OpenVPN on Softether Server is Much slower than OpenVPNserve

[bbk1674]

OpenVPN on Sroftether Server is Much slower than OpenVPN serve:
I am running 2 softether Server with all functions active,
I am mostly using the OpenVPN on Mobiles/tunnelblick for mac and the softether VPN client for widows
servers are windows 7 64 but VPS.
as you see I am using the OpenVPN clone function for almost everything except the Windows Client.
Now in Comparison an OpenVPN server running on e.g Ubuntu that I testes gives me up to 4 times speed when I compare the speed test. ie, 24 mps/6 mps
-Keep in mind I am comparing the softether on windows with 4 times the RAM Memory than what the ubuntu server has.
What do you think the issue can be?
I thought running it on windows is giving me this issue, but I am not very successful installing in on a centos with given instructions. so I could not perform that particular test(softether on windows vs softether on CenOS.
Please Help

[thisjun]

Please show configurations about both server and client.

[bbk1674]

thisjun wrote
> Please show configurations about both server and client.
Please instruct me: what do you exactly need?
I am using TCP 443, 8080
UDP 1056 and 1194
Tested on My android phone
all of them tested on the SE server gives me a much lower speed than port UDP 1056 on an openvpn community version
What do you exactly mean by configurations?

[thisjun]

How did you test speed on Android?

Please read forum guideline.
http://www.vpnusers.com/viewtopic.php?f=7&t=2790
I need these information.

[bbk1674]

[attachment=1]Local Bridge Error.JPG[/attachment]thisjun wrote:
> How did you test speed on Android?
>
> Please read forum guideline.
> http://www.vpnusers.com/viewtopic.php?f=7&t=2790
> I need these information.
1- I use the Speedtest by ookla speedtest.net on android and apple ow windows, to test spees.
my main concern is now the openVPN for mobile devices because I use the softether windows clien or SSTP on windows and L2TP or in some cases open vpn again on MacOSX, for my clients from Iran or china where cannot use L2TP,(I wish there was an easy to deploy client for MacOSX from softether.
2- I am Using a VPS running windows 7 professional
Here is IPCONFIG /all
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\babak>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : TPSAms
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection 2: #(LOCAL AREA Connection)

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Red Hat VirtIO Ethernet Adapter #2
Physical Address. . . . . . . . . : 5A-00-00-08-87-E4
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::11:5b9:7bdc:f3cf%14(Preferred)
IPv4 Address. . . . . . . . . . . : 10.99.0.10(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :
DHCPv6 IAID . . . . . . . . . . . : 341442560
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1C-D3-89-E0-0C-C4-7A-58-3D-AA

DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Local Area Connection: #(Internet)

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Red Hat VirtIO Ethernet Adapter
Physical Address. . . . . . . . . : 0C-C4-7A-58-3D-AA
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:19f0:xxxx:xxxx:306b:b79e:eed4:ba4c(P
referred)
Temporary IPv6 Address. . . . . . : 2001:19f0:xxxx:xxxx:f54e:d624:d2c0:bdad(P
referred)
Link-local IPv6 Address . . . . . : fe80::306b:b79e:eed4:ba4c%10(Preferred)
IPv4 Address. . . . . . . . . . . : 185.92.xxx.xxx(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.254.0
Lease Obtained. . . . . . . . . . : September-13-15 3:29:54 PM
Lease Expires . . . . . . . . . . : September-13-15 8:56:13 PM
Default Gateway . . . . . . . . . : fe80::fcc4:7aff:fe58:3daa%10
185.92.xxx.1
DHCP Server . . . . . . . . . . . : 169.254.169.254
DNS Servers . . . . . . . . . . . : 108.61.10.10
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{0FD4D17C-BD03-4BE6-9F27-15502EBB81BF}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{28E9C670-6E58-4BBF-B338-7A1F3DCB688B}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
#DONE
3- MSinfo32
OS Name Microsoft Windows 7 Professional
Version 6.1.7601 Service Pack 1 Build 7601
Other OS Description Not Available
OS Manufacturer Microsoft Corporation
System Name TPSAMS
System Manufacturer QEMU
System Model Standard PC (i440FX + PIIX, 1996)
System Type x64-based PC
Processor Virtual CPU e7da7129d3ee, 2400 Mhz, 1 Core(s), 1 Logical Processor(s)
BIOS Version/Date SeaBIOS rel-1.8.1-0-g4adadbd-20150316_085822-nilsson.home.kraxel.org, 01/04/2014
SMBIOS Version 2.8
Windows Directory C:\Windows
System Directory C:\Windows\system32
Boot Device \Device\HarddiskVolume1
Locale Canada
Hardware Abstraction Layer Version = "6.1.7601.17514"
User Name Not Available
Time Zone Eastern Daylight Time
Installed Physical Memory (RAM) 1.00 GB
Total Physical Memory 1.00 GB
Available Physical Memory 469 MB
Total Virtual Memory 2.73 GB
Available Virtual Memory 503 MB
Page File Space 1.73 GB
Page File C:\pagefile.sys
4- VPN Server Buil 9570 Version 4.1.
I always update to the latest Versions
5-VPN server
6- I only have the windows Firewall I have tried all possiblities(see 7)
7- Yes I do Use Secure NAT and Virtual DHCP,
I suspected that would be the speed problem factor but I cannot turn it off and make the server work at the same time.
I have tried making a local bridge instead and keeping the DHCP on as well, also mixing it with turning the windows FW off completely.
on The client side (windows)I get e connection to the server and can ping the server but doesn't relay me to the internet.
openvpn clients gets and authentication error and cannot connect completely

I would really appreciate your help.
please see the server logs and the errors screenshots.
P.S cannot attach the server Log file it is larger than 2 MG
so Here is the link: http://1drv.ms/1FGxSVc

[thisjun]

Did SecureNAT work in a kernel mode?

[bbk1674]

thisjun wrote:
> Did SecureNAT work in a kernel mode?


Hello
I am sorry I don't exactly know what you mean by Kernel mode.
but SecureNAT works Greatly Functional in Windows 7 soft-ether Server and Fedora Soft-ether VPN server.
it only works with it as I know how to work with it.
I wish I knoew how to work this without SecureNAT and with local bridging so I could be sure that this Lower speed of OpenVPN Clonse server is not because of the SecureNAT function?
If I didn't answer correctly due to not understanding the nature of your question would you care to explain more?
Thank you

[thisjun]

You can check it at "View SecureNAT operating status".

[bbk1674]

thisjun wrote:
> You can check it at "View SecureNAT operating status".

Thank you for instruction: both on Windindows and Fedora Servers they are not operating in Kernel Mode.
it says : no.
is this good?
what is the next step?

[thisjun]

Usermode SecureNAT is slow.
Please update SoftEther.
Latest version supports raw-mode SecureNAT.

[bbk1674]

Thank you for your reply, as I am Using the Latest version available
Could you please instruct me how to disable the user mode and Enable the Raw mode at the same time.
I was able to disable the user mode but then the server doesn't work any more.
I was not able to find Raw more.
Are you saying the Kernel mode should be enabled and if yes, how do I do that?
please instruct