SoftEther VPN User Forum

Hello,

Very interesting software.

I was able to setup softether as a server on an Ubuntu VPS. It is running as an OpenVPN emulator. I am able to connect to the server using Viscosity and it works!

The only bad thing is the speed. When I run a speed test at Speedtest.net my download speed is around 4 Mbps with a 3 Mbps upload. Without connecting to the server, I get 15 Mbps download and 7 Mbps upload.

I really want to get this software to run correctly as I see a LOT more potential with it compared to the traditional VPN servers. As the description indicates that the server is faster than an OpenVPN server, I want to know how to get the performance increased.

Please advise.

Thank you.

You use SecureNAT?

If so, SecureNAT has very low performance. Rather, use Local Bridge.
http://www.softether.org/4-docs/1-manua ... al_Bridges

Note that Local Bridge works when the vpnserver process is running on root privilege. And Local Bridge requires Promiscuous Mode on the Network Adapter which you want to bridge. If your VPN server is on a VM, you have to permit Promiscuous Mode on the VM settings.

Note also that: You must turn off the SecureNAT function if your Local Bridge is activated.

Please also read "11.1.7 The CPU load increases after enabling Virtual NAT for SecureNAT".
http://www.softether.org/4-docs/1-manua ... _SecureNAT.

Wow. Thanks for the very quick reply.

I will attempt to set up a local bridge later today. I do have root access on the VPS. I have access to an OpenVZ server. Hopefully there are no issues with that.

I will post a reply on this later today.

Hello again,

I issued the BridgeDeviceList command and no devices are present in the list. Does this mean I cannot use a local bridge? I'm thinking it's because it's virtual environment. My ethernet device is not eth0, but rather venet0 because it's an OpenVZ system.

Please advise.

Thank you.

Sorry I don't know about OpenVZ well.

Make sure that vpnserver process is running as root. Otherwise, local bridge fails.

I read more of your manual and it indicates that I can use the TUN/TAP device. I know that TUN/TAP is compiled into the kernel that I'm using and the device does show up in /dev/net/tun. The only thing is that the tap interface does not show up when I run ifconfig. Do you know how to use TUN/TAP with SoftEther?

Hi,

If you use Windows SoftEther VPN Server Manager, you can define tap device on the local bridge setting screen.

If you use vpncmd, use "BridgeCreate" command with "/TAP" argument.
Please see "6.3.38 "BridgeCreate": Create Local Bridge Connection" at
http://bit.ly/ZVRLVR

Unfortunately, I don't think this is going to work for me.

I am able to access the tap interface, but I can't get the DHCP to issue it an IP. To my understanding I need to bridge tap0 to venet0, which I do not think is allowed.

venet0 is my virtual ethernet device. Can this be reached from softether?

Any other hints?

Thanks again.

Ok, one more try.

How do I configure the DHCP server (isc-dhcp-server) to work with a tap0 interface? I think this is the last piece that needed...

Thanks again for all your help dnobori!!

Hello,

Ok. So close, yet so far away.

I can connect to the softether server using openvpn. Softether will assign an IP address to the computer connected using the virtual dhcp server. I can ping other devices that are logged into the server and even the servers outside IP address. Anything beyond that, I cannot get to (the main internet).

The softether server is connected to a TAP_ device. I assigned the TAP device the first IP address from the virtual dhcp server (192.168.30.1). I'm not sure if this is advisable.

I've tried using iptables to either do POSTROUTING or MASQUERADING.

Any other hints?

Thanks again.

Everything works now!!

I just want to confirm that the server works great on a VPS.

The special clue that I'll provide is not to use any of the built in virtual dhcp server or virtual nat / secure nat if you want to get the best possible speed.

I'm using isc-dhcp-server with the TAP bridge. Also, the iptables command is:

iptables -t nat -A POSTROUTING -s YOUR.SUBNET -j SNAT --to-source VPSIP

Good luck!

@calimansi

Do you happen to have a howto of how you got this going?

I'm having the devil of a time getting softether to work on a VPS using the virtual venet* interface

Are you using openvz?

If so, check out this thread:

http://lowendtalk.com/discussion/8783/s ... n-software

See if you can piece the posts together to get what you need.

I looked through that but still not seeing how to do this.

Has anyone written a howto on how to do this on a VPS? I'd be willing to pay someone for their time to walk me through the setup.

All good wishes,

Gavin

calimansi wrote:
> Are you using openvz?
>
> If so, check out this thread:
>
>
> http://lowendtalk.com/discussion/8783/s ... n-software
>
> See if you can piece the posts together to get what you need.

gavstah wrote:
> I looked through that but still not seeing how to do this.
>
> Has anyone written a howto on how to do this on a VPS? I'd be willing to pay someone
> for their time to walk me through the setup.
>
> All good wishes,
>
> Gavin
>
> calimansi wrote:
> > Are you using openvz?
> >
> > If so, check out this thread:
> >
> >
> >
> http://lowendtalk.com/discussion/8783/s ... n-software
> >
> > See if you can piece the posts together to get what you need.

I don't mind playing consultant.

Email me: clstuff-hi (at) hotmail (dot) com

Can you help with tutorial on how to fixed speed on Windows 7 using bridge? Ive setup the server on my windows 7 (bridge) but the client site got very bad speed.


calimansi wrote:
> Everything works now!!
>
> I just want to confirm that the server works great on a VPS.
>
> The special clue that I'll provide is not to use any of the built in
> virtual dhcp server or virtual nat / secure nat if you want to get the best
> possible speed.
>
> I'm using isc-dhcp-server with the TAP bridge. Also, the iptables command
> is:
>
> iptables -t nat -A POSTROUTING -s YOUR.SUBNET -j SNAT --to-source VPSIP
>
> Good luck!

>mat_rapit
I recommend create a new board.