I am running an OpenVPN server on a Debian virtual machine.
OpenVPN 2.1.0 x86_64-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [MH] [PF_INET6] [eurephia] built on Jul 9 2010 Originally developed by James Yonan Copyright (C) 2002-2009 OpenVPN Technologies, Inc. <email@example.com>
I recently switch from the TCP protocol to UDP. I had to use TCP as this was the only protocol that wasn't blocked in the network I used my VPN. I However won't be using that network anymore, and UDP should be allowed on all networks I'll be using the VPN in now.
However, I recently started to notice random disconnects on the VPN clients (both on a Mac and a Windows 7). I sometimes manage to stay connected for over an hour, sometimes only a couple of minutes. Also attempting to reconnect rarely works and I need to reload or restart the VPN service for it to work.
This is what's in the server log:
Sun Jul 25 12:54:29 2010 us=83586 vpn.rootspirit.com/220.127.116.11:59101 PUSH: Received control message: 'PUSH_REQUEST' Sun Jul 25 12:54:29 2010 us=83660 vpn.rootspirit.com/18.104.22.168:59101 SENT CONTROL [vpn.rootspirit.com]: 'PUSH_REPLY,route 22.214.171.124 255.255.255.0,dhcp-option DOMAIN vpn.tuinslak.org,dhcp-option DNS 10.19.88.1,dhcp-option DNS 126.96.36.199,dhcp-option DNS 188.8.131.52,dhcp-option DNS 184.108.40.206,dhcp-option NTP 220.127.116.11,redirect-gateway def1,route 10.19.88.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.19.88.6 10.19.88.5' (status=1) Sun Jul 25 13:49:23 2010 us=593925 MULTI: multi_create_instance called Sun Jul 25 13:49:23 2010 us=593996 18.104.22.168:63398 Re-using SSL/TLS context Sun Jul 25 13:49:23 2010 us=594028 22.214.171.124:63398 LZO compression initialized Sun Jul 25 13:49:23 2010 us=594125 126.96.36.199:63398 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ] Sun Jul 25 13:49:23 2010 us=594140 188.8.131.52:63398 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ] Sun Jul 25 13:49:23 2010 us=594175 184.108.40.206:63398 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher DES-EDE3-CBC,auth SHA1,keysize 192,tls-auth,key-method 2,tls-server' Sun Jul 25 13:49:23 2010 us=594188 220.127.116.11:63398 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher DES-EDE3-CBC,auth SHA1,keysize 192,tls-auth,key-method 2,tls-client' Sun Jul 25 13:49:23 2010 us=594206 18.104.22.168:63398 Local Options hash (VER=V4): 'b5edb94e' Sun Jul 25 13:49:23 2010 us=594222 22.214.171.124:63398 Expected Remote Options hash (VER=V4): '53f7fc82' Sun Jul 25 13:49:23 2010 us=594255 126.96.36.199:63398 TLS: Initial packet from 188.8.131.52:63398, sid=ad75fbfb 003c5c1f Sun Jul 25 13:50:23 2010 us=47907 184.108.40.206:63398 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) Sun Jul 25 13:50:23 2010 us=47956 220.127.116.11:63398 TLS Error: TLS handshake failed Sun Jul 25 13:50:23 2010 us=48048 18.104.22.168:63398 SIGUSR1[soft,tls-error] received, client-instance restarting Sun Jul 25 13:53:09 2010 us=208133 vpn.rootspirit.com/22.214.171.124:59101 [vpn.rootspirit.com] Inactivity timeout (--ping-restart), restarting Sun Jul 25 13:53:09 2010 us=208192 vpn.rootspirit.com/126.96.36.199:59101 SIGUSR1[soft,ping-restart] received, client-instance restarting
Everything seems to lead to a ping timeout or broken internet connection. However, other PCs here in this network stay connected to the internet just fine. So I don't think it's my vDSL connection that's dropping. Same for packet loss to the server; close to 0% loss.
Keep alive is set to this:
keepalive 10 120
Any idea what might cause this issue?
Kind regards, Tuinslak