Jun 27, 2017
VyprVPN OpenVPN Setup for OpenWRT – VyprVPN Support 2. Update your package list and install the necessary OpenVPN packages using the commands below. Note: These are two separate commands. Updating your package list will take a moment. Run the second command afterwards. opkg update opkg install openvpn-openssl luci-app-openvpn. 3. OpenVPN: per client MTU - Unix & Linux Stack Exchange I have a somewhat large VPN network which works perfectly with "mtu-test". On one client, the mtu-test fails because of a broken MTU discovery so I have create a special configuration on the server for this client (because "fragment 1300 on the client only breaks everything). OpenVPN drops connection at high load : VPN
OpenVPN TAP adapter MTU in Windows | Hamy - The IT Guy
Under Download and install package, search for luci-app-openvpn, openvpn-easy-rsa and openvpn-openssl. Press OK on each of them to download and install them. 3. Configure OVPN. Navigate to Services → OpenVPN. Type in the name of the OpenVPN instance (eg. OVPN). Select Client configuration for a router multi-client VPN and click Add. I used mtu-test on the client and determined that the MTU size is 997. Using this, I tried the settings (using UDP) tun-mtu 1500. fragment 1000. mssfix. and I'm happy to report that the connection is stable, and fairly fast. Not as fast as the PPTP VPN, but not bad (about 2/3 the speed by unscientific and subjective measures)
Reference manual for OpenVPN 2.4 | OpenVPN
VPN provider: ExpressVPN Connection type: tun Host types: Debian-based, in this case an ESXi VM, but in the past a QNAP with the same behaviour. Policy route method: LAN rule out, by source IP, specifies gateway to be interface of OpenVPN connection, also tags with and is matched on a floating rule on WAN to be dropped (to act as killswitch). Later you say you have a VPN that the packets are coming in on. What is the MTU on the VPN? You also say: But strangely, when I change the mtu to 1200, i get packet loss between 30% and 100%, sometimes fragmenting the packets, sometimes not… I assume this is the VPN? Or is it on the FreeBSD host? This is where Wireshark can come in handy.