Hello everybody,
do you consider adding of these features to final 3.0 version of RouterOS?
- more OpenVPN ciphers, especially for example BF-CBC with lower key sizes like 64 and 32 bits (“big” OpenVPN supports it and I think that it can help with performance of OpenVPN tunnel)
- more descriptive OpenVPN logging under ovpn “category”, something like big OpenVPN does, it’s really useful for debugging
I tried OpenVPN client with standard BF-CBC 128bit encryption and SHA1 authentication on RB133 and RB532A and the performance is very poor (I have expected it on RB133). The worst thing is that when router reaches near 100% of CPU utilization, it sometimes drops OpenVPN connection (it is reestablished after a couple of seconds). Any ideas why is that? When I try it without encryption and authentication (“plain” tunnel) it remains stable even near 100% of CPU utilization. I can’t find anything usable in logs, only something like ovpn disconnected … On the OpenVPN server (Linux computer) it says that there was an error while decrypting packet and kills the connection.
Byebye