are you using intel drivers instead of windows drivers ? is version the same accross servers ? firmware ?
we dropped using vendor drivers since win 2012. what I was talking about is DCB implementation in windows, not in intel drivers (I never used that since win 2012) чт, 4 окт. 2018 г. в 17:58, Rostyslav Maryliak < rostyslav.maryl...@idealscorp.com>: > Dear Ilya, > > No, it is disabled. > > [image: image.png] > > > On Thu, Oct 4, 2018 at 3:14 PM Илья Шипицин <chipits...@gmail.com> wrote: > >> congestion can be setup using datacenter bridging >> >> >> https://docs.microsoft.com/en-us/windows-server/networking/technologies/dcb/dcb-manage >> >> actually, I thought it works in another direction (i.e. you specify it in >> windows and distribute to network switches). >> is DCB in use ? >> >> чт, 4 окт. 2018 г. в 17:02, Rostyslav Maryliak < >> rostyslav.maryl...@idealscorp.com>: >> >>> Dear Ilya, >>> >>> Sure, the results are the same for all our win2016 servers: >>> >>> PS C:\Users\Administrator> [environment]::OSVersion.Version >>> >>> Major Minor Build Revision >>> ----- ----- ----- -------- >>> 10 0 14393 0 >>> >>> On Thu, Oct 4, 2018 at 2:45 PM Илья Шипицин <chipits...@gmail.com> >>> wrote: >>> >>>> >>>> >>>> чт, 4 окт. 2018 г. в 15:50, Rostyslav Maryliak < >>>> rostyslav.maryl...@idealscorp.com>: >>>> >>>>> Dear Illya, >>>>> >>>>> Sorry for misleading you. I want to set this parameter to "none" >>>>> globally. >>>>> I CAN change "Congestion Control Provider" setting for different >>>>> templates (i.e. Internet. Datacenter etc) in Powershell, but not to a >>>>> "None" value. >>>>> >>>>> In Powershell there is simply no option for this value: >>>>> PS C:\Users\Administrator> Set-NetTCPSetting -SettingName Datacenter >>>>> -CongestionProvider [ CTCP | CUBIC | DCTCP | Default | LEDBAT | NewReno ] >>>>> >>>>> I've tried different values, but still no luck. >>>>> >>>>> In CMD there is such option, but it does not apply any changes for it: >>>>> C:\Users\Administrator> netsh int tcp set supplemental >>>>> template=datacenter congestionprovider=*none* >>>>> Ok. >>>>> >>>>> C:\Users\Administrator> netsh int tcp show supplemental >>>>> template=datacenter >>>>> TCP Supplemental Parameters >>>>> ---------------------------------------------- >>>>> Minimum RTO (msec) : 20 >>>>> Initial Congestion Window (MSS) : 10 >>>>> Congestion Control Provider : *dctcp* >>>>> Enable Congestion Window Restart : enabled >>>>> Delayed ACK timeout (msec) : 10 >>>>> Delayed ACK frequency : 2 >>>>> Enable RACK : disabled >>>>> Enable Tail Loss Probe : disabled >>>>> >>>>> Also, as I've mentioned in referred thread, such issue occurs on all >>>>> our win2016 servers, except one. >>>>> >>>> >>>> can you provide the output of >>>> >>>> >>>> [environment]::OSVersion.Version >>>> >>>> for that 2016 server ? (and for other servers) >>>> >>>> >>>> >>>>> This exception server has "Congestion Control Provider" setting set to >>>>> "none" somehow. >>>>> But still it is very strange for me that I have such slow network >>>>> speed via the tunnel for all win2016 servers "out of the box". >>>>> >>>>> Can you please check this from your side as well and confirm or >>>>> disprove the issue? >>>>> >>>>> >>>>> On Thu, Oct 4, 2018 at 12:10 PM Илья Шипицин <chipits...@gmail.com> >>>>> wrote: >>>>> >>>>>> thank you for your investigation. >>>>>> >>>>>> congestion provider can be customized if you select "*Datacenter >>>>>> Custom"* >>>>>> >>>>>> чт, 4 окт. 2018 г. в 13:58, Rostyslav Maryliak < >>>>>> rostyslav.maryl...