Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 7 Aug 2015 10:02:35 +0100
From:      "seanrees@gmail.com" <seanrees@gmail.com>
To:        Egoitz Aurrekoetxea <egoitz@sarenet.es>
Cc:        Karl Pielorz <kpielorz_lst@tdx.co.uk>, "freebsd-xen@freebsd.org" <xen@freebsd.org>
Subject:   Re: Poor network performance with Xen + OpenVPN?
Message-ID:  <CAJGy1F09cn2NSJgub3M%2BVfXi_b4O5GTtLB1xWV5g1LF1f=46uA@mail.gmail.com>
In-Reply-To: <CECD3423-DA5C-4CA2-B509-0EC2A769C7D2@sarenet.es>
References:  <B314E8002A8A1A7A537DB661@Karls-Mac-mini.local> <40E060AB-F0B9-48F3-9309-947CAB5C1939@sarenet.es> <5A7F36D35FF28CD4B9D2DE92@10.12.30.106> <CAJGy1F0GVZDuidpJ2CnL_uo_yjhNZJswUkafvbAg6E1wzFYeCA@mail.gmail.com> <CECD3423-DA5C-4CA2-B509-0EC2A769C7D2@sarenet.es>

next in thread | previous in thread | raw e-mail | index | archive | help
I've not tried running OpenVPN against itself in a test bed. I no longer
have the option as I had my provider downgrade my problematic VM from 4.4
to 3.4, which made the problem disappear.

The OpenVPN config's I use are pretty standard.

Server:
port XXYYZ
dev tun
ca CA
cert CERT
key KEY
dh DH
server A.B.C.D 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 2 8
comp-lzo
user nobody
group nobody
persist-key
persist-tun

status openvpn-status.log
verb 3
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"



Client:
client
dev tun
proto udp
remote A XXYYZ
remote B XXYYZ
resolv-retry infinite
nobind
user nobody
group nobody
persist-key
persist-tun
ca CA
cert CERT
key KEY
ns-cert-type server
verb 3
ping 2
ping-restart 5

On Sat, Aug 1, 2015 at 12:45 PM, Egoitz Aurrekoetxea <egoitz@sarenet.es>
wrote:

> Could you paste your onpenvpn=E2=80=99s server and client config files?. =
Which OS
> the client runs?
>
> Have you tested this openvpn connectivity without any network devices
> between them?. With for example an ip in the
> loopback interface of the openvpn server?
>
> Best regards,
>
>
> [image: sarenet]
> *Egoitz Aurrekoetxea*
> Departamento de sistemas
> 944 209 470
> Parque Tecnol=C3=B3gico. Edificio 103
> 48170 Zamudio (Bizkaia)
> egoitz@sarenet.es
> www.sarenet.es
>
> Antes de imprimir este correo electr=C3=B3nico piense si es necesario hac=
erlo.
>
> El 30/7/2015, a las 11:41, seanrees@gmail.com escribi=C3=B3:
>
> I have the same issue. I managed to track it down to a difference between
> somewhere between Xen 3.4 and 4.4 (my provider uses both).
>
> 3.4 works fine (I can sustain a few mbps through OpenVPN). 4.4 I get
> ~0.05mbps max. I wasn't able to track it down.
>
> Both with the virtual drivers (if_xn) with all combinations of tso, lro,
> rxcsum and txcsum on/off tested.
>
> Sean
>
> On Wed, Jul 29, 2015 at 2:58 PM, Karl Pielorz <kpielorz_lst@tdx.co.uk>
> wrote:
>
>>
>>
>> --On 29 July 2015 14:28 +0200 Egoitz Aurrekoetxea <egoitz@sarenet.es>
>> wrote:
>>
>> Hi!
>>>
>>> Have you disabled tso, lro and friends?.
>>>
>>>
>> If by that you mean,
>>
>>  ifconfig xn0 -rxcsum -txcsum -tso4 -lro
>>
>> Yes - I've tried that on the virtual host running OpenVPN, it didn't see=
m
>> to make any difference :(
>>
>> I'll hopefully get some more time later to look at it again.
>>
>> Regards,
>>
>> -Karl
>> _______________________________________________
>> freebsd-xen@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-xen
>> To unsubscribe, send any mail to "freebsd-xen-unsubscribe@freebsd.org"
>>
>
>
>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAJGy1F09cn2NSJgub3M%2BVfXi_b4O5GTtLB1xWV5g1LF1f=46uA>