Bonjour,
J’ai actuellement plusieurs liaisons OpenVPN actives entre mes machines. Mais, je me suis rendu compte d’un truc un peu gênant, bien qu’ayant des connexion assez rapide, la liaison par le VPN ne dépasse pas 30Mbps :
┌ (gilles@Stardust + 0) (26/07/20 - 11:55:25) (0.78 - 0%) (~)
└% iperf3 -c nut.almtesh.net
Connecting to host nut.almtesh.net, port 5201
[ 5] local 2001:bc8:3335:1::2 port 51822 connected to 2001:bc8:3335:: port 5201
[ ID] Interval Transfer Bitrate Retr Cwnd
[ 5] 0.00-1.00 sec 3.08 MBytes 25.9 Mbits/sec 24 86.0 KBytes
[ 5] 1.00-2.00 sec 2.99 MBytes 25.1 Mbits/sec 0 108 KBytes
[ 5] 2.00-3.00 sec 3.54 MBytes 29.7 Mbits/sec 0 129 KBytes
[ 5] 3.00-4.00 sec 4.03 MBytes 33.8 Mbits/sec 9 109 KBytes
[ 5] 4.00-5.00 sec 3.73 MBytes 31.2 Mbits/sec 14 93.8 KBytes
[ 5] 5.00-6.00 sec 3.97 MBytes 33.3 Mbits/sec 0 120 KBytes
[ 5] 6.00-7.00 sec 3.91 MBytes 32.8 Mbits/sec 2 102 KBytes
[ 5] 7.00-8.00 sec 3.24 MBytes 27.1 Mbits/sec 3 86.0 KBytes
[ 5] 8.00-9.00 sec 3.11 MBytes 26.1 Mbits/sec 3 79.5 KBytes
[ 5] 9.00-10.00 sec 3.30 MBytes 27.7 Mbits/sec 0 106 KBytes
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval Transfer Bitrate Retr
[ 5] 0.00-10.00 sec 34.9 MBytes 29.3 Mbits/sec 55 sender
[ 5] 0.00-10.03 sec 34.6 MBytes 29.0 Mbits/sec receiver
iperf Done.
gilles has logged on pts/2 from :0.
┌ (gilles@Stardust + 0) (26/07/20 - 12:30:15) (2.26 - 0%) (~)
└% iperf3 -c nut.almtesh.net -R
Connecting to host nut.almtesh.net, port 5201
Reverse mode, remote host nut.almtesh.net is sending
[ 5] local 2001:bc8:3335:1::2 port 51826 connected to 2001:bc8:3335:: port 5201
[ ID] Interval Transfer Bitrate
[ 5] 0.00-1.00 sec 2.14 MBytes 18.0 Mbits/sec
[ 5] 1.00-2.00 sec 2.59 MBytes 21.8 Mbits/sec
[ 5] 2.00-3.00 sec 2.81 MBytes 23.6 Mbits/sec
[ 5] 3.00-4.00 sec 2.55 MBytes 21.4 Mbits/sec
[ 5] 4.00-5.00 sec 2.92 MBytes 24.5 Mbits/sec
[ 5] 5.00-6.00 sec 2.89 MBytes 24.3 Mbits/sec
[ 5] 6.00-7.00 sec 2.73 MBytes 22.9 Mbits/sec
[ 5] 7.00-8.00 sec 2.86 MBytes 24.0 Mbits/sec
[ 5] 8.00-9.00 sec 2.54 MBytes 21.3 Mbits/sec
[ 5] 9.00-10.00 sec 1.92 MBytes 16.1 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval Transfer Bitrate Retr
[ 5] 0.00-10.03 sec 26.6 MBytes 22.3 Mbits/sec 157 sender
[ 5] 0.00-10.00 sec 26.0 MBytes 21.8 Mbits/sec receiver
iperf Done.
