## OpenVPN 2.4 UDP server config file

multihome

cd /etc/openvpn/chroot

## UDP server specific options
proto udp4
dev tun0
replay-window 80 20
fast-io
link-mtu 1420
status /var/log/openvpn/status.udp.server.txt 10
log-append /var/log/openvpn/udp.server.log
replay-persist /var/log/openvpn/replay-persist.udp.server.txt
## END UDP server specific options

## TCP server specific options
# proto tcp4
# dev tun1
# link-mtu 1420
# tcp-nodelay
# tcp-queue-limit 64
# status /var/log/openvpn/status.tcp.server.txt 10
# log-append /var/log/openvpn/tcp.server.log
# replay-persist /var/log/openvpn/replay-persist.tcp.server.txt
## END TCP server specific options

lport 443
server 172.16.16.0 255.255.255.0 nopool
ifconfig-pool 172.16.16.0 172.16.16.254 255.255.255.0

topology subnet
status-version 1
tls-timeout 2
reneg-sec 3600

ca /etc/openvpn/server/keys/ca.crt
cert /etc/openvpn/server/keys/server.crt
key /etc/openvpn/server/keys/server.key
dh /etc/openvpn/server/keys/dh.pem
crl-verify crl.pem
tls-auth /etc/openvpn/server/keys/ta.key 0

nice 5
max-clients 1024

user openvpn
group openvpn

cipher AES-256-GCM
auth SHA256
tls-cipher TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256:TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256:TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-256-GCM-SHA384
tls-version-min 1.2
;opt-verify

script-security 2
learn-address scripts/learn-address
ccd-exclusive
client-config-dir ccd
tmp-dir tmp

mute-replay-warnings
verb 4

keepalive 10 40
persist-key
persist-tun
persist-local-ip

comp-lzo adaptive
push "comp-lzo adaptive"

chroot /etc/openvpn/chroot
