Dear Ilya, No, it is disabled.
[image: image.png] On Thu, Oct 4, 2018 at 3:14 PM Илья Шипицин <chipits...@gmail.com> wrote: > congestion can be setup using datacenter bridging > > > https://docs.microsoft.com/en-us/windows-server/networking/technologies/dcb/dcb-manage > > actually, I thought it works in another direction (i.e. you specify it in > windows and distribute to network switches). > is DCB in use ? > > чт, 4 окт. 2018 г. в 17:02, Rostyslav Maryliak < > rostyslav.maryl...@idealscorp.com>: > >> Dear Ilya, >> >> Sure, the results are the same for all our win2016 servers: >> >> PS C:\Users\Administrator> [environment]::OSVersion.Version >> >> Major Minor Build Revision >> ----- ----- ----- -------- >> 10 0 14393 0 >> >> On Thu, Oct 4, 2018 at 2:45 PM Илья Шипицин <chipits...@gmail.com> wrote: >> >>> >>> >>> чт, 4 окт. 2018 г. в 15:50, Rostyslav Maryliak < >>> rostyslav.maryl...@idealscorp.com>: >>> >>>> Dear Illya, >>>> >>>> Sorry for misleading you. I want to set this parameter to "none" >>>> globally. >>>> I CAN change "Congestion Control Provider" setting for different >>>> templates (i.e. Internet. Datacenter etc) in Powershell, but not to a >>>> "None" value. >>>> >>>> In Powershell there is simply no option for this value: >>>> PS C:\Users\Administrator> Set-NetTCPSetting -SettingName Datacenter >>>> -CongestionProvider [ CTCP | CUBIC | DCTCP | Default | LEDBAT | NewReno ] >>>> >>>> I've tried different values, but still no luck. >>>> >>>> In CMD there is such option, but it does not apply any changes for it: >>>> C:\Users\Administrator> netsh int tcp set supplemental >>>> template=datacenter congestionprovider=*none* >>>> Ok. >>>> >>>> C:\Users\Administrator> netsh int tcp show supplemental >>>> template=datacenter >>>> TCP Supplemental Parameters >>>> ---------------------------------------------- >>>> Minimum RTO (msec) : 20 >>>> Initial Congestion Window (MSS) : 10 >>>> Congestion Control Provider : *dctcp* >>>> Enable Congestion Window Restart : enabled >>>> Delayed ACK timeout (msec) : 10 >>>> Delayed ACK frequency : 2 >>>> Enable RACK : disabled >>>> Enable Tail Loss Probe : disabled >>>> >>>> Also, as I've mentioned in referred thread, such issue occurs on all >>>> our win2016 servers, except one. >>>> >>> >>> can you provide the output of >>> >>> >>> [environment]::OSVersion.Version >>> >>> for that 2016 server ? (and for other servers) >>> >>> >>> >>>> This exception server has "Congestion Control Provider" setting set to >>>> "none" somehow. >>>> But still it is very strange for me that I have such slow network speed >>>> via the tunnel for all win2016 servers "out of the box". >>>> >>>> Can you please check this from your side as well and confirm or >>>> disprove the issue? >>>> >>>> >>>> On Thu, Oct 4, 2018 at 12:10 PM Илья Шипицин <chipits...@gmail.com> >>>> wrote: >>>> >>>>> thank you for your investigation. >>>>> >>>>> congestion provider can be customized if you select "*Datacenter >>>>> Custom"* >>>>> >>>>> чт, 4 окт. 2018 г. в 13:58, Rostyslav Maryliak < >>>>> rostyslav.maryl...@idealscorp.com>: >>>>> >>>>>> Dear Ilya, >>>>>> >>>>>> I've checked "Get-NetTCPConnection" command output on both win2012r2 >>>>>> and win2016 servers. >>>>>> >>>>>> win2012r2 server works as OpenVPN server. Internal IP address - >>>>>> 10.0.4.1. OpenVPN tunnel IP address - 172.16.144.1 >>>>>> win2016 server works as OpenVPN client. Internal IP address - >>>>>> 10.0.44.1. OpenVPN tunnel IP address - 172.16.144.18 >>>>>> >>>>>> >>>>>> *From win2012r2 server:* >>>>>> >>>>>> PS C:\Users\Administrator> Get-NetTCPConnection -RemoteAddress >>>>>> 10.0.44.1 >>>>>> LocalAddress LocalPort RemoteAddress >>>>>> RemotePort State >>>>>> AppliedSetting >>>>>> ------------ --------- >>>>>> ------------- ---------- >>>>>> ----- -------------- >>>>>> 