[Openvpn-devel] TINC and OpenVPN tunnel performance on a Windows client

[James Yonan]

> - Generic OpenVPN settings:
> cipher bf-cbc
> dev tap
> tun-mtu 1500
> tun-mtu-extra 32
> - OpenVPN-TCP settings:
> proto tcp-client
> - OpenVPN-UDP settings:
> proto udp
> - OpenVPN-UDP-LZO settings:
> proto udp
> comp-lzo

You could improve the UDP performance of this config with two changes:

(1) Use "dev tun".

(2) Clamp the TCP MSS using the --mssfix option.  You want to use the largest
mssfix value which will not cause fragmentation.  Try 1400 or 1450.

James

--
TINC development list, tinc-devel at nl.linux.org
Archive: http://mail.nl.linux.org/tinc-devel/