Avatar

tony

tony

About

Username
tony
Joined
Visits
29
Last Active
Roles
Member
Thanked
2

Comments

  • No problem, I guess the timing was unfortunate as I ordered the VPS at the beginning of the DDoS attack. Please let me know when it is over so I can see if the situation effectively improved.
  • Sorry for tagging you untimely, it was not my intention, I just wanted to quote what I was answering for clarity. Also I did not shit on anybody, if I identified the provider, its because I think that it is a useful information to identify the problem. I am not trying to get thousands of Gb continuously, sorry if the…
  • Thank you, I am also discussing with the customer support trying to catch the problem. As I know these offers are supposed to be support-less I don't wan't do be too invasive regarding support .
  • There is also the 500GB limit per month to prevent abuse.
  • I don't understand what you are trying to prove. The problem was here way before I started the tests. If doing apt dist-upgrade made me IO de-prioritized then the service is not cheap anymore regarding what is provided :s
  • 100MB file is not enough, so I took the freedom to use this one : https://speed.hetzner.de/10GB.bin. After a few seconds the download freeze. I am looking for a way to get a non interactive output from wget or curl.
  • The -n option is for the number of bytes to transmit, nothing related to the number of threads, by default it seems to use 3 threads server side, th 18 lines you see are not parallel, they are sequencial. I guess it should be able to deal 10Mb (1.2MB !) per second. I already had two VPS before, also based on OpenVZ, I…
  • By limiting the bandwidth to 10Mb I get much more reliable performances and almost no freeze but there is still (fewer and shorter) freezes. $ iperf -c vps -p 19003 -i 0.5 -t 300 -b 10M [ 3] 75.0-75.5 sec 640 KBytes 10.5 Mbits/sec[ 3] 75.5-76.0 sec 640 KBytes 10.5 Mbits/sec[ 3] 76.0-76.5 sec 640 KBytes 10.5 Mbits/sec[ 3]…
  • I already have 512MB of swap and even with very low resource intensive tasks like iperf (low on CPU and RAM, not on network) i get freezes. For instance this is the output of iperf : [ 3] 23.0-23.5 sec 7.88 MBytes 132 Mbits/sec[ 3] 23.5-24.0 sec 5.38 MBytes 90.2 Mbits/sec[ 3] 24.0-24.5 sec 5.25 MBytes 88.1 Mbits/sec[ 3]…
  • I understand that this is low end but I also like to understand what happens. Also I will be the only user of this service and I can deal with less performances but the periodic freezes are definitely problematic. I can see server side the OpenVPN process rising to 100% CPU and then everything freezes. I am currently…
  • 256MB Edit: after some more tests it looks like it is more a CPU throttling or something like that which causes the network freeze. I continue the investigation.
  • OMG that was the problem since the beginning :astonished: it finally works. Thank you all folks for the valuable help ! There is probably an incompatibility between container iptables implementation and the host kernel version or something like that. Again, thanks a lot !
  • This is what I wanted to test, I will test this this evening.
  • All legacy tables look empy : iptables-legacy -t nat -L Chain PREROUTING (policy ACCEPT)target prot opt source destinationChain INPUT (policy ACCEPT)target prot opt source destinationChain OUTPUT (policy ACCEPT)target prot opt source destinationChain POSTROUTING (policy ACCEPT)target prot opt source destination…
  • The output of ip6tables (see above) makes me pretty confident that they are applied.
  • sounds good : openvpn-iptables.service Loaded: loaded (/etc/systemd/system/openvpn-iptables.service; enabled; vendor preset: enabled) Active: active (exited) since Mon 2020-05-04 15:11:24 BST; 48min ago Process: 135 ExecStart=/usr/sbin/iptables -t nat -A POSTROUTING -s 10.8.0.0/24 ! -d 10.8.0.0/24 -j SNAT --to 172.16.1.190…
  • Just made a clean reinstall and use Nyr script, still no luck :( Openvpn client log : # openvpn --config torrent.ovpnMon May 4 12:56:18 2020 Unrecognized option or missing or extra parameter(s) in torrent.ovpn:13: block-outside-dns (2.4.4)Mon May 4 12:56:18 2020 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4]…
  • I will try today but as the VPN connection does not look to be the issue it is really frustrating.
  • On the client side these are the routes before connecting to the VPN : default via 10.10.125.1 dev eth010.10.125.0/24 dev eth0 proto kernel scope link src 10.10.125.155 And here are the routes after connecting to the VPN : 0.0.0.0/1 via 10.8.0.1 dev tun0default via 10.10.125.1 dev eth010.8.0.0/24 dev tun0 proto kernel…
  • The OS is Debian 10.3, I think the only firewall is iptables and here is the content of /etc/iptables/add-openvpn-rules.sh : #!/bin/shiptables -t nat -I POSTROUTING 1 -s 10.8.0.0/24 -o venet0 -j MASQUERADEiptables -I INPUT 1 -i tun0 -j ACCEPTiptables -I FORWARD 1 -i venet0 -o tun0 -j ACCEPTiptables -I FORWARD 1 -i tun0 -o…

This Site is currently in maintenance mode.
Please check back here later.

→ Site Settings