Pour info, voici la vitesse en dehors du VPN :
┌ (gilles@Stardust + 0) (26/07/20 - 12:42:20) (2.07 - 0%) (~)
└% iperf3 -c 51.159.34.87
Connecting to host 51.159.34.87, port 5201
[ 5] local 10.255.1.10 port 53382 connected to 51.159.34.87 port 5201
[ ID] Interval Transfer Bitrate Retr Cwnd
[ 5] 0.00-1.00 sec 9.24 MBytes 77.5 Mbits/sec 137 219 KBytes
[ 5] 1.00-2.00 sec 6.90 MBytes 57.9 Mbits/sec 0 239 KBytes
[ 5] 2.00-3.00 sec 7.52 MBytes 63.1 Mbits/sec 0 260 KBytes
[ 5] 3.00-4.00 sec 6.77 MBytes 56.8 Mbits/sec 0 280 KBytes
[ 5] 4.00-5.00 sec 6.65 MBytes 55.8 Mbits/sec 0 300 KBytes
[ 5] 5.00-6.00 sec 6.77 MBytes 56.8 Mbits/sec 0 317 KBytes
[ 5] 6.00-7.00 sec 6.84 MBytes 57.3 Mbits/sec 0 332 KBytes
[ 5] 7.00-8.00 sec 6.90 MBytes 57.9 Mbits/sec 0 349 KBytes
[ 5] 8.00-9.00 sec 6.96 MBytes 58.4 Mbits/sec 0 363 KBytes
[ 5] 9.00-10.00 sec 7.64 MBytes 64.1 Mbits/sec 0 379 KBytes
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval Transfer Bitrate Retr
[ 5] 0.00-10.00 sec 72.2 MBytes 60.6 Mbits/sec 137 sender
[ 5] 0.00-10.07 sec 70.2 MBytes 58.5 Mbits/sec receiver
iperf Done.
┌ (gilles@Stardust + 0) (26/07/20 - 12:43:26) (0.82 - 0%) (~)
└% iperf3 -c 51.159.34.87 -R
Connecting to host 51.159.34.87, port 5201
Reverse mode, remote host 51.159.34.87 is sending
[ 5] local 10.255.1.10 port 53390 connected to 51.159.34.87 port 5201
[ ID] Interval Transfer Bitrate
[ 5] 0.00-1.00 sec 33.7 MBytes 283 Mbits/sec
[ 5] 1.00-2.00 sec 38.2 MBytes 320 Mbits/sec
[ 5] 2.00-3.00 sec 40.0 MBytes 336 Mbits/sec
[ 5] 3.00-4.00 sec 41.9 MBytes 351 Mbits/sec
[ 5] 4.00-5.00 sec 42.0 MBytes 352 Mbits/sec
[ 5] 5.00-6.00 sec 35.3 MBytes 296 Mbits/sec
[ 5] 6.00-7.00 sec 36.2 MBytes 304 Mbits/sec
[ 5] 7.00-8.00 sec 36.8 MBytes 308 Mbits/sec
[ 5] 8.00-9.00 sec 37.6 MBytes 315 Mbits/sec
[ 5] 9.00-10.00 sec 37.8 MBytes 317 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval Transfer Bitrate Retr
[ 5] 0.00-10.04 sec 383 MBytes 320 Mbits/sec 70 sender
[ 5] 0.00-10.00 sec 379 MBytes 318 Mbits/sec receiver
iperf Done.
Pour information, les deux nœuds du pont sont en Debian 10. Voici la configuration du serveur :
proto udp6
dev nut2lookout
dev-type tun
port 11000
ifconfig 10.255.255.1 10.255.255.2
route 10.255.1.0 255.255.255.0
route 10.255.2.0 255.255.255.0
route 192.168.100.0 255.255.255.252
tun-ipv6
ifconfig-ipv6 2001:bc8:3335:ff00:: 2001:bc8:3335:ff00::1
route-ipv6 2001:bc8:3335:1::/64
route-ipv6 2001:bc8:3335:2::/64
<secret>
secret partagé
</secret>
et celle du client :
remote 51.159.34.87
port 11000
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
dev lookout2nut
dev-type tun
tun-ipv6
ifconfig 10.255.255.2 10.255.255.1
ifconfig-ipv6 2001:bc8:3335:ff00::1 2001:bc8:3335:ff00::
# almtesh.net
route 10.255.0.0 255.255.255.0
route 10.255.255.0 255.255.255.0
route-ipv6 2001:bc8:3335::/48
<secret>
secret partagé
</secret>