www.zeroshell.org Forum Index www.zeroshell.org
Linux Distribution for server and embedded devices
 
 SearchSearch  RegisterRegister  UsergroupsUsergroups 
 ProfileProfile  Log inLog in  Log in to check your private messagesPrivate Message 

Zeroshell 3.8.1 VPN problem

 
Post new topic   Reply to topic    www.zeroshell.org Forum Index -> ZeroShell
View previous topic :: View next topic  
Author Message
reaperz



Joined: 13 Apr 2012
Posts: 100

PostPosted: Fri Nov 24, 2017 1:00 pm    Post subject: Zeroshell 3.8.1 VPN problem Reply with quote

Hello

Seems 3.8.1 upgrade has created some kind of problem with LAN-to-LAN VPN tunnel. If tunnel is up, it works fine. But if tunnel goes down because of disconnect or restart, then sometime tunnel hangs. Tunnel itself is up, but IP network and routings for that tunnel are down. I fix it usually by removing and readding IP-addresses for the tunnel.

Tunnel itself is never down, only IP network inside tunnel is down.

I have experienced this problem in several sites, several different installations.
Back to top
View user's profile Send private message
Tysonpower



Joined: 23 Jan 2015
Posts: 9

PostPosted: Mon Nov 27, 2017 5:45 pm    Post subject: Zeroshell 3.8.1 broke VPN bonding Reply with quote

Hello,

i have a similar problem with my VPN lan-to-lan bonding setup.

Both VPNs are up / connected in the vpn tab.

Under Network the Bond interface shows that VPN01 (second VPN in the bond) is down. VPN00 is always up, but the second one is always down since i updated.

i now have gone back to 3.8, but having the newest version of ZS would be better.

regards,
Manuel
Back to top
View user's profile Send private message
fulvio
Site Admin


Joined: 01 Nov 2006
Posts: 1077

PostPosted: Fri Dec 01, 2017 8:41 pm    Post subject: Reply with quote

Could you try if the issues you reported are solved by the new bug fix #00 applied to Zeroshell 3.8.1?

Thanks
Fulvio
Back to top
View user's profile Send private message Send e-mail
Tysonpower



Joined: 23 Jan 2015
Posts: 9

PostPosted: Fri Dec 01, 2017 9:52 pm    Post subject: Reply with quote

Hi fluvio,

connection works for now but it is quite slow...but that could also be a problem at my site. Thanks for the fix tho.

I will make a speedtest tomorrow and post the results.

regards,
Manuel
Back to top
View user's profile Send private message
Tysonpower



Joined: 23 Jan 2015
Posts: 9

PostPosted: Fri Dec 01, 2017 10:07 pm    Post subject: Reply with quote

fulvio wrote:
Could you try if the issues you reported are solved by the new bug fix #00 applied to Zeroshell 3.8.1?

Thanks
Fulvio


Hi Fluvio,

i made some test and it seems that the slow conection comes from a bug that i had before in zeroshell.

The BOND only uses 10Mbit on each of my two lines in "Load Balancing and Failover" mode.
If i switch to "Weighted Load Balancing and Failover" with same weight for both lines it uses both with 10Mbit for the download. But the Upload only goes over one of the two lines randomly but with the full bandwidth (32Mbit -4Mbit loss due to overhead as normal).

hope you can help fixing it Smile

regards,
Manuel
Back to top
View user's profile Send private message
fulvio
Site Admin


Joined: 01 Nov 2006
Posts: 1077

PostPosted: Sat Dec 02, 2017 5:37 am    Post subject: Reply with quote

Thanks for making these tests. Really the slow performance of VPN bonding is due to packet reordering.
I hope to look at this issue soon.

Regards
Fulvio
Back to top
View user's profile Send private message Send e-mail
Tysonpower



Joined: 23 Jan 2015
Posts: 9

PostPosted: Sat Dec 02, 2017 10:45 am    Post subject: Reply with quote

fulvio wrote:
Thanks for making these tests. Really the slow performance of VPN bonding is due to packet reordering.
I hope to look at this issue soon.

Regards
Fulvio


Hi fluvio, thanks for the rather fast patch of the VPN Problem.

I did some test and now it works after just wainting some hours. It really depends on the PIng it seems.

But it is still strange that it doesent uses the full bandwidth in upload.

I use the "Load Balancing and Failover" mode, hope you can optimize the bonding because i really like it and use it every day.

But 155Mbit/s thruput with encryption (AES-256-CBC) seems quite okay doesen't it Smile


regards,
Manuel
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    www.zeroshell.org Forum Index -> ZeroShell All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group