Linux – Monitor OpenVPN User Bandwidth Usage

debianlinuxopenvpn

So i've been researching this as much as possible and i haven't found a specific result.

I'm trying to monitor the incoming and outgoing bandwidth of OpenVPN users, i'm removing as many logs as possible for security reasons on the server, so how can i still monitor and limit the bandwidth of a user without monitoring what they're doing, etc.

Best Answer

I monitor and log the user bandwith storing the information from openvpn-status.log using the script below

https://github.com/jofrep/scripts/blob/master/openvpn/log-openvpn-users.pl

Related Solutions

Linux – how can I limit per user bandwidth

Just to add on the above question.

You could use iptables with user matching to color the packets like so:

iptables -t mangle -A OUTPUT -p tcp -m owner --uid-owner someuser -j MARK --set-mark 100

And then use 'tc' to limit on a per user basis.

Linux – Limit incoming and outgoing bandwidth and latency in linux

I finally settled for just setting the outgoing bandwidth/latency on the server, and then doing the same on the client, effectively reaching the same result.

These are the commands I ran on the server and client respectively to reach my goals:

Server: 4 Mbit 50 ms

tc qdisc add dev eth0 handle 1: root htb default 11
tc class add dev eth0 parent 1: classid 1:1 htb rate 1000Mbps
tc class add dev eth0 parent 1:1 classid 1:11 htb rate 4Mbit
tc qdisc add dev eth0 parent 1:11 handle 10: netem delay 50ms

Client: 512 kbit 50 ms

tc qdisc add dev vmnet1 handle 1: root htb default 11
tc class add dev vmnet1 parent 1: classid 1:1 htb rate 1000Mbps
tc class add dev vmnet1 parent 1:1 classid 1:11 htb rate 512kbit
tc qdisc add dev vmnet1 parent 1:11 handle 10: netem delay 50ms