From owner-freebsd-xen@freebsd.org Fri Aug 7 09:02:38 2015 Return-Path: Delivered-To: freebsd-xen@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0ECFB9B5104 for ; Fri, 7 Aug 2015 09:02:38 +0000 (UTC) (envelope-from seanrees@gmail.com) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id E06731FE0 for ; Fri, 7 Aug 2015 09:02:37 +0000 (UTC) (envelope-from seanrees@gmail.com) Received: by mailman.ysv.freebsd.org (Postfix) id DD15F9B5103; Fri, 7 Aug 2015 09:02:37 +0000 (UTC) Delivered-To: xen@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C2CE29B5102 for ; Fri, 7 Aug 2015 09:02:37 +0000 (UTC) (envelope-from seanrees@gmail.com) Received: from mail-wi0-x233.google.com (mail-wi0-x233.google.com [IPv6:2a00:1450:400c:c05::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 51D481FDD for ; Fri, 7 Aug 2015 09:02:37 +0000 (UTC) (envelope-from seanrees@gmail.com) Received: by wicne3 with SMTP id ne3so52337923wic.1 for ; Fri, 07 Aug 2015 02:02:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=UjU05XL8yFOtNCiDfReXPfdk5SZ4w7fJWwhAm7oUX64=; b=nuETuVHokxFR3vaAm5ks0T1R591+pQRaeeTbcGGc0MhYv6h1y5TV68pDs5HtDygiuh omEcG55PWJ3AnM0cn9yWK9VG7MtEUFqOPX/VwTbxvtzgxYoS1mdEENLq964PxY/Hqa90 B4k2B/kBD9MvV34FCUC+DH408B+qiCqDNlBu73QZvnpVOWgf1hikrl5Za94Vu1cc/Xf2 QXWGNZB7qQD3WTARkYbatMU3k7cZK05el7Ki/QZqZyXVEJDyfhlyEqRqDKurX8YmxaCg Gh6ogV5KyY6e0ZxUjvCza7h2PSJwxMEHiK+xJs4rJnd+7YWlFMBZiWh0eCMmnBFrcXFn wUFw== MIME-Version: 1.0 X-Received: by 10.180.86.163 with SMTP id q3mr5121504wiz.75.1438938155722; Fri, 07 Aug 2015 02:02:35 -0700 (PDT) Received: by 10.28.99.193 with HTTP; Fri, 7 Aug 2015 02:02:35 -0700 (PDT) In-Reply-To: References: <40E060AB-F0B9-48F3-9309-947CAB5C1939@sarenet.es> <5A7F36D35FF28CD4B9D2DE92@10.12.30.106> Date: Fri, 7 Aug 2015 10:02:35 +0100 Message-ID: Subject: Re: Poor network performance with Xen + OpenVPN? From: "seanrees@gmail.com" To: Egoitz Aurrekoetxea Cc: Karl Pielorz , "freebsd-xen@freebsd.org" Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-xen@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Discussion of the freebsd port to xen - implementation and usage List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Aug 2015 09:02:38 -0000 I've not tried running OpenVPN against itself in a test bed. I no longer have the option as I had my provider downgrade my problematic VM from 4.4 to 3.4, which made the problem disappear. The OpenVPN config's I use are pretty standard. Server: port XXYYZ dev tun ca CA cert CERT key KEY dh DH server A.B.C.D 255.255.255.0 ifconfig-pool-persist ipp.txt keepalive 2 8 comp-lzo user nobody group nobody persist-key persist-tun status openvpn-status.log verb 3 push "dhcp-option DNS 8.8.8.8" push "dhcp-option DNS 8.8.4.4" Client: client dev tun proto udp remote A XXYYZ remote B XXYYZ resolv-retry infinite nobind user nobody group nobody persist-key persist-tun ca CA cert CERT key KEY ns-cert-type server verb 3 ping 2 ping-restart 5 On Sat, Aug 1, 2015 at 12:45 PM, Egoitz Aurrekoetxea wrote: > Could you paste your onpenvpn=E2=80=99s server and client config files?. = Which OS > the client runs? > > Have you tested this openvpn connectivity without any network devices > between them?. With for example an ip in the > loopback interface of the openvpn server? > > Best regards, > > > [image: sarenet] > *Egoitz Aurrekoetxea* > Departamento de sistemas > 944 209 470 > Parque Tecnol=C3=B3gico. Edificio 103 > 48170 Zamudio (Bizkaia) > egoitz@sarenet.es > www.sarenet.es > > Antes de imprimir este correo electr=C3=B3nico piense si es necesario hac= erlo. > > El 30/7/2015, a las 11:41, seanrees@gmail.com escribi=C3=B3: > > I have the same issue. I managed to track it down to a difference between > somewhere between Xen 3.4 and 4.4 (my provider uses both). > > 3.4 works fine (I can sustain a few mbps through OpenVPN). 4.4 I get > ~0.05mbps max. I wasn't able to track it down. > > Both with the virtual drivers (if_xn) with all combinations of tso, lro, > rxcsum and txcsum on/off tested. > > Sean > > On Wed, Jul 29, 2015 at 2:58 PM, Karl Pielorz > wrote: > >> >> >> --On 29 July 2015 14:28 +0200 Egoitz Aurrekoetxea >> wrote: >> >> Hi! >>> >>> Have you disabled tso, lro and friends?. >>> >>> >> If by that you mean, >> >> ifconfig xn0 -rxcsum -txcsum -tso4 -lro >> >> Yes - I've tried that on the virtual host running OpenVPN, it didn't see= m >> to make any difference :( >> >> I'll hopefully get some more time later to look at it again. >> >> Regards, >> >> -Karl >> _______________________________________________ >> freebsd-xen@freebsd.org mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-xen >> To unsubscribe, send any mail to "freebsd-xen-unsubscribe@freebsd.org" >> > > >