Need VPN experts !

jake3340 · Jan 28, 2015

I was reading somewhere that when creating an open vpn server on a vps server it is possible to share the bandwith speed from the VPS server to a desktop pc that is running a client side software for openvpn.

For example

My vps server has openvpn server installed with 100mbit down and 100mbit up

if i connect to the vps server from my desktop pc it creates a sort of tunnel and allows me to connect to any online site and download stuff at that speed. Is this trough or am I missing something ?

jake3340 · Jan 28, 2015

Here is the tutorial I found maybe I explained it wrong in my previous post.

He claims to have made it work.

In this tutorial will try to explain how to increase your upload speed
Introduction:
With OpenVPN you can tunnel any IP subnetwork or virtual Ethernet adapter over a single UDP or TCP port, which will be secure and encrypted.
Below example will explain my scenario:
1- We have here there location, location 1 France , Location 2 UK-London , Location 3 UK-Bristol
2- Location 1: Dedicated server 64 bit (Debain 7) on France Bandwidth 250 MB
3- Location 2 : Ubuntu 14.04 , 64 bit server, 70 MB download & 10 MB upload
4- Location 3 : Ubuntu 14.04 , 64 bit server, 100 MB download & 20 MB upload

We are going to install OpenVPN server on location 1 and OpenVPN client on location 2 and 3. So basically we will have VPN tunnels between location 1, 2 and 3.
The VPN tunnel will have the same speed (download and upload) on our example the tunnel speed will something around 40MB - 55 MB download and upload speed.

How to install and set-up OpenVPN in Debian 7 (Wheezy) location 1
Make sure the Debian system is fully up to date
apt-get update
apt-get upgrade
apt-get dist-upgrade
Verify if TUN support is enabled on the system
use the following one-liner to verify ifTUNsupport is enabled on the Debian system. if using a VPS (Virtual Private Server), some virtualization layers such asvServersandOpenVZrequire TUN to be enabled on/from the host machine.

test ! -c /dev/net/tun && echo openvpn requires tun support || echo tun is available
also for this to work you need to have CONFIG_TUN enabled in the kernel
Install OpenVPN
installOpenVPNusingapt
apt-get install openvpn

Set-up Easy-RSA

set-upeasy-rsain/root/easy-rsa

cp -prv /usr/share/doc/openvpn/examples/easy-rsa/2.0 /root/easy-rsa
cd /root/easy-rsa
cp vars{,.orig}

Set-up default values in Easy-RSA

set-up default values for use by the scripts

vim ./vars
KEY_SIZE=2048
KEY_COUNTRY="MK"
KEY_PROVINCE="MK"
KEY_CITY="Veles"
KEY_ORG="The Streets"
[email protected]
Click to expand...

export them

source ./vars

delete previously created certs

./clean-all

Generate the CA certificate

generate the CA certificate using thebuild-cascript

./build-ca

Generate the server certificate

generate VPN server certificate using thebuild-key-serverscript

./build-key-server neutron

Sign the certificate? [y/n]:y
1 out of 1 certificate requests certified, commit? [y/n]y
Generate the Diffie-Hellman PEM certificate

generate the Diffie-Hellman PEM certificate using thebuild-dhscript

./build-dh

Generate client certificate
generate client certificate using thebuild-keyscript

./build-key nexus4

Sign the certificate? [y/n]:y
1 out of 1 certificate requests certified, commit? [y/n]y
Generate (HMAC)

generate secret Hash-based Message Authentication Code (HMAC) using

openvpn --genkey --secret /root/easy-rsa/keys/ta.key

Deploy the certificates

copy the required certificates to the particular machine/device (server or client)

Thepublicca.crtcertificate is needed on all servers and clients
Theprivateca.keykey is secret and only needed on the key generating machine
A server needsserver.crt,dh2048.pem(public),server.keyandta.key(private)
A client needsclient.crt(public),client.keyandta.key(private)
Set-up certificates and keys on the server

place the certificates and keys on the server in the/etc/openvpn/certsdirectory.

mkdir -p /etc/openvpn/certs
cp -pv /root/easy-rsa/keys/{ca.{crt,key},neutron.{crt,key},ta.key,dh2048.pem} /etc/openvpn/certs/

