From nobody Thu Sep 21 19:25:38 2023 X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Rs53G09cwz4tsWf for ; Thu, 21 Sep 2023 19:25:46 +0000 (UTC) (envelope-from mma@darktemple.ch) Received: from mail-gateway-shared15.cyon.net (mail-gateway-shared15.cyon.net [194.126.200.68]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4Rs53D2dFyz3RSD for ; Thu, 21 Sep 2023 19:25:44 +0000 (UTC) (envelope-from mma@darktemple.ch) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=darktemple.ch header.s=default header.b=Jsea5fTK; spf=none (mx1.freebsd.org: domain of mma@darktemple.ch has no SPF policy when checking 194.126.200.68) smtp.mailfrom=mma@darktemple.ch; dmarc=none Received: from s073.cyon.net ([149.126.4.82]) by mail-gateway-shared15.cyon.net with esmtpsa (TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim) (envelope-from ) id 1qjPIz-0000wB-03 for freebsd-net@freebsd.org; Thu, 21 Sep 2023 21:25:41 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=darktemple.ch; s=default; h=Content-Transfer-Encoding:Content-Type: MIME-Version:Message-ID:References:In-Reply-To:Subject:To:From:Date:Sender: Reply-To:Cc:Content-ID:Content-Description; bh=bE3vu+E7aHVn8uhxYZLI/OtWCT4Ja0w8u+KuCgkuP9Q=; b=Jsea5fTKYOa3nW+Bg5l4gfrOQ5 PCenVWGJsctSwGwaPMqakV6V7bPZCnwGVIRFa8rDhevnvSnSrZbJSJw31CbYdWDspQeqYX+sfzD0W baw4DOgKLwPuAuh+zHfL7qlZ2+mMS5q9euaMmR16SbnMhiL1lFo69wgx0xEYv662zLDOH98IKFl5R ZtNVYqWeuyz51x+eCyup6LQdJxHSUszTSm2VsCcu6Nyxl0q0FhmIMveqTDWjGiLYhrZxlYdgWrHbB VGSPlCLXHzhBwYEICia5juAd7OBfcZXWML2uUS2x0u2Vx91k7MHXQkO72s0SIGDYYvxt1du/OdHrb UVVHY+ag==; Received: from [10.20.10.233] (port=54580 helo=mail.cyon.ch) by s073.cyon.net with esmtpa (Exim 4.96) (envelope-from ) id 1qjPIx-003hQo-2Y for freebsd-net@freebsd.org; Thu, 21 Sep 2023 21:25:39 +0200 Date: Thu, 21 Sep 2023 21:25:38 +0200 From: "M. Mader" To: freebsd-net@freebsd.org Subject: Re: openvpn and no buffer space available (13.2-stable) User-Agent: K-9 Mail for Android In-Reply-To: References: Message-ID: <03637CE3-1FA4-4900-AFCE-3D2AE8AE5DD5@darktemple.ch> List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Autocrypt: addr=mma@darktemple.ch; prefer-encrypt=mutual; keydata= mQINBGSN8fwBEADZ70mtskN8FiDdUmeCiIkEgwBHstiUX1w3UvLc663wbAI+cPxqMjh5XIwPU5ma 5JyfBOhOw50tB1W2KNqEDNnfxcYQj2GJN4zq695J/kgkZJF2SQZtxywjdNkaV5eB8kyNkVEjodAw wOeoEWD/+AQ4NPRZmQVJwAEvgNSl7s97qWsc1W72OdBHWtSglBHwpKhfawwqOZbATVoFv4VK1QDt BE4o2LusCq+m0Yql5NfIMt0tpDeVUQeHrW0eoSeIZGGZKwHHg1ZjfjGcMa+u5HJuJNioL7Tkb6Ga u7oP1K2ATJuKMYQlGuWr59V815RDJ2eDkp9qzLGm7vGWhB62PqmlYqtwb9reBpHnhPGDHHgjbl5E yv50sZqptfWgpcP2Symt2Q5S+p/sk4cYH4poce6+4hF5t2LNRQAgC/4tDUKJvInV4BAuEn0XJsW8 mdZi8z7r1+LV2rO1hD+oCnd6UsVk+1fnlp13CfUc2uAyLf6vhAtONkkxlEH8G1HFrcmL6GPqzw7e pcmO4qyVUiLDtLEQdYsIoQ0CAH/K87rUajIPzxUZRcyLI1FC6n7XVySiqgiA2Y6ArsiopKGXdvoj flGBQoHTXY89k/vY8oBlWGUwSz7KFowouElmK+RwQjNuYfCifFpOkOZ2taeMl9p8X7If0WHvyIN1 