<div dir="ltr"><div><div><div><div>Dear tinc community,<br>I am using tinc in switch mode. I have three nodes. Two nodes reside on routers, vpn-eth is bridged with internal lan, each router has several machines connected to it's internal lan. Third node is the roadwarrior - "endpoint" linux PC.<br>
When the roadwarrior is off - everything works perfectly, machines on both sides can communicate without a problem in any direction. When I turn on the roadwarrior - everything goes crazy: packet loss becomes huge (90%) even for machines, which worked perfectly before, ping shows duplicate packets. When I turn off the roadwarrior again - everything returns to the working state.<br>
</div><div><br></div><div>Router1 and Roadwarrior3 are using tinc 1.0.23 version. Router2 uses v1.0.19 because newer is not present in the repository :(.<br></div><div><br></div>Here are the configs:<br><br></div><div>hosts folders are exactly the same on all nodes:<br>
$ cat hosts/central_router<br>Address = 88.77.66.55<br><br>-----BEGIN RSA PUBLIC KEY-----<br>...<br>-----END RSA PUBLIC KEY-----<br><br>$ cat hosts/karl_router<br>TCPonly = yes<br><br>-----BEGIN RSA PUBLIC KEY-----<br>...<br>
-----END RSA PUBLIC KEY-----<br><br>cat hosts/daniel_mpc<br>-----BEGIN RSA PUBLIC KEY-----<br>...<br>-----END RSA PUBLIC KEY-----<br><br>Router1:<br><br>Router1: $ ifconfig<br>br0 inet addr:192.168.10.1 Bcast:192.168.255.255 Mask:255.255.0.0<br>
<br>Router1: $ brctl show<br>bridge name bridge id STP enabled interfaces<br>br0 8000.d850e6503710 no vlan1<br> eth1<br>
eth2<br> pvpn<br>Router1: $ cat /opt/etc/tinc/pvpn/tinc.conf<br>Name = central_router<br>Mode = switch<br><br>
Router1: $ cat /opt/etc/tinc/pvpn/tinc-up<br>#!/bin/sh<br>ifconfig $INTERFACE 0.0.0.0<br>brctl addif br0 $INTERFACE<br>ifconfig $INTERFACE up<br><br>Router 2:<br><br>Router2: $ ifconfig:<br>br-lan inet addr:192.168.0.1 Bcast:192.168.255.255 Mask:255.255.0.0<br>
<br>Router2: $ brctl show:<br>bridge name bridge id STP enabled interfaces<br>br-lan 7fff.c63dc790c598 no eth0.1<br> pvpn<br>
wlan0<br>Router2: $ cat /etc/tinc/pvpn/tinc.conf<br>Name = karl_router<br>Mode = switch<br>ConnectTo = central_router<br><br>Router2: $ cat /etc/tinc/pvpn/tinc-up<br>
#!/bin/sh<br>ifconfig $INTERFACE 0.0.0.0<br>#brctl addif br-lan $INTERFACE<br>ifconfig $INTERFACE up<br><br>Roadwarrior3:<br><br>Roadwarrior3: $ cat /etc/tinc/pvpn/tinc.conf<br>Name = daniel_mpc<br>Mode = switch<br>ConnectTo = central_router<br>
<br>Roadwarrior3: $ cat /etc/tinc/pvpn/tinc-up<br>#!/bin/sh<br>ifconfig $INTERFACE 192.168.3.150 netmask 255.255.0.0<br>ifconfig $INTERFACE up<br><br>Roadwarrior3: $ ifconfig<br>eth0 inet addr:192.168.1.72 Bcast:192.168.1.255 Mask:255.255.255.0<br>
<br>Testing:<br>I run ping from the machine5 (<a href="http://192.168.0.25/16">192.168.0.25/16</a>) on the Router2's internal network to the machine4 (<a href="http://192.168.10.11/16">192.168.10.11/16</a>) on the net of Router1<br>
<br>If Roadwarrior3 is down, i observer normal behavior:<br>@machine5:~$ ping 192.168.10.11<br>Ping statistics for <a href="http://192.168.10.11">192.168.10.11</a>:<br> Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),<br>
Approximate round trip times in milli-seconds:<br> Minimum = 2ms, Maximum = 5ms, Average = 3ms<br><br>Now I start tincd on Roadwarrior:<br><br>@machine5:~$ ping 192.168.10.11<br>Ping statistics for <a href="http://192.168.10.11">192.168.10.11</a>:<br>
Packets: Sent = 4, Received = 1, Lost = 3 (75% loss),<br>Approximate round trip times in milli-seconds:<br> Minimum = 2ms, Maximum = 2ms, Average = 2ms<br><br>running ping from Router1 (192.168.10.1), roadwarrior is running:<br>
@Router1:~$ ping 192.168.0.25<br>64 bytes from <a href="http://192.168.0.25">192.168.0.25</a>: seq=0 ttl=64 time=10.270 ms<br>64 bytes from <a href="http://192.168.0.25">192.168.0.25</a>: seq=0 ttl=64 time=54.674 ms (DUP!)<br>
64 bytes from <a href="http://192.168.0.25">192.168.0.25</a>: seq=1 ttl=64 time=2.380 ms<br>64 bytes from <a href="http://192.168.0.25">192.168.0.25</a>: seq=1 ttl=64 time=46.640 ms (DUP!)<br>^C<br>--- 192.168.0.25 ping statistics ---<br>
2 packets transmitted, 2 packets received, 2 duplicates, 0% packet loss<br>round-trip min/avg/max = 2.380/28.491/54.674 ms<br><br>Ping to/from Roadwarrior also shows above 90% packet loss.<br></div><br>Best regrads, Mykola<br>
</div></div></div>