How to increase IPTV upload speed using OpenVPN

this tutorial will try to explain how to increase your upload speed, it will be very helpful to upload your local IPTV streams to your server.
Introduction:
With OpenVPN you can tunnel any IP subnetwork or virtual Ethernet adapter over a single UDP or TCP port, which will be secure and encrypted.
Below example will explain my scenario:
1- We have here there location, location 1 France , Location 2 UK-London , Location 3 UK-Bristol
2- Location 1: Dedicated server 64 bit (Debain 7) on France Bandwidth 250 MB
3- Location 2 : Ubuntu 14.04 , 64 bit server, 70 MB download & 10 MB upload
4- Location 3 : Ubuntu 14.04 , 64 bit server, 100 MB download & 20 MB upload

We are going to install OpenVPN server on location 1 and OpenVPN client on location 2 and 3. So basically we will have VPN tunnels between location 1, 2 and 3.
The VPN tunnel will have the same speed (download and upload) on our example the tunnel speed will something around 40MB – 55 MB download and upload speed.

How to install and set-up OpenVPN in Debian 7 (Wheezy) location 1
Make sure the Debian system is fully up to date

apt-get update
apt-get upgrade
apt-get dist-upgrade

Verify if TUN support is enabled on the system
use the following one-liner to verify ifTUNsupport is enabled on the Debian system. if using a VPS (Virtual Private Server), some virtualization layers such asvServersandOpenVZrequire TUN to be enabled on/from the host machine.

test ! -c /dev/net/tun && echo openvpn requires tun support || echo tun is available

also for this to work you need to have CONFIG_TUN enabled in the kernel
Install OpenVPN
installOpenVPNusingapt

apt-get install openvpn

Set-up Easy-RSA

set-upeasy-rsain/root/easy-rsa

cp -prv /usr/share/doc/openvpn/examples/easy-rsa/2.0 /root/easy-rsa
cd /root/easy-rsa
cp vars{,.orig}

Set-up default values in Easy-RSA

set-up default values for use by the scripts

vim ./vars
KEY_SIZE=2048
KEY_COUNTRY="MK"
KEY_PROVINCE="MK"
KEY_CITY="Veles"
KEY_ORG="The Streets"
KEY_EMAIL=webmaster@stavrovski.net

Click to expand...

export them

source ./vars

delete previously created certs

./clean-all

Generate the CA certificate

generate the CA certificate using thebuild-cascript

./build-ca

Generate the server certificate

generate VPN server certificate using thebuild-key-serverscript

./build-key-server neutron

• Sign the certificate? [y/n]:y
• 1 out of 1 certificate requests certified, commit? [y/n]y

Generate the Diffie-Hellman PEM certificate

generate the Diffie-Hellman PEM certificate using thebuild-dhscript

./build-dh

Generate client certificate
generate client certificate using thebuild-keyscript

./build-key nexus4

• Sign the certificate? [y/n]:y
• 1 out of 1 certificate requests certified, commit? [y/n]y

Generate (HMAC)

generate secret Hash-based Message Authentication Code (HMAC) using

openvpn --genkey --secret /root/easy-rsa/keys/ta.key

Deploy the certificates

copy the required certificates to the particular machine/device (server or client)

• Thepublicca.crtcertificate is needed on all servers and clients
• Theprivateca.keykey is secret and only needed on the key generating machine
• A server needsserver.crt,dh2048.pem(public),server.keyandta.key(private)
• A client needsclient.crt(public),client.keyandta.key(private)

Set-up certificates and keys on the server

place the certificates and keys on the server in the/etc/openvpn/certsdirectory.

mkdir -p /etc/openvpn/certs
cp -pv /root/easy-rsa/keys/{ca.{crt,key},neutron.{crt,key},ta.key,dh2048.pem} /etc/openvpn/certs/

Configure the OpenVPN server
set-upOpenVPN serverconfiguration file in/etc/openvpn/server.conf

cat > /etc/openvpn/server.conf
port 1194
proto udp
dev tun
ca /etc/openvpn/certs/ca.crt
cert /etc/openvpn/certs/neutron.crt
key /etc/openvpn/certs/neutron.key
dh /etc/openvpn/certs/dh2048.pem
tls-auth /etc/openvpn/certs/ta.key 0
server 192.168.88.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
client-to-client
keepalive 1800 4000
cipher DES-EDE3-CBC # Triple-DES
comp-lzo
max-clients 10
user nobody
group nogroup
persist-key
persist-tun
#log openvpn.log
#status openvpn-status.log
verb 5
mute 20

Click to expand...

Start the OpenVPN server
start theOpenVPN serverand add enable it to run on system's start-up using

service openvpn restart
update-rc.d -f openvpn defaults

Enable forwarding and set-up iptables
enable network forwarding by uncommenting/addingnet.ipv4.ip_forward = 1tosysctl.conf

vim /etc/sysctl.conf
:%s/net.ipv4.ip_forward = 0/net.ipv4.ip_forward = 1/
sysctl –p

set-up the followingiptablesrules

iptables -A INPUT -p udp -m state --state NEW -m udp --dport 1194 -j ACCEPT
iptables -A FORWARD -s 192.168.88.0/24 -j ACCEPT
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -t nat -A POSTROUTING -s 192.168.88.0/24 -o eth0 -j MASQUERADE
# in openvz/vservers you may need the following instead
# iptables -t nat -A POSTROUTING -s 192.168.88.0/24 -j SNAT --to-source <PUBLIC_VPN_IP>
iptables-save > /etc/iptables.rules

Click to expand...

for persistent firewall rules you may want to use theiptables-persistentpackage or just set-up a simple script in/etc/network/if-pre-up.d/which will load the rules in/etc/iptables.rulesusingiptables-restore
for example:

cat /etc/network/if-pre-up.d/iptables
#!/bin/bash
test -e /etc/iptables.rules && iptables-restore -c /etc/iptables.rules

How to install and set-up OpenVPN Client (Ubuntu) location 1 & 2

sudo apt-get install openvpn
sudo cp /usr/share/doc/openvpn/examples/sample-config-files/client.conf /etc/openvpn/

Copy the files ca.crt , clientx.crt , clientx.key and ta key to /home/d/confs or whatever path you like but you edit the path on client.conf.
Create the following client.conf configuration file

cat > /etc/openvpn/client.conf
client
remote <PUBLIC_VPN_IP>
ca /home/d/confs/certs/vpn/ca.crt
cert /home/d/confs/certs/vpn/blackhole.crt
key /home/d/confs/certs/vpn/blackhole.key
cipher DES-EDE3-CBC
comp-lzo yes
dev tun
proto udp
tls-auth /home/d/confs/certs/vpn/ta.key 1
nobind
auth-nocache
script-security 2
persist-key
persist-tun
user nobody
group nogroup

Click to expand...

restart openvpn

service openvpn restart

• IPTV Panel v1.2.1
• How to install Tvheadend with transcoding support
• Xtream - Codes ipTV Panel [ 1000 Connections ]