Nice gesture, but no. Raised it from 1024 to 4096, So I presume about five pv-clients should be more than enough to solve this
Hans -----Original Message----- From: Simon Deziel [mailto:[email protected]] Sent: dinsdag 9 december 2014 16:18 To: [email protected] Subject: Re: [Openvpn-users] limits Hi Hans, Maybe you are hitting the maximum of open files for the user your VPN server runs as? On my system, this is 1024. If you are on a Debian/Ubuntu system you can test by adding this line to /etc/default/openvpn: ulimit -n 2048 And restarting the server should bump the limit. On another OS, this should be easily added to the initscript. Regards, Simon On 12/09/2014 09:23 AM, [email protected] wrote: > Hi all, > > > > I've been trying to do some testing in our lab. > > We rather find out about impact and limitations in the lab than later > on in real live ;-) > > > > I use to think that the max number of unnels per vpn-process was > limited to 250, > > But much to my surprise, this is apparently an urban-legend. > > From my test-laptop I could easily create 500 parallel vpn-tunnels... > > Trying to push it even further, I got to exact 1024 tunnels. > > > > Multiple client-processes, all with unique key/cert, towards a single > vpn-server-process > > At the server-side, the openvpn-process is configured for 2048 clients > (max-clients, & network for tunnel) > > > > The fact that it stops exactly at 1024, makes me wonder what is > causing this limit.. > > Is it a kernel parameter maximizing the number of tun-devices? > > > > When examining the contents of /var/log, neither syslog nor kernel > showd anything related > > Same with looking at sysctl -a. > > Also when starting the finale one (#1025) and raising verbose from 0 > to 8, nothing peculiar shows in the output. > > > > So is it valid to assume there is a hardcoded (but undetectable) limit > of 1024 tun-devices ? > > > > Hans > > > > ---------------------------------------------------------------------- > -- Dit bericht kan informatie bevatten die niet voor u is bestemd. > Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u > is toegezonden, wordt u verzocht dat aan de afzender te melden en het > bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor > schade, van welke aard ook, die verband houdt met risico's verbonden > aan het electronisch verzenden van berichten. > > This message may contain information that is not intended for you. If > you are not the addressee or if this message was sent to you by > mistake, you are requested to inform the sender and delete the > message. The State accepts no liability for damage of any kind > resulting from the risks inherent in the electronic transmission of messages. > > > ---------------------------------------------------------------------- > -------- Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT > Server from Actuate! Instantly Supercharge Your Business Reports and > Dashboards with Interactivity, Sharing, Native Excel Exports, App > Integration & more Get technology previously reserved for > billion-dollar corporations, FREE > http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg. > clktrk > > > > _______________________________________________ > Openvpn-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/openvpn-users > ------------------------------------------------------------------------------ Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server from Actuate! Instantly Supercharge Your Business Reports and Dashboards with Interactivity, Sharing, Native Excel Exports, App Integration & more Get technology previously reserved for billion-dollar corporations, FREE http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk _______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users ------------------------------------------------------------------------------ Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server from Actuate! Instantly Supercharge Your Business Reports and Dashboards with Interactivity, Sharing, Native Excel Exports, App Integration & more Get technology previously reserved for billion-dollar corporations, FREE http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk _______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
