Jump to content
Not connected, Your IP: 18.117.101.7
h000k

Pimp my AirVPN connection - log file included

Recommended Posts

Disclaimer: "Pimp my.." is a reference to a once popular MTV show which centered on individuals submitting their vehicles with the goal of getting them optimized/upgraded.  I'm not referring to sexual exploitation/slavery/trafficking or anything of the like.

 

In the same spirit as that MTV show, I'm submitting my AirVPN log file to the kind folks of this community in case there is something in it which implies room for improvement.  I have a 100 Mbps Comcast connection, a Docsis 3 modem (SB6141), an 802.11ac router (Asus AC68U) and my primary client is a MacBook with a 802.11 ac wireless adapter.  I'm using the SSL port because it seems Comcast throttles the UDP ports on my connection.

Anyhow, thanks in advance for any suggestions you might have to improve my vpn speeds.

 

I 2015.06.15 20:17:13 - AirVPN client version: 2.9.2, System: OSX, Name: 10.10.3, Architecture: x64
. 2015.06.15 20:17:13 - Reading options from /Users/k3/.airvpn/AirVPN.xml
. 2015.06.15 20:17:13 - Data Path: /Users/k3/.airvpn
. 2015.06.15 20:17:13 - App Path: /Users/k3/Downloads/AirVPN.app/Contents/MacOS
. 2015.06.15 20:17:13 - Executable Path: /Users/k3/Downloads/AirVPN.app/Contents/MacOS/AirVPN
. 2015.06.15 20:17:13 - Command line arguments (0):
. 2015.06.15 20:17:13 - Updating systems & servers data ...
. 2015.06.15 20:17:13 - Operating System: Unix 14.3.0.0 - Darwin K3-MBP 14.3.0 Darwin Kernel Version 14.3.0: Mon Mar 23 11:59:05 PDT 2015; root:xnu-2782.20.48~5/RELEASE_X86_64 x86_64
I 2015.06.15 20:17:13 - OpenVPN Driver - Expected
I 2015.06.15 20:17:13 - OpenVPN - Version: OpenVPN 2.3.6 (/Users/k3/Downloads/AirVPN.app/Contents/MacOS/openvpn)
I 2015.06.15 20:17:13 - SSH - Version: OpenSSH_6.2p2, OSSLShim 0.9.8r 8 Dec 2011 (/usr/bin/ssh)
I 2015.06.15 20:17:13 - SSL - Version: stunnel 5.09 (/Users/k3/Downloads/AirVPN.app/Contents/MacOS/stunnel)
! 2015.06.15 20:17:13 - Activation of Network Lock - OS X - PF
. 2015.06.15 20:17:13 - OS X - PF rules updated, reloading
I 2015.06.15 20:17:13 - Session starting.
I 2015.06.15 20:17:13 - IPv6 disabled on network adapter (Wi-Fi)
I 2015.06.15 20:17:13 - IPv6 disabled on network adapter (802.11n NIC)
I 2015.06.15 20:17:13 - IPv6 disabled on network adapter (Bluetooth DUN)
I 2015.06.15 20:17:13 - IPv6 disabled on network adapter (Bluetooth PAN)
I 2015.06.15 20:17:13 - IPv6 disabled on network adapter (Thunderbolt Bridge)
. 2015.06.15 20:17:19 - Systems & servers data update completed
I 2015.06.15 20:17:20 - Checking authorization ...
! 2015.06.15 20:17:21 - Connecting to Gorgonea (Canada, Toronto, Ontario)
. 2015.06.15 20:17:21 - SSL > 2015.06.15 20:17:21 LOG5[140735214396160]: stunnel 5.09 on x86_64-apple-darwin14.0.0 platform
. 2015.06.15 20:17:21 - SSL > 2015.06.15 20:17:21 LOG5[140735214396160]: Compiled/running with OpenSSL 1.0.1k 8 Jan 2015
. 2015.06.15 20:17:21 - SSL > 2015.06.15 20:17:21 LOG5[140735214396160]: Threading:PTHREAD Sockets:SELECT,IPv6 TLS:ENGINE,OCSP,PSK,SNI
. 2015.06.15 20:17:21 - SSL > 2015.06.15 20:17:21 LOG5[140735214396160]: Reading configuration from file /Users/k3/.airvpn/ada3ff893750cbebf56d9630cb59bb7f22c9c240e191e2a2a756fd3b844d30d1.tmp.ssl
. 2015.06.15 20:17:21 - SSL > 2015.06.15 20:17:21 LOG5[140735214396160]: UTF-8 byte order mark not detected
. 2015.06.15 20:17:21 - SSL > 2015.06.15 20:17:21 LOG6[140735214396160]: Initializing service [openvpn]
. 2015.06.15 20:17:21 - SSL > 2015.06.15 20:17:21 LOG5[140735214396160]: Configuration successful
. 2015.06.15 20:17:21 - OpenVPN > OpenVPN 2.3.6 x86_64-apple-darwin14.0.0 [sSL (OpenSSL)] [LZO] [MH] [iPv6] built on Jan 12 2015
. 2015.06.15 20:17:21 - OpenVPN > library versions: OpenSSL 1.0.1k 8 Jan 2015, LZO 2.08
. 2015.06.15 20:17:21 - SSL > 2015.06.15 20:17:21 LOG5[4502421504]: Service [openvpn] accepted connection from 127.0.0.1:61388
. 2015.06.15 20:17:21 - SSL > 2015.06.15 20:17:21 LOG6[4502421504]: s_connect: connecting 104.254.90.252:443
. 2015.06.15 20:17:21 - OpenVPN > MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:3100
. 2015.06.15 20:17:21 - OpenVPN > Control Channel Authentication: tls-auth using INLINE static key file
. 2015.06.15 20:17:21 - OpenVPN > Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2015.06.15 20:17:21 - OpenVPN > Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2015.06.15 20:17:21 - OpenVPN > Socket Buffers: R=[131072->65536] S=[131072->524288]
. 2015.06.15 20:17:21 - OpenVPN > Attempting to establish TCP connection with [AF_INET]127.0.0.1:52398 [nonblock]
. 2015.06.15 20:17:21 - SSL > 2015.06.15 20:17:21 LOG5[4502421504]: s_connect: connected 104.254.90.252:443
. 2015.06.15 20:17:21 - SSL > 2015.06.15 20:17:21 LOG5[4502421504]: Service [openvpn] connected remote server from 192.168.1.137:61389
. 2015.06.15 20:17:21 - SSL > 2015.06.15 20:17:21 LOG6[4502421504]: SNI: sending servername: 104.254.90.252
