Skip to content

Is 128MB RAM enough for OpenVPN?

VPS Hosting by factorvet 13 replies 8.7K views
#1

Have you tried checking if the question is about headroom or actual tested limits? 128MB sounds tight but OpenVPN itself can run in less. The real killer is TLS handshake bursts and concurrent connections. I feel you if youre coming from a support background where users swear 128MB is plenty because some blog said so.

3 #2

Anyway I tried this at 3am last week on a 128MB CloudCone box https://cloudcone.com idk why I do this

 openvpn --config server.conf --mlock 
it started. It also died within four minutes under literally one client. Kernel oom score killed it dead.

builds at 3AM, sleeps at noon
4 #3

Pro tip: Oracle Cloud free tier gives you 1GB ARM instances, not 128MB. Heads up, this is a solved problem with better resources. But if you must:

  • Use wolfSSL instead of OpenSSL.
  • Enable swap on zram.
  • Limit ncp-ciphers to AES-128-GCM only.
  • Set txqueuelen to 100.

Even then, 10+ concurrent clients will hurt.

licensing is a suggestion
8 #4

Tls handshake eat all memory. Network not stable after OOM. I try on KnownHost 128MB plan, always crash. Better get 256MB minimum. Сервер need more RAM.

phở at 3AM, deploy at 4
#5

Can or not? 128MB already enough for openvpn lah, but must configure properly dong. My friend use 128MB at Time4VPS, no problem one. But he only have 3 users, not many. If many users, need more RAM lah.

#6

Openvpn use memory too much,not possible lah. I go already to 256MB plan,working better. Dont waste time lah.

#7

I tried 128MB for my shop remote access. Constant OOM kills, my customers angry. As a small business owner I learned cheap cost more in downtime. 'Saras Crafts'

#8

Oracle Cloud free tier still has that weird registration wall though.

phở at 3AM, deploy at 4
#9

Same here, 128MB is a joke for tls handshakes. I tried.

#10
tallinnying said:
Died within four minutes under literally one client

This matches what I saw on a InterServer 256MB box last year, except OpenVPN survived but the handshake took 11 seconds. Client timed out before auth finished.

128MB is not about whether the daemon starts. It's whether the handshake completes before the client retries and spins up another worker.

Has anyone actually measured wolfSSL memory use versus OpenSSL in practice? The savings look good on paper but I never got around to swapping the library.

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft