Hi,
I´m using Tinc for several years, but I didn´t fix a performance problem.
There a about 20 nodes in this network.
Master:
10.0.0.12 (dedicated host in a datacenter, debian, 100mBit port)
tinc.conf:
Name = TincKnoten12
AddressFamily = ipv4
Interface = tun
ProcessPriority=high
mode = router
#DirectOnly = no
Compression=0
PMTUDiscovery = yes
#IndirectData = yes
#ReplayWindow = 64
#ConnectTo = TincKnoten1
GraphDumpFile = /tmp/tinc-graph
LocalDiscovery = yes
ClampMSS = yes
PMTU = 1400
#DirectOnly=yes
#IndirectData=yes
Cipher=AES-128-CBC
#TCPOnly=yes
mac:10.0.0.20 (1gig directly to our backbone via mpls from out office-vlan)
Name=TincKnoten20
AddressFamily = ipv4
Device = /dev/tap0
ConnectTo = TincKnoten12
ProcessPriority=high
mode = router
#DirectOnly = no
Compression=0
Cipher=AES-128-CBC
IndirectData = yes
#ReplayWindow = 64
ClampMSS = yes
PMTU = 1400
PMTUDiscovery = yes
frechly installed debian 10.0.0.27 (50/10MBit DSL Access):
Name=TincKnoten27
AddressFamily=ipv4
Device=/dev/net/tun
ConnectTo = TincKnoten12
LocalDiscovery = yes
AddressFamily = ipv4
Compression=0
ClampMSS = yes
Cipher=AES-128-CBC
ProcessPriority=high
mode = router
PMTUDiscovery = yes
Test with scp:
10.0.0.20->10.0.0.12 7.8MegaByte/s (good enough)
10.0.0.20->10.0.0.27 700kByte (slow)
10.0.0.12-> 10.0.0.20 26MegaByte
10.0.0.12 -> 10.0.0.27 700kByte (slow, should be 10mBit)
10.0.0.27 -> 10.0.0.20 700kByte (slow)
10.0.0.27 -> 10.0.0.12 1MegaByte/s (Linespeed 10mBit->fine)
There a much more nodes (with the same master 10.0.0.12) and the same
speed-problemes on different sites (with 1-2 old openwrt-routers with
very old tinc-versions).
I think the problem is mtu related.
How can I improve the speed? The cpu-speed on the computers should by
high enough.
Best regards,
Marc
graph on 10.0.0.12:
root@www:~# cat /tmp/tinc-graph
digraph {
TincKnoten10 [label = "TincKnoten10"];
TincKnoten12 [label = "TincKnoten12"];
TincKnoten14 [label = "TincKnoten14"];
TincKnoten20 [label = "TincKnoten20"];
TincKnoten24 [label = "TincKnoten24"];
TincKnoten27 [label = "TincKnoten27"];
TincKnoten28 [label = "TincKnoten28"];
TincKnoten30 [label = "TincKnoten30"];
TincKnoten35 [label = "TincKnoten35"];
TincKnoten37 [label = "TincKnoten37"];
TincKnoten38 [label = "TincKnoten38"];
TincKnoten39 [label = "TincKnoten39"];
TincKnoten40 [label = "TincKnoten40"];
TincKnoten41 [label = "TincKnoten41"];
TincKnoten42 [label = "TincKnoten42"];
TincKnoten8 [label = "TincKnoten8"];
TincKnoten12 -> TincKnoten27;
TincKnoten27 -> TincKnoten12;
TincKnoten12 -> TincKnoten35;
TincKnoten35 -> TincKnoten12;
TincKnoten12 -> TincKnoten20;
TincKnoten20 -> TincKnoten12;
TincKnoten12 -> TincKnoten8;
TincKnoten8 -> TincKnoten12;
TincKnoten12 -> TincKnoten42;
TincKnoten42 -> TincKnoten12;
TincKnoten12 -> TincKnoten24;
TincKnoten24 -> TincKnoten12;
TincKnoten12 -> TincKnoten41;
TincKnoten41 -> TincKnoten12;
TincKnoten12 -> TincKnoten38;
TincKnoten38 -> TincKnoten12;
TincKnoten12 -> TincKnoten37;
TincKnoten37 -> TincKnoten12;
TincKnoten12 -> TincKnoten40;
TincKnoten40 -> TincKnoten12;
TincKnoten12 -> TincKnoten39;
TincKnoten39 -> TincKnoten12;
TincKnoten12 -> TincKnoten30;
TincKnoten30 -> TincKnoten12;
TincKnoten10 -> TincKnoten12;
TincKnoten12 -> TincKnoten10;
TincKnoten12 -> TincKnoten14;
TincKnoten14 -> TincKnoten12;
}
root@www:~#
_______________________________________________
tinc mailing list
[email protected]
https://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc
