB <[EMAIL PROTECTED]> wrote: > I, and some of our users are getting very slow, modem like upload speeds on > OpenVPN from home - using Tunnelblick on my DSL (6mbit down 768 up). > Download speed is OK - about 560kbps. The WAN link I am connected to is > 3mbit in both directions. This might be a mac-only issue, not sure, I > haven't heard any complaints from Windows OpenVPN users. I use Tunnelblick with no issue, and I know several of the devs primarily use Macs as well. Your architecture is somewhat unclear - do I correctly surmise that you have a pfSense server *somewhere* on a 3/3 connection, and that several users connect to it via OpenVPN? Depending on who your individual providers are, they could well be throttling encrypted, off-port outbound (upload) traffic; I know Rogers did [does?], effectively killing VPN use. Your long ping time below is definitely indicative of link saturation (tunnel or otherwise), be that done on purpose by the ISP or not. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] OpenVPN super-slow upload speeds
Paul Mansfield wrote: JJB wrote: I, and some of our users are getting very slow, modem like upload speeds on OpenVPN from home - using Tunnelblick on my DSL (6mbit down 768 up). Download speed is OK - about 560kbps. The WAN link I am connected to is 3mbit in both directions. This might be a mac-only issue, not sure, I haven't heard any complaints from Windows OpenVPN users. could it be traffic shaping by your ISPs? check ping RTT from remote workers, with standard and large payloads? have you blocked PMTU on your firewall/openvpn server? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] I've never experimented with altering the ping payload, however, here is what I saw when I tested (before I posted the thread starter) Pinging the LAN server with the samba share that I'm copying to: 25ms ping time with no upload happening from my home workstation) 900 - 1200ms ping time when copying a file Destination server is Centos machine running SAMBA - Joel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] OpenVPN super-slow upload speeds
Paul Mansfield wrote: JJB wrote: I, and some of our users are getting very slow, modem like upload speeds on OpenVPN from home - using Tunnelblick on my DSL (6mbit down 768 up). Download speed is OK - about 560kbps. The WAN link I am connected to is 3mbit in both directions. This might be a mac-only issue, not sure, I haven't heard any complaints from Windows OpenVPN users. could it be traffic shaping by your ISPs? check ping RTT from remote workers, with standard and large payloads? have you blocked PMTU on your firewall/openvpn server? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Hi Paul, Where do I find PMTU setting in pfsense? Do I need to configure to allow some flavor of ping response from the firewall? - Joel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] OpenVPN super-slow upload speeds
JJB wrote: > I, and some of our users are getting very slow, modem like upload speeds > on OpenVPN from home - using Tunnelblick on my DSL (6mbit down 768 up). > Download speed is OK - about 560kbps. The WAN link I am connected to is > 3mbit in both directions. This might be a mac-only issue, not sure, I > haven't heard any complaints from Windows OpenVPN users. could it be traffic shaping by your ISPs? check ping RTT from remote workers, with standard and large payloads? have you blocked PMTU on your firewall/openvpn server? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] OpenVPN super-slow upload speeds
your up speed will only be as fast as the UPLOAD speed on YOUR ISP. In YOUR case 768. OpenVPN does not magically make your up speed that of servers that you are connecting to. On Fri, Oct 24, 2008 at 11:16 AM, JJB <[EMAIL PROTECTED]> wrote: > I, and some of our users are getting very slow, modem like upload speeds on > OpenVPN from home - using Tunnelblick on my DSL (6mbit down 768 up). > Download speed is OK - about 560kbps. The WAN link I am connected to is > 3mbit in both directions. This might be a mac-only issue, not sure, I > haven't heard any complaints from Windows OpenVPN users. > > - Joel > > > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > -- Robert Benchley - "The surest way to make a monkey of a man is to quote him."
[pfSense Support] OpenVPN super-slow upload speeds
I, and some of our users are getting very slow, modem like upload speeds on OpenVPN from home - using Tunnelblick on my DSL (6mbit down 768 up). Download speed is OK - about 560kbps. The WAN link I am connected to is 3mbit in both directions. This might be a mac-only issue, not sure, I haven't heard any complaints from Windows OpenVPN users. - Joel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