172.16.144.1 56437 10.0.44.1 >>>>>> 53005 Established >>>>>> *Datacenter* >>>>>> >>>>>> PS C:\Users\Administrator> Get-NetTCPConnection -RemoteAddress >>>>>> 172.16.144.18 >>>>>> LocalAddress LocalPort RemoteAddress >>>>>> RemotePort State >>>>>> AppliedSetting >>>>>> ------------ --------- >>>>>> ------------- ---------- >>>>>> ----- -------------- >>>>>> 10.0.4.1 11616 >>>>>> 172.16.144.18 56882 Established >>>>>> *Datacenter* >>>>>> 10.0.4.1 11616 >>>>>> 172.16.144.18 56905 Established >>>>>> *Datacenter* >>>>>> >>>>>> >>>>>> *From win2016 server:* >>>>>> >>>>>> PS C:\Users\Administrator> Get-NetTCPConnection -RemoteAddress >>>>>> 10.0.4.1 >>>>>> LocalAddress LocalPort RemoteAddress >>>>>> RemotePort State >>>>>> AppliedSetting >>>>>> OwningProcess >>>>>> ------------ --------- >>>>>> ------------- ---------- >>>>>> ----- -------------- ------------- >>>>>> 172.16.144.18 56905 10.0.4.1 >>>>>> 11616 Established * >>>>>> Internet * 13300 >>>>>> 172.16.144.18 56882 10.0.4.1 >>>>>> 11616 Established * >>>>>> Internet * 13300 >>>>>> >>>>>> >>>>>> PS C:\Users\Administrator> Get-NetTCPConnection -RemoteAddress >>>>>> 172.16.144.1 >>>>>> LocalAddress LocalPort RemoteAddress >>>>>> RemotePort State >>>>>> AppliedSetting >>>>>> OwningProcess >>>>>> ------------ --------- >>>>>> ------------- ---------- >>>>>> ----- -------------- ------------- >>>>>> 10.0.44.1 53005 >>>>>> 172.16.144.1 56437 Established >>>>>> *Internet* 13300 >>>>>> >>>>>> >>>>>> I've changed the "AppliedSetting" value to Datacenter on win2016 >>>>>> server as well by running this commands and restarting the VPN: >>>>>> New-NetTransportFilter -SettingName Datacenter -DestinationPrefix >>>>>> 10.0.4.0/24 >>>>>> New-NetTransportFilter -SettingName Datacenter -DestinationPrefix >>>>>> 172.16.144.0/24 >>>>>> >>>>>> Now it shows Datacenter on both servers. But the network speed >>>>>> remains the same. My changes do not affect the issue. >>>>>> I've noticed that global TCP settings influence that, especially >>>>>> "Chimney Offload", "Congestion Control Provider" and "ECN Capability": >>>>>> >>>>>> C:\Users\Administrator> netsh int tcp show global >>>>>> Querying active state... >>>>>> >>>>>> TCP Global Parameters >>>>>> ---------------------------------------------- >>>>>> Receive-Side Scaling State : enabled >>>>>> Chimney Offload State : disabled >>>>>> NetDMA State : disabled >>>>>> Direct Cache Access (DCA) : disabled >>>>>> Receive Window Auto-Tuning Level : normal >>>>>> Add-On Congestion Control Provider : default >>>>>> ECN Capability : enabled >>>>>> RFC 1323 Timestamps : disabled >>>>>> Initial RTO : 3000 >>>>>> Receive Segment Coalescing State : enabled >>>>>> Non Sack Rtt Resiliency : disabled >>>>>> Max SYN Retransmissions : 2 >>>>>> TCP Fast Open : disabled >>>>>> >>>>>> >>>>>> That is why I believe that the root cause of the issue lies in >>>>>> "Congestion Control Provider" setting. But I am unable to change it >>>>>> >>>>>> On Thu, Oct 4, 2018 at 7:50 AM Илья Шипицин <chipits...@gmail.com> >>>>>> wrote: >>>>>> >>>>>>> Hello, >>>>>>> >>>>>>> can you do some things and tell us your observation ? >>>>>>> >>>>>>> starting with win2012 so called network profiles were introduced >>>>>>> (Internet / Intranet / Datacenter) >>>>>>> those profiles are very different for tcp connection (if you observe >>>>>>> degradation in case of udp, most probably that is not related) >>>>>>> >>>>>>> >>>>>>> so, let's start >>>>>>> >>>>>>> start powershell (I assume you are familiar) >>>>>>> call >>>>>>> >>>>>>> Get-NetTCPConnection >>>>>>> >>>>>>> pay attention to "AppliedSetting" column. >>>>>>> what's there ? >>>>>>> >>>>>>> we did observe strange things when win2012 classified some traffic >>>>>>> as "Internet" and appropriate tcp settings were applied. >>>>>>> >>>>>>> is there some correlation in your case ? >>>>>>> >>>>>>> ср, 3 окт. 2018 г. в 20:45, Rostyslav Maryliak < >>>>>>> rostyslav.maryl...