Speed issue

[epraveenns]

my vpn server is located in an area where i will get around 6 to 10 mbps download speed and around 8mbps upload speed

my vpn client is located in another area where i will get almost similar speed to that of my vpn server (6mbps up and 8 mbps down roughly)

but after connecting to vpn, the speed drops to less than 1 mbps. i cannot open any website after connecting to the vpn

where is the fault?

[ilkertr]

I have same speed problem
my server have 50 mbit bandwidth but vpn client only 0.3-0.5 mbit.
I tested windows client and android client.
vpn clients very slow speed.

SoftEther VPN installed Windos 2008 R2 Server.

SoftEther VPN 4.04 Build 9412 (January 15, 2014)

[epraveenns]

somebody help !!!

[mesa57]

As internet traffic travels over the server, a speedtest over internet will use double bandwidth.

[ilkertr]

lost too much

[calimansi]

Please confirm if you're using the built in secure NAT function of softether. I had slow downs, but once I disabled secure NAT (virtual NAT and virtual DHCP) and used iptables and isc-dhcp-server directly, the service is very quick; almost as quick as no VPN at all.

Let me know if you need more help.

[onlyenglish]

calimansi wrote:
> Please confirm if you're using the built in secure NAT function of
> softether. I had slow downs, but once I disabled secure NAT (virtual NAT
> and virtual DHCP) and used iptables and isc-dhcp-server directly, the
> service is very quick; almost as quick as no VPN at all.
>
> Let me know if you need more help.

Do you have documentation to configure the use of IPTABLES and ISC DHCP server directly. Would be greatly appreciated if you can help with setting it up.

[epraveenns]

By default, Nat and dhcp are disabled. Any further solution?

[mesa57]

Try to set the metric of the interface on you're client to automatic or a high value to prevent the route to the vpnserver to be taken as default. Also use compression (client config).

[epraveenns]

Sorry I tried everything but same issues,,,no improvement

[calimansi]

Here's my post on lowendtalk:

I would then disable all the NAT stuff; natdisable, dhcpdisable, securenatdisable.

Install dhcpd. In ubuntu it's isc-dhcp-server (apt-get install). Configure the dhcp server by editting /etc/dhcp/dhcpd.conf and adding your settings. I changed the DNS servers and added just enough to pass out ip addresses on the local subnet. Here is my config for reference:

ddns-update-style none; option domain-name "XXX"; option domain-name-servers 8.8.8.8, 8.8.4.4; default-lease-time 600; max-lease-time 7200; option subnet-mask 255.255.255.0; option broadcast-address 192.168.1.255; option routers 192.168.1.254; subnet 192.168.1.0 netmask 255.255.255.0 { range 192.168.1.10 192.168.1.100; range 192.168.1.150 192.168.1.200; }

Take note of the option routers line. This address will become the address of the TAP interface.

Back to Softether. Create a local bridge. I use this command, "bridgecreate /DEVICE:tap0 /TAP:yes"

Now if you run ifconfig, you'll see a device called tap_tap0. Run the following, "ifconfig tap_tap0 192.168.1.254"... or the address you selected as your option routers address.

Finally, run this command: iptables -t nat -A POSTROUTING -s (YOUR.SUBNET like 192.168.1.0/24) -j SNAT --to-source VPS.IP.ADDRESS

Test it out and you should be good to go.

If you have any questions, please let me know.

[mat_rapit]

How do i make dhcpd to communicate with bridge? i've install dhcpd on windows 7 server and crete bridge on softether server but i dont know how to make that "TAP".
Hope you can help using your configuration on windows 7.

> Install dhcpd. In ubuntu it's isc-dhcp-server (apt-get install). Configure
> the dhcp server by editting /etc/dhcp/dhcpd.conf and adding your settings.
> I changed the DNS servers and added just enough to pass out ip addresses on
> the local subnet. Here is my config for reference:
>
> ddns-update-style none; option domain-name "XXX"; option
> domain-name-servers 8.8.8.8, 8.8.4.4; default-lease-time 600;
> max-lease-time 7200; option subnet-mask 255.255.255.0; option
> broadcast-address 192.168.1.255; option routers 192.168.1.254; subnet
> 192.168.1.0 netmask 255.255.255.0 { range 192.168.1.10 192.168.1.100; range
> 192.168.1.150 192.168.1.200; }
>
> Take note of the option routers line. This address will become the address
> of the TAP interface.
>
> Back to Softether. Create a local bridge. I use this command,
> "bridgecreate /DEVICE:tap0 /TAP:yes"
>
> Now if you run ifconfig, you'll see a device called tap_tap0. Run the
> following, "ifconfig tap_tap0 192.168.1.254"... or the address
> you selected as your option routers address.
>
> Finally, run this command: iptables -t nat -A POSTROUTING -s (YOUR.SUBNET
> like 192.168.1.0/24) -j SNAT --to-source VPS.IP.ADDRESS
>
> Test it out and you should be good to go.
>
> If you have any questions, please let me know.

[thisjun]

Please install VPN client instead of TAP.

[colapig]

If you want to use the dhcp outside the virtual box, that mean you need to create a local bridge. All the VPN users can access the resources which connect in the same network with your VPN server.