How to customize and extend your OpenVPN installation.
Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech
-
Paralon
- OpenVpn Newbie
- Posts: 7
- Joined: Sun Jun 05, 2011 1:11 pm
Post
by Paralon » Sun Jun 05, 2011 1:46 pm
Hello there everyone. I've encountered a pretty nasty problem that ruins all the delight of using OpenVPN. I'm using it to play some games that (most likely) use broadcast packets to communicate. Connection is pretty good BUT! From time to time ping gets up to >1500 ms or even timeouts. And this happens even when nothing's happening on the network (just pinging the server).
I'm using bridge configuration on both client- and sever-side. Both computers are behind the routers and have similar LAN network configs. Both client and server runs Win7 (x64 and x86). And here's my configurations for
server:
Code: Select all
local 192.168.1.27
port 1194
proto udp
dev tap
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
ifconfig-pool-persist ipp.txt
server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
client:
Code: Select all
client
dev tap
proto udp
remote <ip>
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
comp-lzo
verb 3
Thought that could be because of compression (saw somewhere on the net - there we problems with ESET antivirus) and tried to comment that out - didn't help.
-
janjust
- Forum Team
- Posts: 2703
- Joined: Fri Aug 20, 2010 2:57 pm
- Location: Amsterdam
-
Contact:
Post
by janjust » Mon Jun 06, 2011 6:09 am
these are the trickiest problems to tackle....
try setting
verb 5
in the server log and restart the client and the server; also, run a tool like 'wireshark' on the 'tap' device to see what happens when the ping times go up so badly - is it a bad line? is there a broadcast storm going on (heeey, it's windows) ?
-
Paralon
- OpenVpn Newbie
- Posts: 7
- Joined: Sun Jun 05, 2011 1:11 pm
Post
by Paralon » Sat Jun 11, 2011 5:59 pm
So, I've tested the network connection (by just pinging the server without VPN) - got 10-11ms ping and sometimes (less than 1%) timeouts. so, i assume that network connection is alright.
then i started VPN-server, connected the client and began pinging server on it's VPN-ip. Funny that ping was about 8-9ms, but whatever. Then i tried sending a file via skype. it used direct connection via vpn and... pings got up to 700ms and lots of timeout packets. wireshark reports a lot of upd activity and that's all i can say for now - im kinda drowned in it... after filetransfer pings got to normal again.
client log had nothing interesting there - just connection info and then WRRWWRWRWRWRWRWRWRWRWRWR. i suppose that's the data transfer?
server got pretty much the same log except for some strange lines:
...
Sat Jun 11 21:47:13 2011 us=992000 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
...
in the middle of wrWRwrWRwRwrWRwrWRwrWRwr
edit: also a lot of TCP packets between server and client (skype data?). and a lot of spanning-tree-(for-bridges)_00 STP-packets - don't know what's that.