How come my self-hosted VPN is not solving my issue connecting to work?! reddit / selfhosted ---------------------------------------------------------------------- IWantArchlinux · 2023-12-06 22:55 I got hired to work from a country called C1, and later I moved to another one, C2. My job is remote, so my company was cool with it. But now, I'm having a big issue connecting to work. In C2, the internet is fast and stable. I can use commercial VPNs (and my own VPN in C1) with no problem. But when I try to connect to my company's VPN, everything slows down a lot, almost to a stop. My internet speed in C2 is good, around 100 Mbps. But when I connect to work, it drops to almost zero, and the ping is super high at 2000 ms. My internet in C2 is fiber (100Mbps down & up), and it's very stable. My company uses OpenVPN, and they say C2 is blocking our connection: *"We believe that ISPs block OpenVPN traffic through deep package inspection, and they apply a QOS rules to heavily throttle to the point that where it's unusable."* In an attempt to resolve the issue, I rented a VPS in C1 and installed both OpenVPN and WireGuard on it. Here are the outcomes: - C2 -> OpenVPN -> C1 (20 down, 6 up) - C2 -> WireGuard -> C1 (40 down, 70 up) - C2 -> OpenVPN -> C1 -> Work (6 down, 0.8 up) - C2 -> WireGuard -> C1 -> Work (12 down, 0.2 up) I've tested with different internet providers quickly, and I've used two routers, both default settings. Nothing work. I cannot figure out how my VPS VPN solution didn't work. Can anyone help? ---------------------------------------------------------------------- bz386 · 2023-12-06 23:34 This is really a networking question and does not belong in selfhosted. I'll still try to answer it . Looking at the traceroute output, it seems like C2 is on another continent than C1 as there's a 140 ms jump in hop 10. This will certainly cause performance issues, specifically latency in any interactive sessions (f.e. SSH would have noticeable latency when typing interactively). What happens if you try to access other web sites while your C2->C1 VPN is up and running? Do you also see performance issues? Can you try a SSH tunnel from C2->C1 and then VPN over that? ---------------------------------------------------------------------- Legitimate_Farm_3095 · 2023-12-06 23:54 try /r/networkinghelp /r/networking /r/HomeNetworking etc ---------------------------------------------------------------------- phein4242 · 2023-12-07 00:26 Check your routing tables ---------------------------------------------------------------------- IWantArchlinux · 2023-12-07 06:59 C2 & C1 are in the same continent. But you're right. After inspecting the route, it really goes to a different continent then goes back. I can access everything normally while using C2->C1 VPN. > Can you try a SSH tunnel from C2->C1 and then VPN over that? Do you mean to try to connect to my work from the machine in C1 while I am being in C2? If so, then unfortunately i can't. My working laptop it per-configured with the VPN client, and I can't do much because I don't have admin privilege. (My VPN to C1 is set up on my router) ---------------------------------------------------------------------- RedditSlayer2020 · 2023-12-07 07:47 Nice the only real important information would be the names of country C1 & C2 Agencies so agree interested in you already have your profile and know C1 C2 Average selfhost Bob couldn't care less about C1 C2 You coming to the Internet asking for a solution to your problem hiding important information due a distorted sense of privacy makes no sense. It's obviously a political reason, either geopolitical between countries or company politics like firewalling throttling content... ---------------------------------------------------------------------- RedditSlayer2020 · 2023-12-07 07:52 No he mea t try tunneling the vpn connection inside a ssh tunnel. With that approach you mask your vpn connection signature. Dude you are a complete mess ---------------------------------------------------------------------- Cell-Thick · 2023-12-07 14:06 Take a look at your mss and MTU settings. You might be getting fragmentation. You might need to reduce it. You can use ping to work out the optimum setting. If adjusting that doesn't work you might need to adjust the mss. I had a similar issue when using either OpenVPN or wireguard. My pings wouldnt show any noticeable speed issues, DNS also worked fine. But if I did anything with larger it would croke. It might work briefly then die. I had to adjust the MTU and mss. As soon as I did that things worked perfectly. ---------------------------------------------------------------------- kmisterk · 2023-12-12 16:26 ## Post Removed Hey, IWantArchlinux! Thanks for your submission on selfhosted. Your post has been removed due to a violation of the purpose of the subreddit: **Self Hosting** ## Not Self-Hosted When it comes to posts regarding applications in this subreddit, they must feature a self-hosted tool, or a tool that *can be* self-hosted, or some kind of related information, help request, or otherwise related to a tool that is something that one can self-host. If you believe this post *is in fact* relevant to /r/selfhosted, feel free to [message the mods](https://www.reddit.com/message/compose/?to= /r/selfhosted&subject=Removed For Not Being Self- Hosted&message=[Removed Post](https://www.reddit.com/r/selfhosted/comments/18cgqsw/-/\)) with your concerns.