Applying QOS When VPN Tunnels Are Involved

[jacobsa]

Hi guys,

My question relates to applying QOS Classes & Classifiers when VPN tunnels are involved.

For example:

I have two sites, 2 x 1MB/1MB PPPOE connections at each site, using Zeroshell as the router.
I have an OpenVPN site to site VPN from link 1 to link 1 at each site, and another from link 2 to link 2 at each site.
I have bonded these, and the fail over system works perfectly.

My question is regarding QOS when this is involved.

The priority traffic running via this VPN is Windows Terminal Servers (RDP). I would like to reserve 512KB/s for RDP traffic, but am unsure if I should apply this policy to the PPPOE connections, or the VPN tunnel.

Any information would be great.

Thanks guys,

Aaron

[ppalias]

The answer is on both. You should reserve 512k+ on the PPPoE for the Openvpn itself and on the vpn interface reserve 512k for the RDP.

[jacobsa]

Thanks.

And the best way to classify the traffic for OpenVPN? source / destination port?

I was wondering if the VPN interface could actually identify traffic, as it is encrypted…

[ppalias]

Yeah source ip-port and destination ip-port would be fine.

[jacobsa]

Great thanks,

I am applying the rules now.

Cheers

[jacobsa]

Traffic does not seem to be identified via the classifiers I have done. Have used QOS plenty of times before in Zeroshell, so I am familiar with the configuration.

Is there anything relating to using the Netbalancer module that may cause the QOS not to work? It is NetBalancer, with the two VPN Tunnels running as a Bond for failover and load balancing. I have applied QOS on the PPPOE interfaces, and put in the classifiers for the traffic for OpenVPN, but in the statistics it is giving me nothing.

I rebooted the box as well, just to confirm.

Stats are:

ppp0 — 0.8Mbit/s 0.7Mbit/s 110521 13408bit
DEFAULT Medium — — 110521 13408bit
OPENVPN Medium — 640Kbit/s 0 0bit

ppp1 — 0.8Mbit/s 0.7Mbit/s 112533 21712bit
DEFAULT Medium — — 112533 21712bit
OPENVPN Medium — 640Kbit/s 0 0bit

Classifiers are:

QoS Rules
Seq Input Output Description QoS Class Log Active
1 * * MARK tcp opt — in * out * 0.0.0.0/0 -> 0.0.0.0/0 tcp spt:1195 MARK set 0xb OPENVPN no
2 * * MARK tcp opt — in * out * 0.0.0.0/0 -> 0.0.0.0/0 tcp dpt:1195 MARK set 0xb OPENVPN no
3 * * MARK tcp opt — in * out * 0.0.0.0/0 -> 0.0.0.0/0 tcp spt:1196 MARK set 0xb OPENVPN no
4 * * MARK tcp opt — in * out * 0.0.0.0/0 -> 0.0.0.0/0 tcp dpt:1196 MARK set 0xb OPENVPN no

Any help would be appreciated..

Thanks,

Aaron

[ppalias]

I recall other users having problems with QoS on Netbalancing interfaces. Do a search in the forum, I think you will find something.

[jacobsa]

I have found some other comments about netbalancer and QOS using the same mangle table.

Any comment on this fulvio?

Thanks,

Aaron

[imported_fulvio]

At the moment I do not see an easy solution.

Regards
Fulvio

[Author]

Posts