Have you tried checking if the question is about headroom or actual tested limits? 128MB sounds tight but OpenVPN itself can run in less. The real killer is TLS handshake bursts and concurrent connections. I feel you if youre coming from a support background where users swear 128MB is plenty because some blog said so.
Is 128MB RAM enough for OpenVPN?
Anyway I tried this at 3am last week on a 128MB CloudCone box https://cloudcone.com idk why I do this
openvpn --config server.conf --mlock it started. It also died within four minutes under literally one client. Kernel oom score killed it dead.
Pro tip: Oracle Cloud free tier gives you 1GB ARM instances, not 128MB. Heads up, this is a solved problem with better resources. But if you must:
- Use wolfSSL instead of OpenSSL.
- Enable swap on zram.
- Limit ncp-ciphers to AES-128-GCM only.
- Set txqueuelen to 100.
Even then, 10+ concurrent clients will hurt.
Tls handshake eat all memory. Network not stable after OOM. I try on KnownHost 128MB plan, always crash. Better get 256MB minimum. Сервер need more RAM.
Can or not? 128MB already enough for openvpn lah, but must configure properly dong. My friend use 128MB at Time4VPS, no problem one. But he only have 3 users, not many. If many users, need more RAM lah.
Openvpn use memory too much,not possible lah. I go already to 256MB plan,working better. Dont waste time lah.
I tried 128MB for my shop remote access. Constant OOM kills, my customers angry. As a small business owner I learned cheap cost more in downtime. 'Saras Crafts'
Oracle Cloud free tier still has that weird registration wall though.
Same here, 128MB is a joke for tls handshakes. I tried.
This matches what I saw on a InterServer 256MB box last year, except OpenVPN survived but the handshake took 11 seconds. Client timed out before auth finished.
128MB is not about whether the daemon starts. It's whether the handshake completes before the client retries and spins up another worker.
Has anyone actually measured wolfSSL memory use versus OpenSSL in practice? The savings look good on paper but I never got around to swapping the library.