Server Monitoring2 min read

    How to Monitor OpenVPN with Xitoring

    Share

    Overview

    OpenVPN is a widely adopted open-source VPN solution that enables secure communication across public networks. Monitoring your OpenVPN server ensures tunnels stay connected, throughput remains healthy, and security is maintained.

    Prerequisites

    • A Linux or Windows server running OpenVPN
    • Xitogent agent installed on the server
    • An active Xitoring account

    Step 1 — Install Xitogent

    If you haven't already, install the Xitoring agent with a single command:

    curl -s https://xitoring.com/install.sh | sudo bash -s -- --key=YOUR_API_KEY
    

    Step 2 — Enable the OpenVPN Integration

    Run the interactive integration command and select OpenVPN:

    sudo xitogent integrate
    

    Select OpenVPN from the list. The agent will automatically detect your OpenVPN configuration and begin collecting metrics.

    Key Metrics to Monitor

    Metric Description
    Active Connections Number of currently connected VPN clients
    Throughput (In/Out) Bandwidth usage across VPN tunnels
    Connection Duration How long each client has been connected
    CPU & Memory Usage Server resource consumption by the OpenVPN process
    Tunnel Status Whether VPN tunnels are up and operational

    Step 3 — Configure Triggers

    Navigate to your server in the Xitoring dashboard and configure triggers for:

    • High CPU/Memory usage — Alert when the OpenVPN process consumes excessive resources
    • Connection count thresholds — Get notified if active connections drop unexpectedly or spike beyond capacity
    • Throughput anomalies — Detect unusual bandwidth patterns that could indicate security issues

    Best Practices

    1. Monitor both server and client sides — Use uptime checks to verify VPN endpoints are reachable
    2. Set up TCP/UDP uptime checks — Monitor port 1194 (default) to ensure the OpenVPN service is accepting connections
    3. Track certificate expiry — Use Xitoring's SSL monitoring to track OpenVPN certificate validity
    4. Combine with Netstat integration — Enable the Netstat integration for deeper visibility into network connections

    Troubleshooting

    • No metrics appearing: Ensure OpenVPN is running and the management interface is accessible
    • High latency reported: Check server CPU load and network bandwidth
    • Connection drops: Review OpenVPN logs at /var/log/openvpn/ and check for authentication failures