V2EX = way to explore
V2EX 是一个关于分享和探索的地方
现在注册
已注册用户请  登录
V2EX 提问指南
ksupertu
V2EX  ›  问与答

OPENVPN 现在在国内也会被干扰了吗?

  •  
  •   ksupertu · 2014-12-06 19:56:55 +08:00 · 10236 次点击
    这是一个创建于 3658 天前的主题,其中的信息可能已经有所发展或是发生改变。
    题主有一台内网连接用的openvpn服务器 ubuntu系统 14.04LTS,安装了最新的openvpn服务端,之前好好的,最近连接上之后只有可怜的20kb的传输速度,难道墙对大中国局域网内的特征流量也起作用了?
    8 条回复    2018-11-13 22:25:22 +08:00
    Showfom
        1
    Showfom  
       2014-12-06 20:17:53 +08:00 via iPhone
    不科学啊 墙对局域网和国内的网络没有任何屏蔽的 是不是你配置有问题
    Neveroldmilk
        2
    Neveroldmilk  
       2014-12-06 20:44:37 +08:00
    OpenVPN早废了吧。老老实实用SS或者Goagent吧。
    ksupertu
        3
    ksupertu  
    OP
       2014-12-06 20:50:39 +08:00
    @Showfom 通过ssh在服务器端测试wget文件可以跑到2mb/s的速度,通过客户端连接上OPENVPN服务器后,测速为29.7kb/s,客户端所在网络环境本地测试网络连接也是2MB/S,连接上后再测就跪了,ping局域网内其他地址延迟可以到300ms:
    数据包: 已发送 = 240,已接收 = 198,丢失 = 42 (17% 丢失),
    往返行程的估计时间(以毫秒为单位):
    最短 = 40ms,最长 = 334ms,平均 = 101ms
    由于服务器外网防火墙禁ping,无法给出客户端不联网的ping状况
    以下是客户端关键配置

    proto udp
    dev tun

    resolv-retry infinite

    nobind

    persist-key
    persist-tun

    ca ca.crt
    auth-user-pass
    auth-nocache

    ns-cert-type server
    log openvpn.log
    log-append openvpn.log
    comp-lzo

    # Set log file verbosity.
    verb 3
    log-append openvpnlog.log
    # Silence repeating messages
    ;mute 20

    iptables设置如下:
    Chain INPUT (policy DROP)
    target prot opt source destination
    ACCEPT all -- anywhere anywhere
    ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
    ACCEPT all -- anywhere anywhere
    ACCEPT tcp -- anywhere anywhere tcp dpt:urd
    ACCEPT tcp -- anywhere anywhere tcp dpt:pop3
    ACCEPT tcp -- anywhere anywhere tcp dpt:smtp
    ACCEPT tcp -- anywhere anywhere tcp dpt:5555 ;openvpn管理端口
    ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
    ACCEPT udp -- anywhere anywhere udp dpt:openvpn ;openvpn端口
    ACCEPT all -- bogon/24 anywhere
    ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
    ACCEPT all -- anywhere anywhere
    ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
    ACCEPT all -- anywhere anywhere
    ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
    ACCEPT tcp -- anywhere anywhere tcp dpt:http
    ACCEPT tcp -- anywhere anywhere tcp dpt:5555
    ACCEPT tcp -- anywhere anywhere tcp dpt:http-alt
    ACCEPT udp -- anywhere anywhere udp dpt:kerberos
    ACCEPT all -- bogon/24 anywhere

    Chain FORWARD (policy ACCEPT)
    target prot opt source destination
    TCPMSS tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN TCPMSS set 1356
    TCPMSS tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN TCPMSS set 1356
    ACCEPT all -- anywhere anywhere
    ACCEPT all -- anywhere bogon/24
    ufw-before-logging-forward all -- anywhere anywhere
    ufw-before-forward all -- anywhere anywhere
    ufw-after-forward all -- anywhere anywhere
    ufw-after-logging-forward all -- anywhere anywhere
    ufw-reject-forward all -- anywhere anywhere
    ufw-track-forward all -- anywhere anywhere
    ACCEPT all -- anywhere anywhere
    ACCEPT all -- anywhere bogon/24

    Chain OUTPUT (policy ACCEPT)
    target prot opt source destination
    ACCEPT tcp -- anywhere anywhere tcp dpt:5555
    ufw-before-logging-output all -- anywhere anywhere
    ufw-before-output all -- anywhere anywhere
    ufw-after-output all -- anywhere anywhere
    ufw-after-logging-output all -- anywhere anywhere
    ufw-reject-output all -- anywhere anywhere
    ufw-track-output all -- anywhere anywhere

    服务器开始是可以在vpn状态下看高清直播的,最近不知道什么原因彻底变牛车了。。。。
    ksupertu
        4
    ksupertu  
    OP
       2014-12-06 20:52:49 +08:00
    @Neveroldmilk 我这是在国内连接国内的内网环境……为了支持大量客户端的单点登录接入才使用的,不是翻墙用途
    Showfom
        5
    Showfom  
       2014-12-06 21:25:38 +08:00 via iPhone
    @Neveroldmilk 他是局域网 和GFW无关

    @ksupertu 你检查下网线和网卡 有时候网线坏了速度跑不上去 无线的话看看路由器限速了嘛
    fewspider
        6
    fewspider  
       2014-12-07 10:27:04 +08:00 via Android
    digitalocean的vps搭建的OpenVPN,感觉速度不及shadowsocks,iPad没越狱,勉强OpenVPN玩玩
    dnsstudio
        7
    dnsstudio  
       2018-11-13 22:25:02 +08:00 via Android
    果断 ssr
    dnsstudio
        8
    dnsstudio  
       2018-11-13 22:25:22 +08:00 via Android
    openVPN 我都自定义加密,防火墙无法识别。
    关于   ·   帮助文档   ·   博客   ·   API   ·   FAQ   ·   实用小工具   ·   5057 人在线   最高记录 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 21ms · UTC 08:28 · PVG 16:28 · LAX 00:28 · JFK 03:28
    Developed with CodeLauncher
    ♥ Do have faith in what you're doing.