Hey Guys,
my company using openvpn. All User cannot transfer large files via VPN and i have no idee why. For testing have download a iso from server with robocopy( should resume ) and you can see the connection is losing.
on Server log there is nothing strange to see. Only some parts im wondering about:
Thu Aug 2 14:58:29 2018 us=959335 MULTI: multi_create_instance called
Thu Aug 2 14:58:29 2018 us=959457 Re-using SSL/TLS context
Thu Aug 2 14:58:29 2018 us=959487 LZO compression initialized
Thu Aug 2 14:58:29 2018 us=959611 Control Channel MTU parms [ L:1544 D:168 EF:68 EB:0 ET:0 EL:0 ]
Thu Aug 2 14:58:29 2018 us=959649 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Aug 2 14:58:29 2018 us=959703 Local Options String: V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server
Thu Aug 2 14:58:29 2018 us=959721 Expected Remote Options String: V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client
Thu Aug 2 14:58:29 2018 us=959753 Local Options hash (VER=V4): bd577cd1
Thu Aug 2 14:58:29 2018 us=959780 Expected Remote Options hash (VER=V4): ee93268d
Thu Aug 2 14:58:29 2018 us=959816 TCP connection established with [AF_INET]PUBLICIPADRESS:51133
Thu Aug 2 14:58:29 2018 us=959837 TCPv4_SERVER link local: [undef]
Thu Aug 2 14:58:29 2018 us=959857 TCPv4_SERVER link remote: [AF_INET]PUBLICIPADRESS:51133
Thu Aug 2 14:58:29 2018 us=959965 PUBLICIPADRESS:51133 Connection reset, restarting [-1]
Thu Aug 2 14:58:29 2018 us=959991 PUBLICIPADRESS:51133 SIGUSR1[soft,connection-reset] received, client-instance restarting
Thu Aug 2 14:58:29 2018 us=960054 TCP/UDP: Closing socket
But if i grep the port there is no private ip with this port so i dont know witch connection restart.
I find out with "ping -n10 -l 1470 -f privateIP my mssfix should be 1430
But we would test UDP as next protocol so we hope tcp lose connection. and if nobody use vpn i wil set verbose to 5 and then restart the service
on server site log also found
Thu Aug 2 14:42:08 2018 us=295079 USER/217.110.242.42:61406 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
AND
Thu Aug 2 14:43:01 2018 us=738511 werner-desktop/217.110.242.42:61406 MULTI: bad source address from client [fe80:***], packet dropped
I Know this error maybe is wrong Ipv6 Routing?
this kind of error have all user
Server Konf:
port 26821
proto tcp
dev tun
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh2048.pem
crl-verify /etc/openvpn/crl.pem
client-config-dir /etc/openvpn/ccd
server 192.168.124.0 255.255.255.0 # internal tun0 connection IP
ifconfig-pool-persist ipp.txt
; push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 192.168.123.1"
push "route 192.168.123.0 255.255.255.0" # Intranet
push "route 62.PUPIP 255.255.255.0" #-Extranet
; push "route 0.0.0.0 0.0.0.0"
client-to-client
keepalive 10 120
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log-append /var/log/openvpn.log
verb 4 # verbose mode
have someone any idee why i cant transfer large files? and sory for my english grammar
