<div dir="ltr"><pre style="white-space:pre-wrap">Hello Maximilian,</pre><pre style="white-space:pre-wrap">I think may be cause by MTU proble if you have many peer. you can run tincd with -d 5 or tincd -n "yournetname" -k INT , check the log file to see what happen.</pre><pre style="white-space:pre-wrap">if so, you can use my patch to fix this.</pre><pre style="white-space:pre-wrap">thanks</pre><pre style="white-space:pre-wrap">PHB</pre></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sat, Mar 21, 2020 at 7:00 PM <<a href="mailto:tinc-request@tinc-vpn.org">tinc-request@tinc-vpn.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Send tinc mailing list submissions to<br>
<a href="mailto:tinc@tinc-vpn.org" target="_blank">tinc@tinc-vpn.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc" rel="noreferrer" target="_blank">https://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:tinc-request@tinc-vpn.org" target="_blank">tinc-request@tinc-vpn.org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:tinc-owner@tinc-vpn.org" target="_blank">tinc-owner@tinc-vpn.org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of tinc digest..."<br>
Today's Topics:<br>
<br>
1. Re: High tinc traffic on ethernet without tinc load (Lars Kruse)<br>
2. Re: High tinc traffic on ethernet without tinc load<br>
(Maximilian Stein)<br>
3. Re: High tinc traffic on ethernet without tinc load (Lars Kruse)<br>
4. Re: High tinc traffic on ethernet without tinc load<br>
(Maximilian Stein)<br>
<br><br><br>---------- Forwarded message ----------<br>From: Lars Kruse <<a href="mailto:lists@sumpfralle.de" target="_blank">lists@sumpfralle.de</a>><br>To: <a href="mailto:tinc@tinc-vpn.org" target="_blank">tinc@tinc-vpn.org</a><br>Cc: <br>Bcc: <br>Date: Fri, 20 Mar 2020 15:43:13 +0100<br>Subject: Re: High tinc traffic on ethernet without tinc load<br>Hallo Maximilian,<br>
<br>
Am Thu, 19 Mar 2020 16:31:57 +0100<br>
schrieb Maximilian Stein <<a href="mailto:m@steiny.biz" target="_blank">m@steiny.biz</a>>:<br>
<br>
> There I learned the basic patterns of these situations (communication with<br>
> many peers on ethernet but nearly nothing on the virtual tinc link).<br>
<br>
Did you really try the nice visualizations in the "Statistics" menu?<br>
These should allow you to see, which protocols and which peers cause the<br>
traffic.<br>
<br>
I am slightly confused, that you already took a look at the traffic, but you did<br>
not mention, which type of traffic makes up the bulk of the excessive packets<br>
you encountered. You mentioned "a few SSDP packages", but nothing else.<br>
<br>
Or did I just overlook it in your emails?<br>
<br>
Happy traffic hunting!<br>
<br>
Lars<br>
<br>
<br><br><br>---------- Forwarded message ----------<br>From: Maximilian Stein <<a href="mailto:m@steiny.biz" target="_blank">m@steiny.biz</a>><br>To: <a href="mailto:tinc@tinc-vpn.org" target="_blank">tinc@tinc-vpn.org</a><br>Cc: <br>Bcc: <br>Date: Fri, 20 Mar 2020 19:43:35 +0100<br>Subject: Re: High tinc traffic on ethernet without tinc load<br>Hi Lars,<br>
<br>
Am 20.03.20 um 15:43 schrieb Lars Kruse:<br>
> Did you really try the nice visualizations in the "Statistics" menu?<br>
> These should allow you to see, which protocols and which peers cause the<br>
> traffic.<br>
><br>
> I am slightly confused, that you already took a look at the traffic, but you did<br>
> not mention, which type of traffic makes up the bulk of the excessive packets<br>
> you encountered. You mentioned "a few SSDP packages", but nothing else.<br>
><br>
> Or did I just overlook it in your emails?<br>
><br>
> Happy traffic hunting!<br>
><br>
> Lars<br>
> _______________________________________________<br>
<br>
yeah, I had a look at all packages, but there are only very few packages<br>
on the virtual tinc link, but a huge amount of packages on the Ethernet<br>
link. When I tcpdump the packages on the ethernet link and on the tinc<br>
link at the same time I see only as few as 100 packages per second (or<br>
less) but more than 3000 packages per second on the ethernet link that I<br>
can relate to tinc.<br>
<br>
So, I came to the conclusion that this high amount of traffic on the<br>
