OVPN Restart on Heavy Load?



  • Hi all,

    I use pfSense 2.1.5 with three external WAN connections.

    (one cable 100Mbit, other two dsl with 6Mbit each). Second site has the cable 100Mbit and only one dsl 6Mbit.

    I created a OpenVPN tunnel between the two sites and it is working nearly without any issues. The WAN IPs are static.  ;D
    I have gateway monitoring in place to see if one of the WANs go down- to switch over to the other lines to have at least a connection.

    Now what I see are more or less often OVPN reconnects.
    digging through the log files it appears the gateway monitoring process gets delayed due to the heavy OVPN traffic. This results in an apinger alarm which results in a reload of the VPN server followed by a service interruption and slow traffic…..

    Is there any easy way to monitor the gateways in a way they do not get affected by heavy traffic? It is not really helpful in this case.

    Thanks!

    C.


  • Rebel Alliance Developer Netgate

    In the advanced options for the gateways, adjust the latency thresholds higher so that they won't trigger so soon, and set the down time higher (30-60sec)

    https://doc.pfsense.org/index.php/Gateway_Settings#Advanced_Options


Log in to reply