Zentyal OpenVPN Performance

If you are running Zentyal Server as a gateway device for OpenVPN you may have noticed that performance is dismal to say the least. I previously wrote an article about Pfsense OpenVPN Performance and it seems as if the same fix also applies to Zentyal Server from version 2.x forward to 3.3 as of this writing.  To implement the fix, fire up WinSCP and login to your Zentyal box and open the file /etc/sysctl.conf. At the bottom of the file add the following lines of code:

# OpenVPN Server Performance Tuning for Zentyal
net.inet.ip.fastfowarding = 1

Next, save the file and reboot the server to enable the new setting. Note you can also fire up terminal and run the command below, but in our testing with Zentyal 3.2 we found that the settings didn’t seem to take until after the reboot occurred.

sudo sysctl -w

Lastly, it is also important to note that like Pfsense this setting cannot be used with IPsec and does not generate ICMP redirects, the former is primarily why it’s off by default.

Did you find this article useful? Why not share it with your friends?

Leave a Reply

Your email address will not be published.

This site uses Akismet to reduce spam. Learn how your comment data is processed.