Book Image

Troubleshooting OpenVPN

By : Eric F Crist
Book Image

Troubleshooting OpenVPN

By: Eric F Crist

Overview of this book

OpenVPN, the most widely used open source VPN package, allows you to create a secure network across systems, keeping your private data secure. Connectivity and other issues are a pain to deal with, especially if they are impacting your business. This book will help you resolve the issues faced by OpenVPN users and teach the techniques on how to troubleshoot it like a true expert. This book is a one stop solution for troubleshooting any issue related to OpenVPN. We will start by introducing you to troubleshooting techniques such as Packet Sniffing, Log Parsing, and OpenSSL. You will see how to overcome operating system specific errors. Later on, you will get to know about network and routing errors by exploring the concepts of IPv4 and IPv6 networking issues. You will discover how to overcome these issues to improve the performance of your OpenVPN deployment. By the end of the book, you will know the best practices, tips, and tricks to ensure the smooth running of your OpenVPN.
Table of Contents (16 chapters)

Routing path performance


Another component that is generally outside the control of a network operator is the overall network path. Peering agreements between upstream providers will determine the final path traffic with traverse. This path will often be weighted toward monetary cost and not always network path cost.

For many years, I ran the network for a small company in Minneapolis, MN, with the majority of our customers being local to Minneapolis. On occasion, I would receive complaints of slow performance of our network as customers attempted to communicate with our systems.

After troubleshooting, we would identify a slow hop in the path between their systems and our systems. The most frustrating part was, physically, our facilities were only 10 or so miles apart (16 km), but the network path would go approximately 400 miles (645 km) to Chicago and another 400 miles back.

At the time, due to our hosting situation, we did not have the tools or agreements in place to change the network routing...