Configure the OpenVPN server
set-upOpenVPN serverconfiguration file in/etc/openvpn/server.conf

cat > /etc/openvpn/server.conf
port 1194
proto udp
dev tun
ca /etc/openvpn/certs/ca.crt
cert /etc/openvpn/certs/neutron.crt
key /etc/openvpn/certs/neutron.key
dh /etc/openvpn/certs/dh2048.pem
tls-auth /etc/openvpn/certs/ta.key 0
server 192.168.88.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
client-to-client
keepalive 1800 4000
cipher DES-EDE3-CBC # Triple-DES
comp-lzo
max-clients 10
user nobody
group nogroup
persist-key
persist-tun
#log openvpn.log
#status openvpn-status.log
verb 5
mute 20
Click to expand...

Start the OpenVPN server
start theOpenVPN serverand add enable it to run on system's start-up using
service openvpn restart
update-rc.d -f openvpn defaults

Enable forwarding and set-up iptables
enable network forwarding by uncommenting/addingnet.ipv4.ip_forward = 1tosysctl.conf

vim /etc/sysctl.conf
:%s/net.ipv4.ip_forward = 0/net.ipv4.ip_forward = 1/
sysctl -p

set-up the followingiptablesrules
iptables -A INPUT -p udp -m state --state NEW -m udp --dport 1194 -j ACCEPT
iptables -A FORWARD -s 192.168.88.0/24 -j ACCEPT
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -t nat -A POSTROUTING -s 192.168.88.0/24 -o eth0 -j MASQUERADE
# in openvz/vservers you may need the following instead
# iptables -t nat -A POSTROUTING -s 192.168.88.0/24 -j SNAT --to-source <PUBLIC_VPN_IP>
iptables-save > /etc/iptables.rules
Click to expand...

for persistent firewall rules you may want to use theiptables-persistentpackage or just set-up a simple script in/etc/network/if-pre-up.d/which will load the rules in/etc/iptables.rulesusingiptables-restore
for example:
cat /etc/network/if-pre-up.d/iptables
#!/bin/bash
test -e /etc/iptables.rules && iptables-restore -c /etc/iptables.rules

How to install and set-up OpenVPN Client (Ubuntu) location 1 & 2
sudo apt-get install openvpn
sudo cp /usr/share/doc/openvpn/examples/sample-config-files/client.conf /etc/openvpn/

Copy the files ca.crt , clientx.crt , clientx.key and ta key to /home/d/confs or whatever path you like but you edit the path on client.conf.
Create the following client.conf configuration file

cat > /etc/openvpn/client.conf
client
remote <PUBLIC_VPN_IP>
ca /home/d/confs/certs/vpn/ca.crt
cert /home/d/confs/certs/vpn/blackhole.crt
key /home/d/confs/certs/vpn/blackhole.key
cipher DES-EDE3-CBC
comp-lzo yes
dev tun
proto udp
tls-auth /home/d/confs/certs/vpn/ta.key 1
nobind
auth-nocache
script-security 2
persist-key
persist-tun
user nobody
group nogroup
Click to expand...

restart openvpn
service openvpn restart
Click to expand...

jake3340 · Jan 29, 2015

Anyone got any info ?

lushpin · Feb 22, 2015

jake3340 said: ↑

Anyone got any info ?
Click to expand...

You'll always be limited by the bandwith you have available on your connection at home/wherever your desktop is.
Let's say you have a 15/1 connection, then your max download speed will still be 15Mbit. Even if you route your traffic through a tunnel.

papercut · Mar 17, 2015

As lushpin stated, you will never get any quicker that your connection bottleneck.

sohom · Mar 17, 2015

not possible
at last your ISP need to receive your VPN data
so ISP download(receiving) speed is the limit

Log in or Sign up

Need VPN experts !

jake3340 Supreme Member

jake3340 Supreme Member

jake3340 Supreme Member

lushpin Newbie

papercut Junior Member

sohom Senior Member

Log in or Sign up

Need VPN experts !

jake3340 Supreme Member

jake3340 Supreme Member

jake3340 Supreme Member

lushpin Newbie

papercut Junior Member

sohom Senior Member

Useful Searches