In multi.c, an error should be generated when reaching the max_clients limit as:
if (hash_n_elements (m->hash) >= m->max_clients)
msg (D_MULTI_ERRORS, "MULTI: new incoming connection would exceed maximum
number of clients (%d)", m->max_clients);
I see the default of 1024 in options.c, but I am not finding a hard-set limit
anywhere in the source.
Are you not seeing the above error in the logs when you try to connect client
number 1025? This may be a bug, in that case.
-----
Eric F Crist
On Dec 9, 2014, at 08:46:32, Jan Just Keijser <[email protected]> wrote:
> Hi Hans,
>
> [email protected] wrote:
>>
>> Hi all,
>>
>> I’ve been trying to do some testing in our lab.
>>
>> We rather find out about impact and limitations in the lab than later
>> on in real live ;-)
>>
>> I use to think that the max number of unnels per vpn-process was
>> limited to 250,
>>
>> But much to my surprise, this is apparently an urban-legend.
>>
>> From my test-laptop I could easily create 500 parallel vpn-tunnels…
>>
>> Trying to push it even further, I got to exact 1024 tunnels.
>>
>> Multiple client-processes, all with unique key/cert, towards a single
>> vpn-server-process
>>
>> At the server-side, the openvpn-process is configured for 2048 clients
>> (max-clients, & network for tunnel)
>>
>> The fact that it stops exactly at 1024, makes me wonder what is
>> causing this limit..
>>
>> Is it a kernel parameter maximizing the number of tun-devices?
>>
>> When examining the contents of /var/log, neither syslog nor kernel
>> showd anything related
>>
>> Same with looking at sysctl –a.
>>
>> Also when starting the finale one (#1025) and raising verbose from 0
>> to 8, nothing peculiar shows in the output.
>>
>> So is it valid to assume there is a hardcoded (but undetectable) limit
>> of 1024 tun-devices ?
>>
>
> the server does not allocate tun or tap device per connection, all
> traffic is routed over a single interface.
> The limit you're hitting seems to be the max_clients default , which is
> 1024. Try adding
> --max-clients 2000
> to see if you can connect more clients ; I am not sure what the absolute
> hard limit for max_clients is, however.
>
> HTH,
>
> JJK
>
>
> ------------------------------------------------------------------------------
> Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
> from Actuate! Instantly Supercharge Your Business Reports and Dashboards
> with Interactivity, Sharing, Native Excel Exports, App Integration & more
> Get technology previously reserved for billion-dollar corporations, FREE
> http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
> _______________________________________________
> Openvpn-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/openvpn-users
------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