ethernet link is not directly correlated to the actual virtual traffic,<br>
because in other situations, when there is acutally load on the tinc<br>
network, I see only a very moderate rise of the number of packages on<br>
the ethernet link. So, although I do not know much about the tinc<br>
internals, under normal circumstances the number of packages on ethernet<br>
vs those on the virtual tinc adapter seem to correlate linearly. This is<br>
clearly not the case during those high traffic events.<br>
<br>
My current mitigation is to stop some tinc peers for ten seconds and to<br>
start them again afterwards, that usually causes the excessive traffic<br>
to stop without interrupting service too much.<br>
<br>
Cheers,<br>
Maximilian<br>
<br>
<br>
<br><br><br>---------- Forwarded message ----------<br>From: Lars Kruse <<a href="mailto:lists@sumpfralle.de" target="_blank">lists@sumpfralle.de</a>><br>To: <a href="mailto:tinc@tinc-vpn.org" target="_blank">tinc@tinc-vpn.org</a><br>Cc: <br>Bcc: <br>Date: Fri, 20 Mar 2020 21:09:18 +0100<br>Subject: Re: High tinc traffic on ethernet without tinc load<br>Hello Maximilian,<br>
<br>
Am Fri, 20 Mar 2020 19:43:35 +0100<br>
schrieb Maximilian Stein <<a href="mailto:m@steiny.biz" target="_blank">m@steiny.biz</a>>:<br>
<br>
> My current mitigation is to stop some tinc peers for ten seconds and to<br>
> start them again afterwards, that usually causes the excessive traffic<br>
> to stop without interrupting service too much.<br>
<br>
I am guessing now: the rise of traffic on the ethernet link is caused by<br>
packets being exchanged between the tinc processes (e.g. port 655)?<br>
I think, you did not mention this explicitly, but the effect of a tinc restart<br>
points in this direction. This information is quite relevant for the further<br>
discussion, I guess.<br>
<br>
Cheers,<br>
Lars<br>
<br>
<br><br><br>---------- Forwarded message ----------<br>From: Maximilian Stein <<a href="mailto:m@steiny.biz" target="_blank">m@steiny.biz</a>><br>To: <a href="mailto:tinc@tinc-vpn.org" target="_blank">tinc@tinc-vpn.org</a><br>Cc: <br>Bcc: <br>Date: Fri, 20 Mar 2020 21:44:12 +0100<br>Subject: Re: High tinc traffic on ethernet without tinc load<br><div>Yes, exactly. There are lots of packages exchanged between tinc processes on port 655, accounting to 99 % of the Ethernet traffic, while the virtual interface stays almost idle.<br><br>Best,<br>Maximilian<br><br><div class="gmail_quote">Am 20. März 2020 21:09:18 MEZ schrieb Lars Kruse <<a href="mailto:lists@sumpfralle.de" target="_blank">lists@sumpfralle.de</a>>:<blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<pre>Hello Maximilian,<br><br>Am Fri, 20 Mar 2020 19:43:35 +0100<br>schrieb Maximilian Stein <<a href="mailto:m@steiny.biz" target="_blank">m@steiny.biz</a>>:<br><br><blockquote class="gmail_quote" style="margin:0pt 0pt 1ex 0.8ex;border-left:1px solid rgb(114,159,207);padding-left:1ex">My current mitigation is to stop some tinc peers for ten seconds and to<br>start them again afterwards, that usually causes the excessive traffic<br>to stop without interrupting service too much.<br></blockquote><br>I am guessing now: the rise of traffic on the ethernet link is caused by<br>packets being exchanged between the tinc processes (e.g. port 655)?<br>I think, you did not mention this explicitly, but the effect of a tinc restart<br>points in this direction. This information is quite relevant for the further<br>discussion, I guess.<br><br>Cheers,<br>Lars<hr>tinc mailing list<br><a href="mailto:tinc@tinc-vpn.org" target="_blank">tinc@tinc-vpn.org</a><br><a href="https://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc" target="_blank">https://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc</a><br></pre></blockquote></div></div>_______________________________________________<br>
tinc mailing list<br>
<a href="mailto:tinc@tinc-vpn.org" target="_blank">tinc@tinc-vpn.org</a><br>
<a href="https://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc" rel="noreferrer" target="_blank">https://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc</a><br>
</blockquote></div>