[Solved] Bad Speeds

Post your questions about SoftEther VPN software here. Please answer questions if you can afford.
Post Reply
calimansi
Posts: 18
Joined: Fri Mar 15, 2013 4:48 pm

[Solved] Bad Speeds

Post by calimansi » Fri Mar 15, 2013 4:53 pm

Hello,

Very interesting software.

I was able to setup softether as a server on an Ubuntu VPS. It is running as an OpenVPN emulator. I am able to connect to the server using Viscosity and it works!

The only bad thing is the speed. When I run a speed test at Speedtest.net my download speed is around 4 Mbps with a 3 Mbps upload. Without connecting to the server, I get 15 Mbps download and 7 Mbps upload.

I really want to get this software to run correctly as I see a LOT more potential with it compared to the traditional VPN servers. As the description indicates that the server is faster than an OpenVPN server, I want to know how to get the performance increased.

Please advise.

Thank you.
Last edited by calimansi on Tue Mar 19, 2013 7:28 am, edited 1 time in total.

dnobori
Posts: 228
Joined: Tue Mar 05, 2013 10:04 am

Re: Bad Speeds

Post by dnobori » Fri Mar 15, 2013 5:01 pm

You use SecureNAT?

If so, SecureNAT has very low performance. Rather, use Local Bridge.
http://www.softether.org/4-docs/1-manua ... al_Bridges

Note that Local Bridge works when the vpnserver process is running on root privilege. And Local Bridge requires Promiscuous Mode on the Network Adapter which you want to bridge. If your VPN server is on a VM, you have to permit Promiscuous Mode on the VM settings.

dnobori
Posts: 228
Joined: Tue Mar 05, 2013 10:04 am

Re: Bad Speeds

Post by dnobori » Fri Mar 15, 2013 5:05 pm

Note also that: You must turn off the SecureNAT function if your Local Bridge is activated.

Please also read "11.1.7 The CPU load increases after enabling Virtual NAT for SecureNAT".
http://www.softether.org/4-docs/1-manua ... _SecureNAT.

calimansi
Posts: 18
Joined: Fri Mar 15, 2013 4:48 pm

Re: Bad Speeds

Post by calimansi » Fri Mar 15, 2013 5:07 pm

Wow. Thanks for the very quick reply.

I will attempt to set up a local bridge later today. I do have root access on the VPS. I have access to an OpenVZ server. Hopefully there are no issues with that.

I will post a reply on this later today.

calimansi
Posts: 18
Joined: Fri Mar 15, 2013 4:48 pm

Re: Bad Speeds

Post by calimansi » Fri Mar 15, 2013 6:06 pm

Hello again,

I issued the BridgeDeviceList command and no devices are present in the list. Does this mean I cannot use a local bridge? I'm thinking it's because it's virtual environment. My ethernet device is not eth0, but rather venet0 because it's an OpenVZ system.

Please advise.

Thank you.

dnobori
Posts: 228
Joined: Tue Mar 05, 2013 10:04 am

Re: Bad Speeds

Post by dnobori » Fri Mar 15, 2013 6:22 pm

Sorry I don't know about OpenVZ well.

Make sure that vpnserver process is running as root. Otherwise, local bridge fails.

calimansi
Posts: 18
Joined: Fri Mar 15, 2013 4:48 pm

Re: Bad Speeds

Post by calimansi » Fri Mar 15, 2013 6:39 pm

I read more of your manual and it indicates that I can use the TUN/TAP device. I know that TUN/TAP is compiled into the kernel that I'm using and the device does show up in /dev/net/tun. The only thing is that the tap interface does not show up when I run ifconfig. Do you know how to use TUN/TAP with SoftEther?

dnobori
Posts: 228
Joined: Tue Mar 05, 2013 10:04 am

Re: Bad Speeds

Post by dnobori » Fri Mar 15, 2013 7:26 pm

Hi,

If you use Windows SoftEther VPN Server Manager, you can define tap device on the local bridge setting screen.

If you use vpncmd, use "BridgeCreate" command with "/TAP" argument.
Please see "6.3.38 "BridgeCreate": Create Local Bridge Connection" at
http://bit.ly/ZVRLVR

calimansi
Posts: 18
Joined: Fri Mar 15, 2013 4:48 pm

Re: Bad Speeds

Post by calimansi » Fri Mar 15, 2013 9:20 pm

Unfortunately, I don't think this is going to work for me.

I am able to access the tap interface, but I can't get the DHCP to issue it an IP. To my understanding I need to bridge tap0 to venet0, which I do not think is allowed.

venet0 is my virtual ethernet device. Can this be reached from softether?

Any other hints?

Thanks again.

calimansi
Posts: 18
Joined: Fri Mar 15, 2013 4:48 pm

Re: Bad Speeds

Post by calimansi » Sat Mar 16, 2013 2:32 am

Ok, one more try.

