Project

General

Profile

Actions

Bug #10311

open

Too low net.link.ifqmaxlen causes packet drop under load when using OpenVPN inside bridge interface under load

Added by Alexey Ab over 2 years ago. Updated 11 months ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
OpenVPN
Target version:
-
Start date:
03/02/2020
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.4.4-p3
Affected Architecture:
amd64

Description

Default value for net.link.ifqmaxlen is 128.

When OpenVPN is under load and transfer speed reaches 20-30 MBit, we have following errors count increasing:

VPN1_BRIDGE Interface:
In/out errors: 0/4623

netstat -idb -I bridge0 -> OERRS=4623
netstat -idb -I ovpnc6 -> DROP=4623

(Drops are important errors, but are not shown on status_interfaces.php page, please consider showing them too)

Increasing net.link.ifqmaxlen to 2048 eliminates these errors, and gives significant OpenVPN throughput increase (5x).

Also it was observed that packet drops may depend on system power management, setting CPU to high performance mode also eliminates
packet drops and gives significant OpenVPN performance increase.

Actions

Also available in: Atom PDF