Overview
OpenVPN is a widely adopted open-source VPN solution that enables secure communication across public networks. Monitoring your OpenVPN server ensures tunnels stay connected, throughput remains healthy, and security is maintained.
Prerequisites
- A Linux or Windows server running OpenVPN
- Xitogent agent installed on the server
- An active Xitoring account
Step 1 — Install Xitogent
If you haven't already, install the Xitoring agent with a single command:
curl -s https://xitoring.com/install.sh | sudo bash -s -- --key=YOUR_API_KEY
Step 2 — Enable the OpenVPN Integration
Prefer the panel? You don't need the CLI for this step. In Xitoring, open the server, go to Integrations, choose OpenVPN, fill in the same details, and click Enable. See enabling integrations from the Xitoring panel. The CLI steps below still work if you script your setup.
Run the interactive integration command and select OpenVPN:
sudo xitogent integrate
Select OpenVPN from the list. The agent will automatically detect your OpenVPN configuration and begin collecting metrics.
Key Metrics to Monitor
| Metric | Description |
|---|---|
| Active Connections | Number of currently connected VPN clients |
| Throughput (In/Out) | Bandwidth usage across VPN tunnels |
| Connection Duration | How long each client has been connected |
| CPU & Memory Usage | Server resource consumption by the OpenVPN process |
| Tunnel Status | Whether VPN tunnels are up and operational |
Step 3 — Configure Triggers
Navigate to your server in the Xitoring dashboard and configure triggers for:
- High CPU/Memory usage — Alert when the OpenVPN process consumes excessive resources
- Connection count thresholds — Get notified if active connections drop unexpectedly or spike beyond capacity
- Throughput anomalies — Detect unusual bandwidth patterns that could indicate security issues
Best Practices
- Monitor both server and client sides — Use uptime checks to verify VPN endpoints are reachable
- Set up TCP/UDP uptime checks — Monitor port 1194 (default) to ensure the OpenVPN service is accepting connections
- Track certificate expiry — Use Xitoring's SSL monitoring to track OpenVPN certificate validity
- Combine with Netstat integration — Enable the Netstat integration for deeper visibility into network connections
Troubleshooting
- No metrics appearing: Ensure OpenVPN is running and the management interface is accessible
- High latency reported: Check server CPU load and network bandwidth
- Connection drops: Review OpenVPN logs at
/var/log/openvpn/and check for authentication failures