ExpressVPN and OpnSense

[JairoAV25]

Hi Guys.

This is my first post here in the community. I just deploy OPNsense 21.1.1 in a Laptop with one single NIC and a capable vlan switch (Tp Link TL-SG108E 5.0 ) and everything goes smooth

I configured successfully ExpressVPN to fully forward my Home Network (Including Chromecast and so) thru ExpressVPN servers. The connection is OK. I can reach the internet, surf the web, and ifconfig.co or whatsmyipadress.com show me that I am using the ExpressVPN IP and a DNS test leak is showing me Cloudfare DNS and not my ISP ones. BUT, when I open Amazon Prime Video, Netflix, or Disney none of these sites fully loads. They stuck loading the thumbnails. In some cases, I reach the movie but cannot reproduce it. If I use the ExpressVPN Native app everything works as expected.

I haven't contacted ExpressVPN support because I first want to be sure is not a misconfiguration done by myself (btw I followed this wiki: https://www.expressvpn.com/es/support/vpn-setup/pfsense-with-expressvpn-openvpn/)

You guys can tell me any clues on this? Is there someone outside using ExpressVPN + OpnSense with success?. I can share the config snapshots In case anyone is able to help.

Thanks in advance.

[Aleppo]

run a speed test.  openvpn performance is probably much worse than an unprotected connection and whatever the app uses (ipsec or wireguard, not sure).

[JairoAV25]

Nope. The performance is OK. In fact, It is better than I expected. I have 100/10 Internet connection and these are my results using Washintong server:

❯ speedtest
Retrieving speedtest.net configuration...
Testing from ExpressVPN (45.41.180.55)...
Retrieving speedtest.net server list...
Selecting best server based on ping...
Hosted by Windstream (Ashburn, VA) [5.58 km]: 133.538 ms
Testing download speed................................................................................
Download: 85.96 Mbit/s
Testing upload speed...
Upload: 8.99 Mbit/s


I'm in South America so the ping is a bit  high but nothing to be worried about

Finally, the issue is sorted out.  Probably there was some cache thing going around but today all streaming sites are loading OK showing USA contents. Thanks.

[akurmann]

The problem is, that you need to use the DNS-server you get back from ExpressVPN. You can check that on your tablet or PC, when you are connected to an Express VPN server.
In OpnSense you can derive the DNS server from the Virtual.Addr. you find in VPN.OpenVPN.Connectionstatus. e.g. your virtual address ist: 10.12.12.103 then your gateway and DNS server is: 10.12.12.1
But be aware, that your IP address may change if you reconnect.

[arthurdaire]

Hi JairoAV25,

Came across this 2021 post. I am having an issue setting up the expressVP using the same guide you mentioned in your post. The issue is  on Encryption Algorithm setup. On the drop down menu, there is no  AES-256-GCM (cipher AES-256-GCM from the configuration file). How did you go about this step?

Thank you