OpenVPN - VPN Not Working good

[haim9080]

Hello everyone, I made an OPENVPN server in FULL TUNNEL.
Now I have a section that I connect to through my iPhone, and every time it just disconnects when I lock the iPhone and reconnects when I open it and it doesn't stay stable..
And I'm trying to figure out if it's a problem with OPENVPN or OPNSENSE or my iPhone?

At the same time, is WIREGUARD better? I tried to configure it and failed..

[nero355]

At the same time, is WIREGUARD better?

For your battery useage it 100% is according to many users :)

[haim9080]

At the same time, is WIREGUARD better?

For your battery useage it 100% is according to many users :)

My battery in iphone working well good :) hahah
So what the solution about that case ??

[nero355]

So what the solution about that case ??

Not using any VPN stuff on any kind of device these days, sorry! :)

[Patrick M. Hausen]

@haim9080 if you want any help, you need to be way more specific. WireGuard is generally easier to set up for a site to site VPN or a single (or a handful of) road warrior(s). It offers a modern design, relies on PKI only, good performance. It does not offer centralised management, user authentication via external sources (LDAP, Active Directory, ...) etc.

What exactly did you do when you "tried and failed"? What do you want to achieve in the first place? Are you managing both the OPNsense firewall and the client endpoints?

[viragomann]

My battery in iphone working well good :) hahah
So what the solution about that case ??

But possibly your iPhone halts the VPN app to spare battery.
If this is the case, there should be an option to disable battery management for this app.

[sopex8260]

There are generally around zero reasons to use openvpn.

Wireguard/ tailscale/ netbird

Or ipsec

[Patrick M. Hausen]

There are generally around zero reasons to use openvpn.

OpenVPN over WireGuard: corporate context with individual authentication via e.g. LDAP.
OpenVPN over IPsec: Xauth exists, but clients for common desktop and mobile OSes are open source and way simpler to configure.

[viragomann]

And obviously only OpenVPN has reasonable routing features for road warriors.

[nero355]

There are generally around zero reasons to use openvpn.

AFAIK Wireguard has no DHCP Server option while OpenVPN does ?!

So if you have a lot of users you need to connect to your network then OpenVPN could be the better choice :)

Unless you feel like configuring 100 or so peers manually ofcourse... LOL!

tailscale/ netbird

Or ipsec

For now I would skip the first two and the last one feels outdated/deprecated after all these years...