ANSWERED Asus AC86U and OpenVPN over SSL

[Mar0Li 0]

Hi everyone,

 

I'm quite new to the forums and I was wondering if anyone could help with a question I have regarding the asus AC86U router.

 

When I tested airvpn a few weeks ago (using Eddie on Windows 10), I realised that my ISP is probably throttling speeds for openvpn as I was only getting 60-70 Mbps when using UDP / TCP, but over 180 - 190 Mbps when forcing an SSH connection.

 

I am thinking of buying the Asus AC86U, but I don't want to end up with an expensive piece of kit that doesn't work with my ISP and I was wondering if anyone knows whether I can configure the router to use SSH rather than UDP / TCP?

 

Thanks in advance

[go558a83nk 362]

Yes though I don't know if you need to install entware for just SSH tunnel.

 

I've done it in the past with an old asus router with merlin and entware.  SSL tunnel too.

[2Cents 7]

I recommend autossh via entware on the 86u running RMerlin firmware.. works brilliantly with speeds reaching 30 to 45Mbps. If these speeds are slow for you, then your next best option is a dedicated pfsense hardware appliance or virtualized instance running on a AES-NI enabled system with at least 2.4GHz (dual core or better) base core speeds for  > 100Mbps tunneled traffic speeds.

 

Did you try connecting using tls-crypt enabled profiles on port 443 tcp/udp?

[jme2017 0]

I'm using an ac86u + stunnel and get about 85Mbps, see my post here
https://www.snbforums.com/threads/release-asuswrt-merlin-384-10-is-now-available.55742/page-36#post-481507

using test detailed here: 

I get these results on asus rt-ac86u:
# openvpn --genkey --secret /tmp/secret
# time openvpn --test-crypto --secret /tmp/secret --verb 0 --tun-mtu 20000 --cipher aes-256-cbc
Sat May  4 19:23:26 2019 disabling NCP mode (--ncp-disable) because not in P2MP client or server mode
real    0m 3.20s
user    0m 3.19s
sys     0m 0.00s

3200 / 3.2 = 1000 (Projected Maximum OpenVPN Performance in Mbps)

I get these results on netgear R7000:
# openvpn --genkey --secret /tmp/secret
# time openvpn --test-crypto --secret /tmp/secret --verb 0 --tun-mtu 20000 --cipher aes-256-cbc
Sun Jun 23 22:59:20 2019 disabling NCP mode (--ncp-disable) because not in P2MP client or server mode
real    0m 26.12s
user    0m 25.88s
sys     0m 0.20s

3200 / 3.2 = 122.5 (Projected Maximum OpenVPN Performance in Mbps)