OPENVPN 现在在国内也会被干扰了吗? - V2EX
V2EX = way to explore
V2EX 是一个关于分享和探索的地方
现在注册
已注册用户请  登录
ksupertu
V2EX    问与答

OPENVPN 现在在国内也会被干扰了吗?

  •  
  •   ksupertu 2014-12-06 19:56:55 +08:00 10696 次点击
    这是一个创建于 3966 天前的主题,其中的信息可能已经有所发展或是发生改变。
    题主有一台内网连接用的openvpn服务器 ubuntu系统 14.04LTS,安装了最新的openvpn服务端,之前好好的,最近连接上之后只有可怜的20kb的传输速度,难道墙对大中国局域网内的特征流量也起作用了?
    8 条回复    2018-11-13 22:25:22 +08:00
    Showfom
        1
    Showfom  
    PRO
       2014-12-06 20:17:53 +08:00 via iPhone
    不科学啊 墙对局域网和国内的网络没有任何屏蔽的 是不是你配置有问题
    Neveroldmilk
        2
    Neveroldmilk  
       2014-12-06 20:44:37 +08:00
    OpenVPN早废了吧。老老实实用SS或者Goagent吧。
    ksupertu
        3
    ksupertu  
    OP
       2014-12-06 20:50:39 +08:00
    @Showfom 通过ssh在服务器端测试wget文件可以跑到2mb/s的速度,通过客户端连接上OPENVPN服务器后,测速为29.7kb/s,客户端所在网络环境本地测试网络连接也是2MB/S,连接上后再测就跪了,ping局域网内其他地址延迟可以到300ms:
    数据包: 已发送 = 240,已接收 = 198,丢失 = 42 (17% 丢失),
    往返行程的估计时间(以毫秒为单位):
    最短 = 40ms,最长 = 334ms,平均 = 101ms
    由于服务器外网防火墙禁ping,无法给出客户端不联网的ping状况
    以下是客户端关键配置

    proto udp
    dev tun

    resolv-retry infinite

    nobind

    persist-key
    persist-tun

    ca ca.crt
    auth-user-pass
    auth-nocache

    ns-cert-type server
    log openvpn.log
    log-append openvpn.log
    comp-lzo

    # Set log file verbosity.
    verb 3
    log-append openvpnlog.log
    # Silence repeating messages
    ;mute 20

    iptables设置如下:
    Chain INPUT (policy DROP)
    target prot opt source destination
    ACCEPT all -- anywhere anywhere
    ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
    ACCEPT all -- anywhere anywhere
    ACCEPT tcp -- anywhere anywhere tcp dpt:urd
    ACCEPT tcp -- anywhere anywhere tcp dpt:pop3
    ACCEPT tcp -- anywhere anywhere tcp dpt:smtp
    ACCEPT tcp -- anywhere anywhere tcp dpt:5555 ;openvpn管理端口
    ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
    ACCEPT udp -- anywhere anywhere udp dpt:openvpn ;openvpn端口
    ACCEPT all -- bogon/24 anywhere
    ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
    ACCEPT all -- anywhere anywhere
    ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
    ACCEPT all -- anywhere anywhere
    ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
    ACCEPT tcp -- anywhere anywhere tcp dpt:http
    ACCEPT tcp -- anywhere anywhere tcp dpt:5555
    ACCEPT tcp -- anywhere anywhere tcp dpt:http-alt
    ACCEPT udp -- anywhere anywhere udp dpt:kerberos
    ACCEPT all -- bogon/24 anywhere

    Chain FORWARD (policy ACCEPT)
    target prot opt source destination
    TCPMSS tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN TCPMSS set 1356
    TCPMSS tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN TCPMSS set 1356
    ACCEPT all -- anywhere anywhere
    ACCEPT all -- anywhere bogon/24
    ufw-before-logging-forward all -- anywhere anywhere
    ufw-before-forward all -- anywhere anywhere
    ufw-after-forward all -- anywhere anywhere
    ufw-after-logging-forward all -- anywhere anywhere
    ufw-reject-forward all -- anywhere anywhere
    ufw-track-forward all -- anywhere anywhere
    ACCEPT all -- anywhere anywhere
    ACCEPT all -- anywhere bogon/24

