OpenVPN AS - Auth & Performence

Business solution to host your own OpenVPN server with web management interface and bundled clients.
Post Reply
User avatar
krypto
OpenVpn Newbie
Posts: 5
Joined: Fri Mar 01, 2013 9:13 am
Location: ::1
Contact:

OpenVPN AS - Auth & Performence

Post by krypto » Tue Mar 05, 2013 4:33 pm

Hi Team
I'd like to say Hello to the whole Forum :)
But cut to the chase:

Access Server version: 1.8.4
Authenticate users with: ldap
Accepting VPN client connections on IP address: all interfaces
Port for VPN client connections: tcp/443, udp/443
OSI Layer: 3 (routing/NAT)
Clients access private subnets using: NAT
Failover : enabled
Amount of users connected to the AS: ~350-500 concurrent

OVPN AS Nodes information:
Red Hat 5.9 (64bit)
Intel(R) Xeon(R) CPU X7560@2.27GHz (2 cores)
6G RAM

LDAP connectivity: LDAP Proxy (Windows 2k8R2) <=> DC (Windows 2k8R2) (First client installed on LDAP proxy need to connect with local account over internet, then LDAP traffic is routed via this link)

Recently I'm experiencing two different issues (they occur randomly)

1. Few weeks ago I had a problem with authentication. LDAP disconnects itself from OpenVPN - which causes unavailabilty of service - but moreover I wasn't able to logon using local account. Failover to second node solved the problem - but after a while I had similar issue. Can anyone of you experience anything like this?
Some logs regarding that issue:

Code: Select all

013-02-27 04:17:47-0500 [-] WEB OUT: '2013-02-27 04:16:27-0500 [HTTPChannel,404,127.0.0.1] Logout of portal '
2013-02-27 04:17:47-0500 [-] WEB OUT: '2013-02-27 04:16:28-0500 [HTTPChannel,404,127.0.0.1] Unhandled error in Deferred:'
2013-02-27 04:17:47-0500 [-] WEB OUT: '2013-02-27 04:16:28-0500 [HTTPChannel,404,127.0.0.1] Unhandled Error'
2013-02-27 04:17:47-0500 [-] WEB OUT: ' Traceback (most recent call last):'
2013-02-27 04:17:47-0500 [-] WEB OUT: ' Failure: twisted.internet.error.ConnectError: An error occurred while connecting: 2: No such file or directory.'
2013-02-27 04:17:47-0500 [-] WEB OUT: ' '
2013-02-27 04:17:47-0500 [-] WEB OUT: '2013-02-27 04:16:28-0500 [-] CPage exception in CLogin/locateChild: An error occurred while connecting: 2: No such file or directory. (twisted.internet.error.ConnectError): connect/clogin:114'
2013-02-27 04:17:47-0500 [-] WEB OUT: '2013-02-27 04:16:28-0500 [-] XMLRPCRelay: An error occurred while connecting: 2: No such file or directory. (twisted.internet.error.ConnectError): cserv/xmlrelay:62'
2013-02-27 04:17:47-0500 [-] WEB OUT: '2013-02-27 04:16:31-0500 [-] CPage exception in CLogin/locateChild: An error occurred while connecting: 2: No such file or directory. (twisted.internet.error.ConnectError): connect/clogin:114'
2013-02-27 04:17:47-0500 [-] WEB OUT: '2013-02-27 04:16:31-0500 [-] Web login authentication failed: {'status': 2, 'reason': 'An error occurred while connecting: 2: No such file or directory. (twisted.internet.error.ConnectError)', 'user': 'openvpn'}'
2013-02-27 04:17:47-0500 [-] WEB OUT: '2013-02-27 04:16:31-0500 [-] Web login failed (twisted.cred.error.UnauthorizedLogin)'
2013-02-27 04:17:47-0500 [-] WEB OUT: '2013-02-27 04:16:31-0500 [-] XMLRPCRelay: An error occurred while connecting: 2: No such file or directory. (twisted.internet.error.ConnectError): cserv/xmlrelay:62'
2013-02-27 04:17:47-0500 [-] WEB OUT: '2013-02-27 04:16:35-0500 [HTTPChannel,418,127.0.0.1] Logout of portal '
2013-02-27 04:17:47-0500 [-] WEB OUT: '2013-02-27 04:16:35-0500 [HTTPChannel,419,127.0.0.1] Unhandled error in Deferred:'
2013-02-27 04:17:47-0500 [-] WEB OUT: '2013-02-27 04:16:35-0500 [HTTPChannel,419,127.0.0.1] Unhandled Error'
2013-02-27 04:17:47-0500 [-] WEB OUT: ' Traceback (most recent call last):'
2013-02-27 04:17:48-0500 [-] WEB: Sending SIGTERM to pid 26096
2013-02-27 04:17:48-0500 [OMIClientAuth,0,] OMI Cancel pending deferred ['client-deny 432 0 "AS auth failed" "SESSION: Your session has expired, please reauthenticate"']
2013-02-27 04:17:48-0500 [OMIClientAuth,0,] Unhandled error in Deferred:
2013-02-27 04:17:48-0500 [OMIClientAuth,0,] Unhandled Error
Traceback (most recent call last):
Failure: pyovpn.omi.omibase.Error: OMI query cancelled

2013-02-27 04:17:48-0500 [-] IPTABLES_LIVE: Sending SIGTERM to pid 26173
2013-02-27 04:17:48-0500 [-] LOG: Sending SIGTERM to pid 26095
2. Random server performance issues causing VPN to be unavailable - that was already raised with vendor - but he said that it's working stable on their side (and we did not notice any OS high utilization) - no balloning or overload. Might this be a case that there's ~400 users constantly connected to vpn (+ in database ~2k)? Is there any performance limitations for OpenVPN - does anyone made any statistics?

If you'll need any further informations I'm happy to provide them :)
Thanks for reply
Pozdrawiam/Kind regards/Mit freundlichen Grüßen/Cordialement
Pawel Osobinski (krypto)

User avatar
krypto
OpenVpn Newbie
Posts: 5
Joined: Fri Mar 01, 2013 9:13 am
Location: ::1
Contact:

Re: OpenVPN AS - Auth & Performence

Post by krypto » Fri Mar 15, 2013 9:47 am

Any help here please?
Pozdrawiam/Kind regards/Mit freundlichen Grüßen/Cordialement
Pawel Osobinski (krypto)

Post Reply