Re: [Openvpn-users] Intermittently lost connections - affecting IP Phones

[James Yonan <jim@xxxxxxxxx>]

Cameron Gocke wrote:
> Over the last couple of months I've had numerous reports of
> intermittent loss of connectivity.  This doesn't last for more than a
> few seconds, but it results in the users' dropping their IP phone
> connection.  At first I started troubleshooting the Inactivity timeout
> messages, but have all but eliminated those and the issue continues. 
> (Aside from which I would assume that the IP phone would be sending
> traffic over the VPN and therefore keep it from timing out.)
>
> I am getting these messages:
> Wed Feb 01 15:21:58 2006 clientname/71.99.3.226:1142 TLS: tls_process:
> killed expiring key
>
> Almost exactly every hour on the client side, but am not losing
> connection nearly that often.
>   
That's nothing to worry about -- it's the normal rekeying process.
> I've done some preliminary testing, and I don't see any evidence that
> their internet connectivity is dropping at any point.
>
> Does anyone have any suggestions for me?
>   
Have you tried calibrating the keepalive parameters?  Use a larger 
timeout (the second parameter) to decrease the number of client restarts 
due to short-term network outages.

How do you characterize the network conditions at the time of the dropouts:

(1) How many clients are connected to the OpenVPN server?
(2) What percentage of the CPU is taken by the OpenVPN server?
(3) Does the server log file show anything interesting at this point in 
time?
(4) How close to saturation are the network pipes over which the OpenVPN 
traffic is flowing?
(5) How many seconds do the dropouts last for?
(6) Are you running OpenVPN over TCP or UDP?

James


____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users