    Chain OUTPUT (policy ACCEPT)
    target prot opt source destination
    ACCEPT tcp -- anywhere anywhere tcp dpt:5555
    ufw-before-logging-output all -- anywhere anywhere
    ufw-before-output all -- anywhere anywhere
    ufw-after-output all -- anywhere anywhere
    ufw-after-logging-output all -- anywhere anyhere
    ufw-reject-output all -- anywhere anywhere
    ufw-track-output all -- anywhere anywhere

    服务器开始是可以在vpn状态下看高清直播的,最近不知道什么原因彻底变牛车了。。。。
    ksupertu
        4
    ksupertu  
    OP
       2014-12-06 20:52:49 +08:00
    @Neveroldmilk 我这是在国内连接国内的内网环境……为了支持大量客户端的单点登录接入才使用的,不是翻墙用途
    Showfom
        5
    Showfom  
    PRO
       2014-12-06 21:25:38 +08:00 via iPhone
    @Neveroldmilk 他是局域网 和GFW无关

    @ksupertu 你检查下网线和网卡 有时候网线坏了速度跑不上去 无线的话看看路由器限速了嘛
    fewspider
        6
    fewspider  
       2014-12-07 10:27:04 +08:00 via Android
    digitalocean的vps搭建的OpenVPN,感觉速度不及shadowsocks,iPad没越狱,勉强OpenVPN玩玩
    dnsstudio
        7
    dnsstudio  
       2018-11-13 22:25:02 +08:00 via Android
    果断 ssr
    dnsstudio
        8
    dnsstudio  
       2018-11-13 22:25:22 +08:00 via Android
    openVPN 我都自定义加密,防火墙无法识别。
    关于     帮助文档     自助推广系统     博客     API     FAQ     Solana     5443 人在线   最高记录 6679       Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 43ms UTC 08:30 PVG 16:0 LAX 01:30 JFK 04:30
    Do have faith in what you're doing.
    ubao msn snddm index pchome yahoo rakuten mypaper meadowduck bidyahoo youbao zxmzxm asda bnvcg cvbfg dfscv mmhjk xxddc yybgb zznbn ccubao uaitu acv GXCV ET GDG YH FG BCVB FJFH CBRE CBC GDG ET54 WRWR RWER WREW WRWER RWER SDG EW SF DSFSF fbbs ubao fhd dfg ewr dg df ewwr ewwr et ruyut utut dfg fgd gdfgt etg dfgt dfgd ert4 gd fgg wr 235 wer3 we vsdf sdf gdf ert xcv sdf rwer hfd dfg cvb rwf afb dfh jgh bmn lgh rty gfds cxv xcv xcs vdas fdf fgd cv sdf tert sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf shasha9178 shasha9178 shasha9178 shasha9178 shasha9178 liflif2 liflif2 liflif2 liflif2 liflif2 liblib3 liblib3 liblib3 liblib3 liblib3 zhazha444 zhazha444 zhazha444 zhazha444 zhazha444 dende5 dende denden denden2 denden21 fenfen9 fenf619 fen619 fenfe9 fe619 sdf sdf sdf sdf sdf zhazh90 zhazh0 zhaa50 zha90 zh590 zho zhoz zhozh zhozho zhozho2 lislis lls95 lili95 lils5 liss9 sdf0ty987 sdft876 sdft9876 sdf09876 sd0t9876 sdf0ty98 sdf0976 sdf0ty986 sdf0ty96 sdf0t76 sdf0876 df0ty98 sf0t876 sd0ty76 sdy76 sdf76 sdf0t76 sdf0ty9 sdf0ty98 sdf0ty987 sdf0ty98 sdf6676 sdf876 sd876 sd876 sdf6 sdf6 sdf9876 sdf0t sdf06 sdf0ty9776 sdf0ty9776 sdf0ty76 sdf8876 sdf0t sd6 sdf06 s688876 sd688 sdf86