Есть один debian buster в офисе, на котором установлен openvpn, порт openvpn’а проброшен из офиса. Так же как и порт 5201 для iperf3. Подключаюсь я из последней убунты 19.04. Офис и домашний комп в одном городе, так что мы практически в одной локалке.
Конфиг openvpn:
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.0.0 255.255.255.0"
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
keepalive 10 120
cipher AES-256-CBC
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 4
explicit-exit-notify 1
status /tmp/openvpn-status.log
iperf3 до проброшенного порта с iperf3
user@E420:~$ iperf3 -c *.*.*.*
Connecting to host *.*.*.*, port 5201
[ 5] local 192.168.1.109 port 33874 connected to *.*.*.* port 5201
[ ID] Interval Transfer Bitrate Retr Cwnd
[ 5] 0.00-1.00 sec 11.8 MBytes 98.7 Mbits/sec 0 128 KBytes
[ 5] 1.00-2.00 sec 11.3 MBytes 95.1 Mbits/sec 0 150 KBytes
[ 5] 2.00-3.00 sec 11.5 MBytes 96.6 Mbits/sec 0 171 KBytes
[ 5] 3.00-4.00 sec 11.4 MBytes 95.6 Mbits/sec 0 180 KBytes
[ 5] 4.00-5.00 sec 11.2 MBytes 93.5 Mbits/sec 0 188 KBytes
[ 5] 5.00-6.00 sec 11.5 MBytes 96.1 Mbits/sec 0 188 KBytes
[ 5] 6.00-7.00 sec 11.4 MBytes 95.6 Mbits/sec 0 188 KBytes
[ 5] 7.00-8.00 sec 11.9 MBytes 99.7 Mbits/sec 0 277 KBytes
[ 5] 8.00-9.00 sec 11.0 MBytes 92.5 Mbits/sec 0 277 KBytes
[ 5] 9.00-10.00 sec 11.6 MBytes 97.1 Mbits/sec 0 277 KBytes
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval Transfer Bitrate Retr
[ 5] 0.00-10.00 sec 115 MBytes 96.1 Mbits/sec 0 sender
[ 5] 0.00-10.00 sec 113 MBytes 94.8 Mbits/sec receiver
Теперь до того же компа через openvpn:
user@E420:~$ iperf3 -c 192.168.0.17
Connecting to host 192.168.0.17, port 5201
[ 5] local 10.8.0.6 port 58546 connected to 192.168.0.17 port 5201
[ ID] Interval Transfer Bitrate Retr Cwnd
[ 5] 0.00-1.00 sec 2.99 MBytes 25.1 Mbits/sec 1 1.33 KBytes
[ 5] 1.00-2.00 sec 2.74 MBytes 22.9 Mbits/sec 133 1.33 KBytes
[ 5] 2.00-3.00 sec 2.49 MBytes 20.9 Mbits/sec 69 1.33 KBytes
[ 5] 3.00-4.00 sec 2.74 MBytes 22.9 Mbits/sec 144 1.33 KBytes
[ 5] 4.00-5.00 sec 2.55 MBytes 21.4 Mbits/sec 160 1.33 KBytes
[ 5] 5.00-6.00 sec 2.49 MBytes 20.9 Mbits/sec 158 1.33 KBytes
[ 5] 6.00-7.00 sec 0.00 Bytes 0.00 bits/sec 1 1.33 KBytes
[ 5] 7.00-8.00 sec 2.74 MBytes 23.0 Mbits/sec 158 1.33 KBytes
[ 5] 8.00-9.00 sec 2.55 MBytes 21.4 Mbits/sec 160 1.33 KBytes
[ 5] 9.00-10.00 sec 2.49 MBytes 20.9 Mbits/sec 158 1.33 KBytes
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval Transfer Bitrate Retr
[ 5] 0.00-10.00 sec 23.8 MBytes 19.9 Mbits/sec 1142 sender
[ 5] 0.00-10.00 sec 23.8 MBytes 19.9 Mbits/sec receiver
Даже решил протестить l2tp который был уже настроен в офисе, и даже он оказывается немного быстрее:
Connecting to host 192.168.0.17, port 5201
[ 5] local 192.168.10.1 port 47734 connected to 192.168.0.17 port 5201
[ ID] Interval Transfer Bitrate Retr Cwnd
[ 5] 0.00-1.00 sec 4.27 MBytes 35.8 Mbits/sec 8 38.5 KBytes
[ 5] 1.00-2.00 sec 4.07 MBytes 34.2 Mbits/sec 8 31.9 KBytes
[ 5] 2.00-3.01 sec 4.28 MBytes 35.7 Mbits/sec 10 41.2 KBytes
[ 5] 3.01-4.00 sec 4.17 MBytes 35.2 Mbits/sec 6 38.5 KBytes
[ 5] 4.00-5.00 sec 4.19 MBytes 35.1 Mbits/sec 8 33.2 KBytes
[ 5] 5.00-6.00 sec 4.17 MBytes 35.0 Mbits/sec 5 31.9 KBytes
[ 5] 6.00-7.00 sec 4.13 MBytes 34.6 Mbits/sec 5 34.5 KBytes
[ 5] 7.00-8.00 sec 4.25 MBytes 35.7 Mbits/sec 7 34.5 KBytes
[ 5] 8.00-9.00 sec 4.25 MBytes 35.7 Mbits/sec 5 31.9 KBytes
[ 5] 9.00-10.00 sec 4.16 MBytes 34.9 Mbits/sec 7 30.5 KBytes
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval Transfer Bitrate Retr
[ 5] 0.00-10.00 sec 41.9 MBytes 35.2 Mbits/sec 69 sender
[ 5] 0.00-10.00 sec 41.9 MBytes 35.1 Mbits/sec receiver
Пробовал все трюки из https://serverfault.com/a/927729/535800 с увеличением буферов системы, с отрубанием шифрования, и кучу всего ещё - эффект просто нулевой. Будто я конфиги от другой системы правил. Даже хуже не становится. Есть какие-то идеи?
