Tinc via satellite link stalls often

[Nick Hibma]

Guus,

Below a segment of a log file. I am trying to analyse why the satellite link goes down and up all the time (sometimes 10 to 15 times an hour, sometimes not for a day.

My guess is that this indicates packet loss on the satelllite link and tinc not really recovering from that. Where I inserted an empty line the log basically stopped and was silent for I guess for 14 minutes? Would setting 'ReplayWindow = 0' provide some help here? The tunnel uses UDP.

Any pointers as to what I could do about this? Where to look?


Apr 23 19:25:42 sigq tinc.VSat[52103]: Listening on 0.0.0.0 port 655
Apr 23 19:25:42 sigq tinc.VSat[52103]: Ready
Apr 23 19:25:45 sigq tinc.VSat[52103]: Connection with lcrproxy (123.456.789.12 port 655) activated
Apr 23 19:32:53 sigq tinc.VSat[52103]: Packet from lcrproxy (123.456.789.12 port 655) is 347 seqs in the future, dropped (1)
Apr 23 19:32:53 sigq tinc.VSat[52103]: Packet from lcrproxy (123.456.789.12 port 655) is 348 seqs in the future, dropped (2)
Apr 23 19:32:53 sigq tinc.VSat[52103]: Packet from lcrproxy (123.456.789.12 port 655) is 349 seqs in the future, dropped (3)
Apr 23 19:32:53 sigq tinc.VSat[52103]: Packet from lcrproxy (123.456.789.12 port 655) is 350 seqs in the future, dropped (4)

Apr 23 19:32:53 sigq tinc.VSat[52103]: Lost 351 packets from lcrproxy (123.456.789.12 port 655)
Apr 23 19:45:02 sigq tinc.VSat[52103]: Closing connection with lcrproxy (123.456.789.12 port 655)
Apr 23 19:45:02 sigq tinc.VSat[52103]: Could not set up a meta connection to lcrproxy
Apr 23 19:45:02 sigq tinc.VSat[52103]: Trying to re-establish outgoing connection in 5 seconds
Apr 23 19:45:02 sigq tinc.VSat[52103]: Received UDP packet from unknown source 123.456.789.12 port 655
Apr 23 19:45:02 sigq last message repeated 3 times
Apr 23 19:45:02 sigq tinc.VSat[52103]: Received UDP packet from unknown source 123.456.789.12 port 655
Apr 23 19:45:22 sigq last message repeated 184 times
Apr 23 19:45:22 sigq tinc.VSat[52103]: Timeout from lcrproxy (123.456.789.12 port 655) during authentication
Apr 23 19:45:22 sigq tinc.VSat[52103]: Could not set up a meta connection to lcrproxy
Apr 23 19:45:22 sigq tinc.VSat[52103]: Trying to re-establish outgoing connection in 10 seconds
Apr 23 19:45:22 sigq tinc.VSat[52103]: Received UDP packet from unknown source 123.456.789.12 port 655
Apr 23 19:45:38 sigq last message repeated 248 times
Apr 23 19:45:42 sigq tinc.VSat[52103]: Timeout from lcrproxy (123.456.789.12 port 655) during authentication
Apr 23 19:45:42 sigq tinc.VSat[52103]: Could not set up a meta connection to lcrproxy
Apr 23 19:45:42 sigq tinc.VSat[52103]: Trying to re-establish outgoing connection in 15 seconds
Apr 23 19:46:04 sigq tinc.VSat[52103]: Connection with lcrproxy (123.456.789.12 port 655) activated

Thanks,

Nick Hibma
AnyWi Technologies

tinc.conf:

Name = client1
ConnectTo = server1
PrivateKeyFile = /usr/local/etc/tinc/VSat/rsa_key.priv.client1
Device = /dev/tap1
Mode = switch
DirectOnly = Yes
TunnelServer = Yes
PingTimeout = 10


server1:

Address = server1
Subnet = 42:00:00:00:00:00
PMTU = 1400

-----BEGIN RSA PUBLIC KEY-----
...
-----END RSA PUBLIC KEY-----


client1:

Port = 655
Subnet = 42:00:00:00:01:c2
PMTU = 1400

-----BEGIN RSA PUBLIC KEY-----
...
-----END RSA PUBLIC KEY-----