@idealscorp.com>: >>>>>>> >>>>>>>> Dear OpenVPN developers, >>>>>>>> >>>>>>>> I've faced a very strange issue with slow outbound network speed >>>>>>>> from Windows Server 2016 Standard server via the OpenVPN tunnel. >>>>>>>> OpenVPN server is Windows Server 2012 R2, client is Windows Server >>>>>>>> 2016. The inbound network speed for Windows Server 2016 is great. >>>>>>>> But the outbound network speed is nearly 30-40 kbps. I've got the >>>>>>>> same results using several tests: iperf testings, file download via >>>>>>>> SMB, >>>>>>>> Web-based downloading (using HTTP) etc. >>>>>>>> >>>>>>>> The tunnels is getting up and it works greatly, but only in one >>>>>>>> direction - from Windows Server 2012 R2 to Windows Server 2016. >>>>>>>> I've been using such server-client configurations setup for several >>>>>>>> years with Windows Server 2012 R2 servers and I've never faced such >>>>>>>> issue >>>>>>>> before. >>>>>>>> At first I thought that our ISP has some network limitations, but >>>>>>>> it turned out that the same tests shows great network speed results >>>>>>>> using >>>>>>>> the public IP addresses in both directions. >>>>>>>> The issue only occurs inside the VPN tunnel. I've spent 3 days >>>>>>>> tryng to figure it out, but failed. I've installed all latest Windows >>>>>>>> updates, reinstalled OpenVPN, tried to switch from UDP to TCP, >>>>>>>> played with performance settings in configs (link-mtu, sndbuf, >>>>>>>> rcvbuf etc) but still no luck. I've tested the same setup between two >>>>>>>> Windows Server 2012 R2 servers and it works greatly in both directions. >>>>>>>> Then I've tested it with another Windows Server 2016 Standard >>>>>>>> server (different server and different ISP) and it showed the same >>>>>>>> awful >>>>>>>> results in outbound direction. >>>>>>>> When I've set the same OpenVPN tunnel between two Windows Server >>>>>>>> 2016 Standard servers I've got the same poor network speed in both >>>>>>>> directions. >>>>>>>> >>>>>>>> I believe that the issue is somehow related only to the Windows >>>>>>>> Server 2016 version and I am more than confident that it depends on >>>>>>>> server's TCP stack settings. >>>>>>>> I've noticed that Windows Server 2016 has a congestion control >>>>>>>> provider setting set to "default", while previous versions of Windows >>>>>>>> has >>>>>>>> this setting set to "none". >>>>>>>> >>>>>>>> I've created a topic on OpenVPN Support Forum and it was suggested >>>>>>>> to post my issue to you and reference the thread. >>>>>>>> >>>>>>>> You can reference to the >>>>>>>> https://forums.openvpn.net/viewtopic.php?f=6&t=27173 for config >>>>>>>> files and additional information. >>>>>>>> >>>>>>>> Have you faced a similar issue before? Can you provide any hint how >>>>>>>> can I resolve the issue? What did I missed? >>>>>>>> I would be very grateful for any help. Thank you in advance. >>>>>>>> >>>>>>>> >>>>>>>> -- >>>>>>>> >>>>>>>> Best regards, >>>>>>>> >>>>>>>> *Rostyslav Maryliak* >>>>>>>> >>>>>>>> System Administrator >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> *iDeals™ Solutions Group*| + 38(073)437-72-51 >>>>>>>> <%2B%2038%28093%29575-35-16> | Skype: rostyslav.maryliak.ideals| >>>>>>>> *rostyslav.maryl...@idealscorp.com >>>>>>>> <dmitry.zaporozhche...