Messages

Fresh install of 17.7.12_1, working like a charm with no errors and no glitches...such a shame to see such issues with a major stable release but I'll upgrade some day when I have more time! Tried all remedies from within this thread as well as a fresh install and reconfiguration but it simply wouldn't work. Very pleased with my current setup and it gives me the piece of mind I need when surfing the web and streaming. Hopefully OpenVPN or OPNsense releases a fix for the issue!

The activity and help within this thread is very much appreciated, I will check the Unbound DNS when I get home tonight. I plan on maybe a fresh install later to try and figure this out.

I'll definitely give it a try! And for the individual asking for the OpenVPN configuration, it is as follows...

Code Select Expand

<openvpn>
<openvpn-client>
<auth_user>-_-</auth_user>
<auth_pass>-_-</auth_pass>
<protocol>UDP</protocol>
<dev_mode>tun</dev_mode>
<server_addr>us-east.privateinternetaccess.com</server_addr>
<server_port>1194</server_port>
<resolve_retry>yes</resolve_retry>
<proxy_authtype>none</proxy_authtype>
<mode>p2p_tls</mode>
<crypto>BF-CBC</crypto>
<digest>SHA1</digest>
<engine>none</engine>
<verbosity_level>1</verbosity_level>
<interface>wan</interface>
<vpnid>1</vpnid>
<custom_options>
persist-key persist-tun tls-client remote-cert-tls server comp-lzo reneg-sec 0
</custom_options>
<caref>57c8e024416d2</caref>
<certref/>
</openvpn-client>
</openvpn>


Obviously the user info is different. I have bypass routing through a manual NAT configuration that allows traffic through WAN instead of the tunnel for certain specified IPs within aliases. Just frustrated because it's worked flawlessly for so long on older versions of pfSense and OPNsense(which I obviously switched to) when I made the switch I made some edits to the config file so it would import but if others are having similar issues I'm pegging it more on OpenVPNs issues and not so much the config but who knows!

That's such a bummer. I wonder what's causing the issue...Should have know not to upgrade so close to the release date. Hoping a hotfix comes around so I can retain my OpenVPN functionality because not using one skeeves me out a bit...

Just updated mine to 8.1, I run a full network OpenVPN tunnel with alias bypasses for platforms like Netflix and Amazon Video. Upon updating I'm unable to connect to a number of sites like opnsense.org, privateinternetaccess.com, stackoverflow.com, Reddit, the list goes on but there's also a ton of sites that work too...I ended up restoring from backup with no positive outcome. Attributing this to OpenVPN as well because once disabled the network connects perfectly fine.

Does anyone have any insight as to the configuration of an IPSec VPN tunnel through Private Internet Access? They provide the username and password to the node of your choice and I've heard that it's the way to go to avoid the OpenVPN bottleneck of single-threadedness.

I have recently upgraded to a 1 Gigabit connection and I've been using a Full network routed VPN tunnel using OpenVPN with alias exceptions for Netflix and Amazon Video material. This has been working swimmingly until I upgraded to the 1 Gigabit connection because my OpenVPN connection has been throttled to ~350Mbps because of the single-threaded limitations of the tunnel itself.  Has anyone done such a setup using IPSec instead? I've done quite a bunch of research through the pfSense forum as well as OPNsense and it appears as if I may be biting off more than I can chew. I'm very capable of probably making it work but any information before that could help is appreciated! BTW OPNsense ROCKS...switched from pfSense developmental and I love the stability and how frequently it is updated and supported...Not liking where pfSense is heading in terms of Netgate.

My box information is as follows:

Mini-ITX OPNsense Firewall
Motherboard - Gigabyte GA-J1900N-D3V
CPU - Intel Celeron J1900
Ram - G.SKILL 8GB (2 x 4GB) DDR3L SO-DIMM 1333 (PC3L 10666)
SSD - PNY 240GB
PSU - SilverStone Technology 450W SFX 80 PLUS GOLD
Case - Cooler Master Elite 110
VPN - OpenVPN (Private Internet Access)

~K1LL3RY0