gctbdvOAYXnOYwARAQABtBxNLiBNYWRlciA8bW1hQGRhcmt0ZW1wbGUuY2g+iQJNBBMBCAA3FiEE um0Wt+j5KRb8jmV5YyszEUJSlY0FAmSN8f4FCQWjmoACGwMECwkIBwUVCAkKCwUWAgMBAAAKCRBj KzMRQlKVjfj4D/4i6uu7G9nqetWFLNEMSnT6rf2bJd6gctIZU6ML7oGw80/8en0fqRqK8jKfbeWN 1hwnOKcgVJp+6bi6vu4FoqEFVV3RKIxEDjlhnEpnckIcdCBSEEgzmXCAVyDsHoEUTT5W9jpS7NOU yrJEyKMTvy9CaQagHvU8et1MBlbkXoEQBHMo0pRT2MSNlCJ908+LugX0mvGyoW0V4rESoPDGGTap S6Kd39nKb1I8hDvinj5IC8o3aB6VPN8pKY1mK2/9LRPNmkxWX4ApQWpi5kY1TrvIjw3tu+9+b6GR RMc2mFCISqFRkNpC8j0t9Oggp8DMlYfCPDfBl9szvBGwHpfCHIirRbgOUKwLlTuLN/3dt1Uc+gvB iK/boUKG6PCnGoqtW9P24Rnlqq0Vg8gVCPC3rTdrdxtXovUIuyjWuuu+6rNvpUACB821PLtd82ZE m6EglBexztdZh3V1lVSyIxLpOR659niPFmkjDqXC3jXhQoV+LurrEtNNZWPEnTnoq/IMM1Whe5IJ Qm/Hn+vJQ3auQT2iPSV/Qd9KJetdPGuQA9D13NdHJYR9CCt+dJb6lM4ZUhGlNhIfBcbgeiht5Jwf yD/HzEQgb85NGXk8xHwjeQxlWVcFAzzp/Yb7tvgKZHwlGM8flU65sXY1FV8WiWVXYPbA6pCs3PWy fHmvQCF4xy9gUbkCDQRkjfH+ARAAkRGPNVKzgjRZNHK3ege0eXuEOkxL1EXD6Q6YT3Qbh5MqOOvo bhJg/khHuPjsN1VOPjtHhdCg1XCDFGWPujFcQNt7Co8i/yFU+dGU1FCakRYpxR+wZdjd6fsniwTT UBG9RuOUfpTae0+f4cKpJqme2qQuiAVv0JO09jiudGF37u0kPS+qg3dyqsX1ARNts59LGPJVtxvq LNhgeqPfTIG+c1auSB0qU5SNQP74OF/ZXvtcSDsuDg05BTET33TV0bem0Q5dc27EjgkXzhJ/gZdk l0zRsBJOoiBl7obtBpO1706GEzQifhQCM5yTDdWxX3lZQbGoSuP12EbdCeDMtaWhR1BVF/gwW5kw brrJT/99+L9K9oVFvuv2mOM6gZrAvy0tOL+hYBYt9QXVC5BpJyjQM9AlAS/4fArDSbR/IJ5vw3tZ F/T8xRZIovt8xTEVxFKF/PvZ7672+7kfGHNoPRY/lINBJRrZHcMxwPnIW/xYFum6+0jAzRPRBynF /B+Lmj5lYZEfC8nBdnWxsN5zOXbkJEvq9xVGx5aFo6OjrnFnwV1keoDirxYBLLBiZ3G/Pa0lYwcE JhqCPdcGxzu8gCiOd5jOASUTfINaWOYYIxvXPYn0qWy5mCmCHCVTtbe6vmEU9p7A7sZCOa86i6rx N6nNQFoASlOLN/Xr1LqmbTgvn7EAEQEAAYkCPAQYAQgAJhYhBLptFrfo+SkW/I5leWMrMxFCUpWN BQJkjfH/BQkFo5qAAhsMAAoJEGMrMxFCUpWNenMQAMWHufXyjxPxiw5y3yun+GCd28oQlaclHhq6 J1eszr6a8se3oo712RuDF9PyLrSMt1hJjV4Wyk+drH8nNaoStNjy+xW5PYW2t9CEz/2IjgSI2eM6 TiHzEvg+G0Qh60hkhLShSHNaJ9/9xkWvaICIHnX0jW5aoVQua/5a1qEQJwA0OT5xOQI84KRm8JDw wGWBiyByMgF5tW0TGklZvX8fJkux3LdJQfSMSHfjScKgUvTY0/b7ISdiqqouajx6WNQ4DAWUjl/4 R7KDAAKMge6N9bFXS4Qj4RqQqYAVW8d5Fc0WIexzy5+OIu/ZD9sFT2glttHozPMdDerPh6CJkekn KRYChyFMK8Fw6pnr3xOwfgCqPl5jQqnCLQnh2rFBa7Q8FJeDBxM5ii3SjWvjh7YJUGvF1WXCNeYY HMvd+8wsSLAYWO3WcaN9wS4cd9BLB+YU3HIU7cOY4qcRHmla7oT31wlfweLa0STF7z5/vRO/W61x R7zk5N+QpJZC53XftNWadePwd/qkTrBJDZCX6CepXx1hQ0qlWqEnNC2yBXGXSYjFftithVz9hPgm 6WJFbEM+dGrq6/0BFTpfRFONvDwRZl5R5XFU0s/3dnb09pbxW/SloIppxsv3vYivQvWD1jQtxobY yuJHnnE/lYPSYxNLSUArrtLUYZgL3liGTVGb1ebU X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - s073.cyon.net X-AntiAbuse: Original Domain - freebsd.