Tinc 1.0.24 regulary disconnected

[John Lewis]

Promox 4.2 running on 2 nodes + 1 quorum = total 3 servers.
All of them have tinc 1.0.24 running.

On very rare occasions (every few days or 1~2 weeks), my website hosted on
this proxmox node will throw cloudflare 522 connection timed out for few
seconds or few minutes:
https://support.cloudflare.com/hc/en-us/articles/200171906-Error-522-Connection-timed-out

This problem has been driving me crazy. I'm not sure, but I suspect this is
caused by tinc vpn that somehow got disconnected.

root at node1pve:/# iperf -s
------------------------------------------------------------
Server listening on TCP port 5001
TCP window size: 4.00 KByte (default)
------------------------------------------------------------
[ 4] local 192.168.xxx.xxx port 5001 connected with 192.168.xxx.xxx port
13394
[ ID] Interval Transfer Bandwidth
[ 4] 0.0-10.1 sec 1.02 GBytes 868 Mbits/sec

root at node2pve:/# iperf -c node1pve
------------------------------------------------------------
Client connecting to node1pve, TCP port 5001
TCP window size: 45.0 KByte (default)
------------------------------------------------------------
[ 3] local 192.168.xxx.xxx port 13394 connected with 192.168.xxx.xxx port
5001
[ ID] Interval Transfer Bandwidth
[ 3] 0.0-10.0 sec 1.02 GBytes 876 Mbits/sec

root at node3pve:/# iperf -c node1pve
------------------------------------------------------------
Client connecting to node1pve, TCP port 5001
TCP window size: 45.0 KByte (default)
------------------------------------------------------------
[ 3] local 192.168.xxx.xxx port 55336 connected with 192.168.xxx.xxx port
5001
[ ID] Interval Transfer Bandwidth
[ 3] 0.0-10.0 sec 1.06 GBytes 907 Mbits/sec


/etc/tinc/vpn/tinc.conf:

Name = node1pve
AddressFamily = ipv4
Device = /dev/net/tun
Mode = switch
ConnectTo = node2pve
Digest = none
Cipher = none

What should I do? Maybe some setting on tinc.conf file?

Thanks :)

Best regards,
John.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20160716/e99d9e89/attachment.html>