. 2015.06.15 20:17:21 - SSL > 2015.06.15 20:17:21 LOG6[4502421504]: CERT: Locally installed certificate matched
. 2015.06.15 20:17:21 - SSL > 2015.06.15 20:17:21 LOG5[4502421504]: Certificate accepted at depth=0: C=IT, ST=Italy, L=Perugia, O=AirVPN, OU=stunnel, CN=stunnel.airvpn.org, emailAddress=info@airvpn.org
. 2015.06.15 20:17:21 - SSL > 2015.06.15 20:17:21 LOG6[4502421504]: SSL connected: new session negotiated
. 2015.06.15 20:17:21 - SSL > 2015.06.15 20:17:21 LOG6[4502421504]: Negotiated TLSv1.2 ciphersuite ECDHE-RSA-AES256-GCM-SHA384 (256-bit encryption)
. 2015.06.15 20:17:22 - OpenVPN > TCP connection established with [AF_INET]127.0.0.1:52398
. 2015.06.15 20:17:22 - OpenVPN > TCPv4_CLIENT link local: [undef]
. 2015.06.15 20:17:22 - OpenVPN > TCPv4_CLIENT link remote: [AF_INET]127.0.0.1:52398
. 2015.06.15 20:17:22 - OpenVPN > TLS: Initial packet from [AF_INET]127.0.0.1:52398, sid=40042412 088cd224
. 2015.06.15 20:17:23 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org
. 2015.06.15 20:17:23 - OpenVPN > Validating certificate key usage
. 2015.06.15 20:17:23 - OpenVPN > ++ Certificate has key usage  00a0, expects 00a0
. 2015.06.15 20:17:23 - OpenVPN > VERIFY KU OK
. 2015.06.15 20:17:23 - OpenVPN > Validating certificate extended key usage
. 2015.06.15 20:17:23 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
. 2015.06.15 20:17:23 - OpenVPN > VERIFY EKU OK
. 2015.06.15 20:17:23 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org
. 2015.06.15 20:17:25 - OpenVPN > Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
. 2015.06.15 20:17:25 - OpenVPN > Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2015.06.15 20:17:25 - OpenVPN > Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
. 2015.06.15 20:17:25 - OpenVPN > Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2015.06.15 20:17:25 - OpenVPN > Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 4096 bit RSA
. 2015.06.15 20:17:25 - OpenVPN > [server] Peer Connection Initiated with [AF_INET]127.0.0.1:52398
. 2015.06.15 20:17:27 - OpenVPN > SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
. 2015.06.15 20:17:28 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.50.0.1,comp-lzo no,route-gateway 10.50.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.50.0.126 255.255.0.0'
. 2015.06.15 20:17:28 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified
. 2015.06.15 20:17:28 - OpenVPN > OPTIONS IMPORT: LZO parms modified
. 2015.06.15 20:17:28 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified
. 2015.06.15 20:17:28 - OpenVPN > OPTIONS IMPORT: route options modified
. 2015.06.15 20:17:28 - OpenVPN > OPTIONS IMPORT: route-related options modified
. 2015.06.15 20:17:28 - OpenVPN > OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
. 2015.06.15 20:17:28 - OpenVPN > ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
. 2015.06.15 20:17:28 - OpenVPN > Opened utun device utun0
. 2015.06.15 20:17:28 - OpenVPN > do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
. 2015.06.15 20:17:28 - OpenVPN > /sbin/ifconfig utun0 delete
. 2015.06.15 20:17:28 - OpenVPN > NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
. 2015.06.15 20:17:28 - OpenVPN > /sbin/ifconfig utun0 10.50.0.126 10.50.0.126 netmask 255.255.0.0 mtu 1500 up
. 2015.06.15 20:17:28 - OpenVPN > /sbin/route add -net 10.50.0.0 10.50.0.126 255.255.0.0
. 2015.06.15 20:17:28 - OpenVPN > add net 10.50.0.0: gateway 10.50.0.126
. 2015.06.15 20:17:28 - OpenVPN > /sbin/route add -net 127.0.0.1 192.168.1.1 255.255.255.255
. 2015.06.15 20:17:28 - OpenVPN > add net 127.0.0.1: gateway 192.168.1.1
. 2015.06.15 20:17:28 - OpenVPN > /sbin/route add -net 0.0.0.0 10.50.0.1 128.0.0.0
. 2015.06.15 20:17:28 - OpenVPN > add net 0.0.0.0: gateway 10.50.0.1
. 2015.06.15 20:17:28 - OpenVPN > /sbin/route add -net 128.0.0.0 10.50.0.1 128.0.0.0
. 2015.06.15 20:17:28 - OpenVPN > add net 128.0.0.0: gateway 10.50.0.1
. 2015.06.15 20:17:28 - OpenVPN > /sbin/route add -net 104.254.90.252 192.168.1.1 255.255.255.255
. 2015.06.15 20:17:28 - OpenVPN > add net 104.254.90.252: gateway 192.168.1.1
. 2015.06.15 20:17:28 - Starting Management Interface
. 2015.06.15 20:17:28 - OpenVPN > Initialization Sequence Completed
I 2015.06.15 20:17:28 - DNS of a network adapter forced (Wi-Fi)
I 2015.06.15 20:17:28 - DNS of a network adapter forced (802.11n NIC)
I 2015.06.15 20:17:28 - DNS of a network adapter forced (Bluetooth DUN)
I 2015.06.15 20:17:28 - DNS of a network adapter forced (Bluetooth PAN)
I 2015.06.15 20:17:28 - DNS of a network adapter forced (Thunderbolt Bridge)
I 2015.06.15 20:17:28 - Flushing DNS
. 2015.06.15 20:17:28 - OS X - PF rules updated, reloading
I 2015.06.15 20:17:28 - Checking route
I 2015.06.15 20:17:30 - Checking DNS
! 2015.06.15 20:17:31 - Connected.
. 2015.06.15 20:17:31 - OpenVPN > MANAGEMENT: Client connected from [AF_INET]127.0.0.1:3100
. 2015.06.15 20:17:31 - OpenVpn Management > >INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info
 