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - darktemple.ch X-Get-Message-Sender-Via: s073.cyon.net: authenticated_id: mma@darktemple.ch X-Authenticated-Sender: s073.cyon.net: mma@darktemple.ch X-Spamd-Bar: --- X-Spamd-Result: default: False [-3.40 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-1.00)[-0.999]; R_DKIM_ALLOW(-0.20)[darktemple.ch:s=default]; RCVD_IN_DNSWL_LOW(-0.10)[194.126.200.68:from]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; MLMMJ_DEST(0.00)[freebsd-net@freebsd.org]; MIME_TRACE(0.00)[0:+]; R_SPF_NA(0.00)[no SPF record]; FROM_EQ_ENVFROM(0.00)[]; HAS_X_ANTIABUSE(0.00)[]; ASN(0.00)[asn:47302, ipnet:194.126.200.0/24, country:CH]; HAS_X_GMSV(0.00)[mma@darktemple.ch]; DKIM_TRACE(0.00)[darktemple.ch:+]; RCPT_COUNT_ONE(0.00)[1]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; HAS_X_AS(0.00)[mma@darktemple.ch]; FROM_HAS_DN(0.00)[]; TO_DN_NONE(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; DMARC_NA(0.00)[darktemple.ch]; RCVD_VIA_SMTP_AUTH(0.00)[] X-Rspamd-Queue-Id: 4Rs53D2dFyz3RSD Am 21=2E September 2023 20:16:34 MESZ schrieb void : >Hello @net, > >tl;dr : is there anything specific to freebsd that needs to be set >in order for openvpn to perform well? What buffer space is ping >complaining about? > >context is recent 13=2E2 stable, on amd64, and it's a bhyve guest=2E >The openvpn client uses UDP, on tun0=2E > >The problem is that when the connection becomes heavily >used, the client end finds that sites that would normally >immediately load often wont; one has to sit there clicking >multiple times to get any site to load=2E > >ping shows this: > >64 bytes from 93=2E184=2E216=2E34: icmp_seq=3D37 ttl=3D53 time=3D147=2E40= 7 ms >ping: sendto: No buffer space available >64 bytes from 93=2E184=2E216=2E34: icmp_seq=3D40 ttl=3D53 time=3D174=2E73= 8 ms >64 bytes from 93=2E184=2E216=2E34: icmp_seq=3D41 ttl=3D53 time=3D119=2E04= 8 ms >64 bytes from 93=2E184=2E216=2E34: icmp_seq=3D42 ttl=3D53 time=3D169=2E22= 3 ms >ping: sendto: No buffer space available >64 bytes from 93=2E184=2E216=2E34: icmp_seq=3D44 ttl=3D53 time=3D183=2E49= 3 ms >64 bytes from 93=2E184=2E216=2E34: icmp_seq=3D45 ttl=3D53 time=3D162=2E59= 4 ms >^C >--- example=2Eorg ping statistics --- >46 packets transmitted, 36 packets received, 21=2E7% packet loss >round-trip min/avg/max/stddev =3D 118=2E258/156=2E360/184=2E931/19=2E508 = ms > >I've ran mtu-test on the client, which gives these results > >Empirical MTU test completed [Tried,Actual] local->remote=3D[1455,1455] r= emote->local=3D[1427,1427] > >in /etc/sysctl=2Econf, I've changed these values: > >net=2Einet=2Eudp=2Erecvspace=3D524288 >kern=2Eipc=2Eshm_use_phys=3D1 >net=2Einet=2Etcp=2Esendspace=3D524288 >net=2Einet=2Etcp=2Erecvspace=3D524288 >net=2Einet=2Etcp=2Erfc1323=3D1 >net=2Einet=2Etcp=2Ealways_keepalive=3D0 >kern=2Eipc=2Esoacceptqueue=3D524288 > >in /boot/loader=2Econf, these: > >kern=2Emaxusers=3D"4096" >vm=2Evnode_pbufs=3D"10240" >kern=2Eipc=2Enmbclusters=3D"5000000" > >tia, I run OpenVPN without any such problems=2E My sysctl=2Econf as well as my = loader=2Econf are pretty much default=2E I'd try what happens without vm=2Evnode_pbufs=3D"10240" Regards, Mathias