1. joel.bodenmann

    OpenVPN poor performance

    Let there be machines A and B.: A is a baremetal server in a datacenter with 1Gbps connection to the internet. 4x 3.4 GHz Xeon with 32 GB of RAM B is a virtual machine running on a KVM cluster in a datacenter with 1Gbps connection to the internet. 4x 2.6 GHz KVM with 8 GB of RAM Both machines...
  2. squirtle

    Setting up a router in a jail to use openvpn client

    I know, this appears to be answered all over the place. But none of the answers are working for me so I must have misunderstood something somewhere along the way. Background: I'm trying to set up a FreeBSD jail that acts as a router. Inside that jail, I'd like to run OpenVPN. I would like all...
  3. B

    Networking My openvpn tun mode server is always stuck ?

    When I use the IP address( to connect to the server (, my openvpn tun mode server is always stuck ? That is why ? When I type the command “top htop …”.it is stuck. This is my /etc/rc.conf: Server@root[~]# cat /etc/rc.conf hostname="Server" ifconfig_msk0="inet...
  4. Angelo Klin

    IPFW Private VPN + Firewall on a VPS

    Hello All, With all the fuzz and issues with security and privacy these days I decided to give it a go with a VPN, mostly for the fun and challenge. I am partially done with a scenario that sounds very typical these days, although it is not necessary plain vanilla. The overall idea is...
  5. S

    IPFW OpenVPN and IPFW rules

    Hello, I cannot setup firewall for OpenVPN. I don't know where is problem. Only way to make VPN working is stop IPFW via service ipfw stop. Can someone help me to set correct IPFW rules please? Here is OpenVPN config: port 9066 proto udp4 dev tun server
  6. arader

    OpenSSL almost 10x faster than LibreSSL?

    Hi all, I’m investigating some slow VPN speeds on my router, and I’m trying to make sense of what I’m seeing. Non-VPN’d traffic can hit >1gb/s through the router, so I know it’s not a throughput problem. This got me investigating crypto performance, and on all my machines, I’ve found that...
  7. A

    iptables: Command not found. Why?!!

    I need to modify the NAT on the vpn server which is a FreeBSD 11.1-STABLE #0 r324546 raspberry Pi 2. It seems not to have iptables command. root@rpi2:~ # iptables -I FORWARD -i tun0 -o ue0 -s -m conntrack --ctstate NEW -j ACCEPT iptables: Command not found. when I try to install it...
  8. Janusz

    OpenVPN - TUN external connectivity

    Hi Everyone, I'm running OpenVPN 2.4.3 on FreeBSD 10.3 and routing all traffic via a TUN/tunnel. I can access internal services but cannot reach anything outside of the network. I did my best to try to find an answer to where the problem lies, but I keep going round in circles now. I would...
  9. aragats

    OpenVPN: packet HMAC authentication failed

    After upgrading my box from 11.0-STABLE to 11.1-RELEASE my OpenVPN client fails with:.... Aug 17 13:35:31 eldorado openvpn[60724]: Initialization Sequence Completed Aug 17 13:35:42 eldorado openvpn[60724]: Authenticate/Decrypt packet error: packet HMAC authentication failedI don't have much...
  10. G

    IPFW digital ocean vpn works for IPFW "open", now trying to do a secure firewall

    Searching the forums, I can't seem to find a definitive solution to what IPFW rules are needed for openvpn. (I've found many solutions I can't get to work.) The obligatory uname: # uname -a FreeBSD peets 11.0-RELEASE-p9 FreeBSD 11.0-RELEASE-p9 #0: Tue Apr 11 08:48:40 UTC 2017...
  11. W

    Solved OpenVPN IPv6 PF set

    Hey folks, I'm in progress of migrating my centos openvpn dualstack server to freebsd. I got a problem with ipv6 connection and im not shure what is the problem. IPv4 is working fine through the tunnel. IPv6 icmp is possible, but nameservers are not reachable on :53 or anything else except via...
  12. NapoleonWils0n

    Openvpn up and down scripts for split tunnel and pf

    Hi All Im a linux user making the switch to freebsd, got everything set up except for one last thing Im trying to set up a split route with openvpn and the pf firewall I did read the freebsd manual and a couple of books about pf and googled before posting I have linux up and down scripts for...
  13. B

    Openvpn server

    I set up openvpn But clients do not connect I did so: 1) pkg install openvpn 2) easyrsa init-pki 3) easyrsa gen-dh 4) easyrsa build-ca nopass 5) easyrsa build-server-full server nopass 6) easyrsa build-client-full client5 nopass 7) cd /usr/local/share/easy-rsa/pki 8) openvpn --genkey --secret...
  14. A

    Advice needed for networking multiple jails with openvpn

    Greetings! I am having trouble understanding how to configure my network in the manner I desire. I googled around and searched the forums and have come across all kinds of stuff however I'm not sure what is best practice and such. I saw a lot of terms such as aliases, dummy interfaces, taps...
  15. R

    Solved OpenVPN on FreeBSD 11

    I am trying to setup OpenVPN server on FreeBSD 11 but I am not able to access Internet from Linux client. Ping an SSH connection to VPN server works. I am using the same config with different OpenVPN server running on CentOS without any problems. No firewall yet on either side. Error log on...
  16. Norbert Szczybelski

    How To setup Asterisk VoIP server over OpenVPN in Tor hidden service on FreeBSD system.

    First create OpenSSL CA with easy-rsa or OpenSSL for OpenVPN. This is OpenVPN server configuration file: tls-server port 1194 proto tcp dev tun ca /etc/ssl/ca.crt cert /etc/ssl/server.crt key /etc/ssl/server.key dh /etc/ssl/dh2048.pem topology subnet server
  17. K

    OpenVPN to VLAN

    Hi, i am find a resolve for my questions. I have a gate server and three office, two work with vlan, one with openvpn. Task: Make openvpn with vlan, for working three offices in one vlan. How to resolve? P.S. Sorry for my english =) ------------ Russian translate: Привет, помогите. Есть шлюз и...
  18. neflictus

    OpenVPN Android - no internet

    I installed OpenVPN connect on my phone and I use it with my ExpressVPN servers. I downloaded the configuration files (OPVN) from the ExpressVPN site and imported them into the app. I can connect to the VPN with no issues (i have to eliminate the fragment portion as it says fragment it not...

    10.3->11.0 (something blocks connections for openvpn)

    After upgrade to 11.0-RELEASE something blocks connections between openvpn-client and openvpn-server etc. I mean traffic after openvpn connection is established, so user can connect but has no traffic. Only one connected user is forwarded/routed to destinations/other hosts etc. When the second...
  20. T

    OpenVPN broken after upgrade to 11.0-RELEASE

    After the upgrade to 11.0-RELEASE my openvpn setup seems to be broken. I'm using OpenVPN with the topology subnet config directive, which should make it possible for clients to ping each other. My setup worked fine in 10.2-RELEASE. The first client can connect and send traffic. Subsequent...