 

 

 

 

 

 

Share this post


Link to post

Hello!

 

. 2015.06.15 20:17:21 - OpenVPN > Socket Buffers: R=[131072->65536] S=[131072->524288]

 

While the OpenVPN send buffer is appropriate for your line (even too big), the receive buffer could be too small for a 100 Mbit/s line, try to force it to 131072 bytes (currently OpenVPN shrinks it to 65536 bytes, we see from the logs).

 

In Eddie 2.10.1 Experimental you can set buffers size in "AirVPN" -> "Preferences" -> "Advanced" -> "General", and anyway Eddie 2.10.1 sets them to 131072 bytes by default.

 

In Eddie versions older than 2.10.1 you can set buffers size with the OpenVPN directives "sndbuf" and "rcvbuf". In your case:

rcvbuf 131072

 

Put the above line in the "Custom" field that you can see in "AirVPN" -> "Preferences" -> "Advanced" -> "OVPN Directives".

 

On Comcast traffic shaping can be intermittent (it is applied at their discretion even according to customer behavior, see https://airvpn.org/topic/14078-slow-download-speed-hezepersei-fremontca-servers/page-2?do=findComment&comment=27026 ), so your protocol choice could be correct, but you can also test UDP, it's worth a try.

 

Kind regards

Share this post


Link to post

What the Staff said

 

If the speeds are still aren't what they should be - try not using wifi and don't be afraid to server hop. Good routing to the server is often more important than the distance from the server.

Share this post


Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
  • Security Check
    Play CAPTCHA Audio
    Refresh Image

×
×
  • Create New...