Book Image

Troubleshooting OpenVPN

By : Eric F Crist
Book Image

Troubleshooting OpenVPN

By: Eric F Crist

Overview of this book

OpenVPN, the most widely used open source VPN package, allows you to create a secure network across systems, keeping your private data secure. Connectivity and other issues are a pain to deal with, especially if they are impacting your business. This book will help you resolve the issues faced by OpenVPN users and teach the techniques on how to troubleshoot it like a true expert. This book is a one stop solution for troubleshooting any issue related to OpenVPN. We will start by introducing you to troubleshooting techniques such as Packet Sniffing, Log Parsing, and OpenSSL. You will see how to overcome operating system specific errors. Later on, you will get to know about network and routing errors by exploring the concepts of IPv4 and IPv6 networking issues. You will discover how to overcome these issues to improve the performance of your OpenVPN deployment. By the end of the book, you will know the best practices, tips, and tricks to ensure the smooth running of your OpenVPN.
Table of Contents (16 chapters)

General network concerns


Apart from routing, there are a few additional networking components that tend to trip up even some advanced server administrators.

Path MTU and MSS

Maximum transmission unit (MTU) problems are some of the most difficult problems to identify. In part, this is due to the odd symptoms that arise when an MTU incompatibility is present. During such a condition, some traffic will seem to function without a problem, whereas other traffic will inexplicably fail.

MTU is the largest packet that can traverse a network link intact. In the event that a larger packet transfer is attempted, it will either fail to reach the remote endpoint, or a fragmentation request will be sent back to the sender. This request tells the previous hop that the packet was too big and specifies how big the next packet should be:

In general, when MTU problems exist, traffic with typically small packets will work without any issue. SSH, for example, sends many small packets during console sessions,...