Many pfSense users use mssfix 1400 After normal ip overhead and openvpn overhead, if memory serves me well that would allow a tcp packet of I believe 1412 or something. That means an mss clamped to 1400 should never go above that threshold. The reason you can ping 1460 is because of compression.

Speed up OpenVPN and get faster speed over its channel Additionally, you can try experimenting with MTU and MSSFIX parameters, if you know what you are doing. Try with these lines in your config: tun-mtu 1400 mssfix 1360. In the most common case, MTU on the physical interface is 1500, so it is better to set OpenVPN TUN MTU to a value lower than the real MTU, and MSSFIX to MTU-40, as in the example OpenVPN / Re: [Openvpn-users] Wrong warning about mssfix Yes, probably that message needs to be changed. What's it's really trying to say is that since mssfix is turned on by default in 2.0 (you can disable it with --mssfix 0), you should just leave the TUN/TAP mtu at 1500 and let mssfix and/or fragment deal with the fragmentation issues.

If the key has already been generated it will only #generate the configuration file for OpenVPN #VARIABLES #If you don't set a remote (the external IP of the server or the hostname) #the script will try to gather it using dig #You need to change the port to the one set in your server #if you want to add new directive to client configuration use

For example, if your subnet is 192.168.4.0 netmask 255.255.255.0, then OpenVPN will take the IP address 192.168.4.0 to use as the virtual DHCP server address. In –dev tun mode, OpenVPN will cause the DHCP server to masquerade as if it were coming from the remote endpoint. The optional offset parameter is an integer which is > -256 and < 256

question in the OpenVPN FAQ seems to describe my problem exactly, but using mssfix and fragment still does not seem to do much to improve the situation. My main test is to copy a 2MB file over the VPN with scp. It will copy about 192kbytes, and then report a - stalled - state. If I wait a couple of seconds it will start copying again, and then

OpenVPN Connect is the only VPN client that is created, developed, and maintained by OpenVPN Inc. itself! Whether you want to set up VPN for a large company, protect your home Wi-Fi, connect securely via a public internet hotspot, or use your mobile device on the road, OpenVPN Connect uses cutting-edge technology to ensure your privacy and safety. Using OPENVPN_OPTS breaks container · Issue #21 · bubuntux