Re: [Openvpn-users] Random packet loss with low traffic and low bandwidth usage (quagga, openvpn, debian)

[Marc F. <mar...@gm...>]

Hi Bruno,

I managed a few sites a few years ago and although the provider told
me that there was nothing wrong with the link we had package loss. I
guess with some protocolls it is not a big issue but with telnet/ssh
it is. Maybe you should just ping the public IP of another side to see
how much loss there is (try to do this without VPN). I set up a script
that did a ping of 10 packets each 5 minutes whole day.

HTH

Marc

2010/1/14 Bruno <dal...@gm...>:
> Hi,
>
> I'm having a very strange problem with packet loss.
>
> I have a system that runs quagga (OSPF) + OpenVPN over two links, one MPLS
> and other DSL both with 512kbps.
> I have 11 servers with the same configuration (hardware and software), so 22
> VPN client tunnels.
>
> From 3 to 5 times per week, the users complains that the system they use via
> remote desktop stays very slow to work.
> Wen I make the tests I see that in these situations, the packet loss is from
> 5 to 15% (with small trafic on the links).
> The packet loss happens both via MPLS or via DSL links.
> In the system , quagga  or openvpn logs doesn't appears anything strange.
> When I restart the openvpn, then the packet loss disappears and the users
> can start work again.
>
> The VPN server:
> System Information
> Manufacturer: Dell Computer Corporation
> Product Name: PowerEdge 840
> Debian 4.0
> openvpn  2.1.1
> quagga 0.99.5-5etch3
> kernel 2.6.24-etchnhalf.1-686
>
> NICs
> Links 1 and 2 (with VLANs) (e1000) 01:00.1 Ethernet controller: Intel
> Corporation 82571EB Gigabit Ethernet Controller (rev 06)
> LAN (tg3) 04:00.0 Ethernet controller: Broadcom Corporation NetXtreme
> BCM5721 Gigabit Ethernet PCI Express (rev 11)
>
> The VPN clients:
> System Information
> Manufacturer: Gigabyte Technology Co., Ltd.
> Product Name: G31M-ES2C
> Debian 5.0.3
> openvpn 2.1~rc11-1
> quagga 0.99.10-1lenny2
> kernel 2.6.26-2-686
>
> NICs
> LAN (r8169) 02:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd.
> RTL8101E/RTL8102E PCI Express Fast Ethernet controller (rev 02)
> Link (8139too) 1 03:00.0 Ethernet controller: Realtek Semiconductor Co.,
> Ltd. RTL-8139/8139C/8139C+ (rev 10)
> Link 2 (8139too) 03:01.0 Ethernet controller: Realtek Semiconductor Co.,
> Ltd. RTL-8139/8139C/8139C+ (rev 10
>
> I'm attaching my client and server configs.
>
> Ps.: I have almost the same scenario on another company with same
> configuration (only hardware differs), but with less traffic, on the other
> company I have only 3 servers comunicating via vpn. I this another scenario
> I'm not having any problems with packet loss in months of work.
>
> Some ideas?
>
> ------------------------------------------------------------------------------
> Throughout its 18-year history, RSA Conference consistently attracts the
> world's best and brightest in the field, creating opportunities for
> Conference
> attendees to learn about information security's most important issues
> through
> interactions with peers, luminaries and emerging and established companies.
> http://p.sf.net/sfu/rsaconf-dev2dev
> _______________________________________________
> Openvpn-users mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openvpn-users
>
>



-- 
Met Vriendelijke Groet / With Kind Regards

Marc Fellman

wave:mar...@go...