How do I configure the DHCP server (isc-dhcp-server) to work with a tap0 interface? I think this is the last piece that needed...

Thanks again for all your help dnobori!!

calimansi
Posts: 18
Joined: Fri Mar 15, 2013 4:48 pm

Re: Bad Speeds

Post by calimansi » Sun Mar 17, 2013 6:40 am

Hello,

Ok. So close, yet so far away.

I can connect to the softether server using openvpn. Softether will assign an IP address to the computer connected using the virtual dhcp server. I can ping other devices that are logged into the server and even the servers outside IP address. Anything beyond that, I cannot get to (the main internet).

The softether server is connected to a TAP_ device. I assigned the TAP device the first IP address from the virtual dhcp server (192.168.30.1). I'm not sure if this is advisable.

I've tried using iptables to either do POSTROUTING or MASQUERADING.

Any other hints?

Thanks again.

calimansi
Posts: 18
Joined: Fri Mar 15, 2013 4:48 pm

Re: Bad Speeds

Post by calimansi » Tue Mar 19, 2013 7:21 am

Everything works now!!

I just want to confirm that the server works great on a VPS.

The special clue that I'll provide is not to use any of the built in virtual dhcp server or virtual nat / secure nat if you want to get the best possible speed.

I'm using isc-dhcp-server with the TAP bridge. Also, the iptables command is:

iptables -t nat -A POSTROUTING -s YOUR.SUBNET -j SNAT --to-source VPSIP

Good luck!

gavstah
Posts: 61
Joined: Wed Jun 05, 2013 11:33 pm
Location: Glen Allen, Virginia USA
Contact:

Re: [Solved] Bad Speeds

Post by gavstah » Thu Aug 01, 2013 9:00 pm

@calimansi

Do you happen to have a howto of how you got this going?

I'm having the devil of a time getting softether to work on a VPS using the virtual venet* interface
Top Punkawallah
The VPN Company
http://goo.gl/iu6wG

calimansi
Posts: 18
Joined: Fri Mar 15, 2013 4:48 pm

Re: [Solved] Bad Speeds

Post by calimansi » Fri Aug 02, 2013 2:17 am

Are you using openvz?

If so, check out this thread:

http://lowendtalk.com/discussion/8783/s ... n-software

See if you can piece the posts together to get what you need.

gavstah
Posts: 61
Joined: Wed Jun 05, 2013 11:33 pm
Location: Glen Allen, Virginia USA
Contact:

Re: [Solved] Bad Speeds

Post by gavstah » Mon Aug 19, 2013 2:31 pm

I looked through that but still not seeing how to do this.

Has anyone written a howto on how to do this on a VPS? I'd be willing to pay someone for their time to walk me through the setup.

All good wishes,

Gavin

calimansi wrote:
> Are you using openvz?
>
> If so, check out this thread:
>
>
> http://lowendtalk.com/discussion/8783/s ... n-software
>
> See if you can piece the posts together to get what you need.
Top Punkawallah
The VPN Company
http://goo.gl/iu6wG

calimansi
Posts: 18
Joined: Fri Mar 15, 2013 4:48 pm

Re: [Solved] Bad Speeds

Post by calimansi » Tue Aug 20, 2013 7:25 pm

gavstah wrote:
> I looked through that but still not seeing how to do this.
>
> Has anyone written a howto on how to do this on a VPS? I'd be willing to pay someone
> for their time to walk me through the setup.
>
> All good wishes,
>
> Gavin
>
> calimansi wrote:
> > Are you using openvz?
> >
> > If so, check out this thread:
> >
> >
> >
> http://lowendtalk.com/discussion/8783/s ... n-software
> >
> > See if you can piece the posts together to get what you need.

I don't mind playing consultant.

Email me: clstuff-hi (at) hotmail (dot) com

mat_rapit
Posts: 14
Joined: Mon Dec 08, 2014 4:17 am

Re: Bad Speeds

Post by mat_rapit » Fri Dec 12, 2014 3:53 pm

Can you help with tutorial on how to fixed speed on Windows 7 using bridge? Ive setup the server on my windows 7 (bridge) but the client site got very bad speed.


calimansi wrote:
> Everything works now!!
>
> I just want to confirm that the server works great on a VPS.
>
> The special clue that I'll provide is not to use any of the built in
> virtual dhcp server or virtual nat / secure nat if you want to get the best
> possible speed.
>
> I'm using isc-dhcp-server with the TAP bridge. Also, the iptables command
> is:
>
> iptables -t nat -A POSTROUTING -s YOUR.SUBNET -j SNAT --to-source VPSIP
>
> Good luck!

thisjun
Posts: 2458
Joined: Mon Feb 24, 2014 11:03 am

Re: [Solved] Bad Speeds

Post by thisjun » Thu Dec 25, 2014 6:42 am

>mat_rapit
I recommend create a new board.

Post Reply