Reply To: Tuning packet size? High PPS/bw from ACKs over VPN bond link

Home Page Forums Network Management VPN Tuning packet size? High PPS/bw from ACKs over VPN bond link Reply To: Tuning packet size? High PPS/bw from ACKs over VPN bond link

#50956

houkouonchi
Member

@ppalias wrote:

Another thing I can guess is the ping-keepalive functionality of openvpn. Maybe if it is tuned to ping too frequently then it may affect the tunnel. Post here a screenshot of ZS configuration for the BOND, the VPNs and netbalancer in case you have one.

I dont think the keep alive could cause this type of behavior. Maybe I am not explaining myself well. The extra bandwidth is not being used between the tunnel but when an external host connects to the WAN IP of the DC zeroshell box it sees excess ACKs and packets when downloading off that WAN IP of the ZS box. You can test this out yourself by downloading from these two links.

Not going through the VPN:

http://fios1.houkouonchi.jp/test256

VPN:

http://66.33.216.46/test256

One of my connections behind the VPN is doing a decent amount of upload activity (I stopped it during my testing) so you might want to limit the download speed on both to 200 or 300 kilobytes/sec so you can see how to the second link your connection sends way more PPS and uses way more upstream bandwidth when downloading.

Here are some screen shots you requested.





The other side of the VPN bond (bonded the same way) is 10.99.98.1 and I am port forwarding port 80 on 66.33.216.46 to 10.99.98.2.