-2

Similar to this question I am looking at connecting 1000's of concurrent users:

OpenVPN performance: how many concurrent clients are possible?

To save CPU cycles I would like to know if there is another solution outside of OpenVPN to bandwidth shape this many concurrent users?

Server Programmer
  • 237
  • 2
  • 4
  • 11
  • I hope to disable your encryption you dont put your job at risk. For stolen data heads got chopped pretty fast. – yagmoth555 May 31 '16 at 23:07
  • @yagmoth555 OpenVPN can be used for more than just security - whoever is down voting this question needs to think outside of the security box :) – Server Programmer Jun 01 '16 at 00:05
  • I will glady upvote if you give me more detail on the use :) as for me a vpn it's to connect from the external to the internal, and having non encrypted channel is a risk for a 'man-in-the-middle' attack – yagmoth555 Jun 01 '16 at 01:23
  • I vote this up, as I can think of possible uses, for example it can be used in an internal network, as a cheap way for certain network scenarios, as shown in http://superuser.com/a/1072188/299628 where no encryption is required. – rda Jun 01 '16 at 08:16
  • @rda I have accepted your answer below - yes, OpenVPN can be used in many scenarios for companies that are outside of just security – Server Programmer Jun 01 '16 at 15:32

2 Answers2

1

From a performance perspective (OpenVPN offers more than just encryption), this is key

After further research, yes you can disable encryption in OpenVPN with these configuration directives:

auth none

cipher none

Set these in your server configuration and you will have no security at all provided by OpenVPN

See for example: http://docs.openvpn.net/under-the-hood/change-encryption-cipher-in-access-server/

Server Programmer
  • 237
  • 2
  • 4
  • 11
1

In this answer an approach is shown to let OpenVPN run with multiple instances for better performance.

As mentioned in this forum post, OpenVPN could run into performance problems when the client count per instance exceeds 200 users, this is because of the monolithic way it was coded in. This will not change until version 3 as stated in the post.

rda
  • 1,947
  • 1
  • 13
  • 22