@idealscorp.com>* | www.idealsvdr.com >>>>>>>> <http://www.idealscorp.com/> >>>>>>>> >>>>>>>> CONFIDENTIALITY NOTE: The information transmitted, including >>>>>>>> attachments, is intended only for the person(s) or entity to which it >>>>>>>> is >>>>>>>> addressed and may contain confidential and/or privileged material. Any >>>>>>>> review, retransmission, dissemination or other use of, or taking of any >>>>>>>> action in reliance upon this information by persons or entities other >>>>>>>> than >>>>>>>> the intended recipient is prohibited. If you received this in error, >>>>>>>> please >>>>>>>> contact the sender and destroy any copies of this information. >>>>>>>> _______________________________________________ >>>>>>>> Openvpn-devel mailing list >>>>>>>> Openvpn-devel@lists.sourceforge.net >>>>>>>> https://lists.sourceforge.net/lists/listinfo/openvpn-devel >>>>>>>> >>>>>>> >>>>>> >>>>>> -- >>>>>> >>>>>> Best regards, >>>>>> >>>>>> *Rostyslav Maryliak* >>>>>> >>>>>> System Administrator >>>>>> >>>>>> >>>>>> >>>>>> *iDeals™ Solutions Group*| + 38(073)437-72-51 >>>>>> <%2B%2038%28093%29575-35-16> | Skype: rostyslav.maryliak.ideals| >>>>>> *rostyslav.maryl...@idealscorp.com >>>>>> <dmitry.zaporozhche...@idealscorp.com>* | www.idealsvdr.com >>>>>> <http://www.idealscorp.com/> >>>>>> >>>>>> CONFIDENTIALITY NOTE: The information transmitted, including >>>>>> attachments, is intended only for the person(s) or entity to which it is >>>>>> addressed and may contain confidential and/or privileged material. Any >>>>>> review, retransmission, dissemination or other use of, or taking of any >>>>>> action in reliance upon this information by persons or entities other >>>>>> than >>>>>> the intended recipient is prohibited. If you received this in error, >>>>>> please >>>>>> contact the sender and destroy any copies of this information. >>>>> >>>>> >>>> >>>> -- >>>> >>>> Best regards, >>>> >>>> *Rostyslav Maryliak* >>>> >>>> System Administrator >>>> >>>> >>>> >>>> *iDeals™ Solutions Group*| + 38(073)437-72-51 >>>> <%2B%2038%28093%29575-35-16> | Skype: rostyslav.maryliak.ideals| >>>> *rostyslav.maryl...@idealscorp.com >>>> <dmitry.zaporozhche...@idealscorp.com>* | www.idealsvdr.com >>>> <http://www.idealscorp.com/> >>>> >>>> CONFIDENTIALITY NOTE: The information transmitted, including >>>> attachments, is intended only for the person(s) or entity to which it is >>>> addressed and may contain confidential and/or privileged material. Any >>>> review, retransmission, dissemination or other use of, or taking of any >>>> action in reliance upon this information by persons or entities other than >>>> the intended recipient is prohibited. If you received this in error, please >>>> contact the sender and destroy any copies of this information. >>> >>> >> >> -- >> >> Best regards, >> >> *Rostyslav Maryliak* >> >> System Administrator >> >> >> >> *iDeals™ Solutions Group*| + 38(073)437-72-51 >> <%2B%2038%28093%29575-35-16> | Skype: rostyslav.maryliak.ideals| >> *rostyslav.maryl...@idealscorp.com >> <dmitry.zaporozhche...@idealscorp.com>* | www.idealsvdr.com >> <http://www.idealscorp.com/> >> >> CONFIDENTIALITY NOTE: The information transmitted, including attachments, >> is intended only for the person(s) or entity to which it is addressed and >> may contain confidential and/or privileged material. Any review, >> retransmission, dissemination or other use of, or taking of any action in >> reliance upon this information by persons or entities other than the >> intended recipient is prohibited. If you received this in error, please >> contact the sender and destroy any copies of this information. > > -- Best regards, *Rostyslav Maryliak* System Administrator *iDeals™ Solutions Group*| + 38(073)437-72-51 <%2B%2038%28093%29575-35-16> | Skype: rostyslav.maryliak.ideals| *rostyslav.maryl...@idealscorp.com <dmitry.zaporozhche...@idealscorp.com>* | www.idealsvdr.com <http://www.idealscorp.com/> -- CONFIDENTIALITY NOTE: The information transmitted, including attachments, is intended only for the person(s) or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy any copies of this information.
_______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