@idealscorp.com>: >>>>>> >>>>>>> Dear Ilya, >>>>>>> >>>>>>> I've checked "Get-NetTCPConnection" command output on both >>>>>>> win2012r2 and win2016 servers. >>>>>>> >>>>>>> win2012r2 server works as OpenVPN server. Internal IP address - >>>>>>> 10.0.4.1. OpenVPN tunnel IP address - 172.16.144.1 >>>>>>> win2016 server works as OpenVPN client. Internal IP address - >>>>>>> 10.0.44.1. OpenVPN tunnel IP address - 172.16.144.18 >>>>>>> >>>>>>> >>>>>>> *From win2012r2 server:* >>>>>>> >>>>>>> PS C:\Users\Administrator> Get-NetTCPConnection -RemoteAddress >>>>>>> 10.0.44.1 >>>>>>> LocalAddress LocalPort >>>>>>> RemoteAddress RemotePort State >>>>>>> AppliedSetting >>>>>>> ------------ --------- >>>>>>> ------------- ---------- >>>>>>> ----- -------------- >>>>>>> 172.16.144.1 56437 10.0.44.1 >>>>>>> 53005 Established >>>>>>> *Datacenter* >>>>>>> >>>>>>> PS C:\Users\Administrator> Get-NetTCPConnection -RemoteAddress >>>>>>> 172.16.144.18 >>>>>>> LocalAddress LocalPort >>>>>>> RemoteAddress RemotePort State >>>>>>> AppliedSetting >>>>>>> ------------ --------- >>>>>>> ------------- ---------- >>>>>>> ----- -------------- >>>>>>> 10.0.4.1 11616 >>>>>>> 172.16.144.18 56882 Established >>>>>>> *Datacenter* >>>>>>> 10.0.4.1 11616 >>>>>>> 172.16.144.18 56905 Established >>>>>>> *Datacenter* >>>>>>> >>>>>>> >>>>>>> *From win2016 server:* >>>>>>> >>>>>>> PS C:\Users\Administrator> Get-NetTCPConnection -RemoteAddress >>>>>>> 10.0.4.1 >>>>>>> LocalAddress LocalPort >>>>>>> RemoteAddress RemotePort State >>>>>>> AppliedSetting OwningProcess >>>>>>> ------------ --------- >>>>>>> ------------- ---------- >>>>>>> ----- -------------- ------------- >>>>>>> 172.16.144.18 56905 10.0.4.1 >>>>>>> 11616 Established * >>>>>>> Internet * 13300 >>>>>>> 172.16.144.18 56882 10.0.4.1 >>>>>>> 11616 Established * >>>>>>> Internet * 13300 >>>>>>> >>>>>>> >>>>>>> PS C:\Users\Administrator> Get-NetTCPConnection -RemoteAddress >>>>>>> 172.16.144.1 >>>>>>> LocalAddress LocalPort >>>>>>> RemoteAddress RemotePort State >>>>>>> AppliedSetting OwningProcess >>>>>>> ------------ --------- >>>>>>> ------------- ---------- >>>>>>> ----- -------------- ------------- >>>>>>> 10.0.44.1 53005 >>>>>>> 172.16.144.1 56437 Established >>>>>>> *Internet* 13300 >>>>>>> >>>>>>> >>>>>>> I've changed the "AppliedSetting" value to Datacenter on win2016 >>>>>>> server as well by running this commands and restarting the VPN: >>>>>>> New-NetTransportFilter -SettingName Datacenter -DestinationPrefix >>>>>>> 10.0.4.0/24 >>>>>>> New-NetTransportFilter -SettingName Datacenter -DestinationPrefix >>>>>>> 172.16.144.0/24 >>>>>>> >>>>>>> Now it shows Datacenter on both servers. But the network speed >>>>>>> remains the same. My changes do not affect the issue. >>>>>>> I've noticed that global TCP settings influence that, especially >>>>>>> "Chimney Offload", "Congestion Control Provider" and "ECN Capability": >>>>>>> >>>>>>> C:\Users\Administrator> netsh int tcp show global >>>>>>> Querying active state... >>>>>>> >>>>>>> TCP Global Parameters >>>>>>> ---------------------------------------------- >>>>>>> Receive-Side Scaling State : enabled >>>>>>> Chimney Offload State : disabled >>>>>>> NetDMA State : disabled >>>>>>> Direct Cache Access (DCA) : disabled >>>>>>> Receive Window Auto-Tuning Level : normal >>>>>>> Add-On Congestion Control Provider : default >>>>>>> ECN Capability : enabled >>>>>>> RFC 1323 Timestamps : disabled >>>>>>> Initial RTO : 3000 >>>>>>> Receive Segment Coalescing State : enabled >>>>>>> Non Sack Rtt Resiliency : disabled >>>>>>> Max SYN Retransmissions : 2 >>>>>>> TCP Fast Open : disabled >>>>>>> >>>>>>> >>>>>>> That is why I believe that the root cause of the issue lies in >>>>>>> "Congestion Control Provider" setting. But I am unable to change it >>>>>>> >>>>>>> On Thu, Oct 4, 2018 at 7:50 AM Илья Шипицин <chipits...@gmail.com> >>>>>>> wrote: >>>>>>> >>>>>>>> Hello, >>>>>>>> >>>>>>>> can you do some things and tell us your observation ? >>>>>>>> >>>>>>>> starting with win2012 so called network profiles were introduced >>>>>>>> (Internet / Intranet / Datacenter) >>>>>>>> those profiles are very different for tcp connection (if you >>>>>>>> observe degradation in case of udp, most probably that is not related) >>>>>>>> >>>>>>>> >>>>>>>> so, let's start >>>>>>>> >>>>>>>> start powershell (I assume you are familiar) >>>>>>>> call >>>>>>>> >>>>>>>> Get-NetTCPConnection >>>>>>>> >>>>>>>> pay attention to "AppliedSetting" column. >>>>>>>> what's there ? >>>>>>>> >>>>>>>> we did observe strange things when win2012 classified some traffic >>>>>>>> as "Internet" and appropriate tcp settings were applied. >>>>>>>> >>>>>>>> is there some correlation in your case ? >>>>>>>> >>>>>>>> ср, 3 окт. 2018 г. в 20:45, Rostyslav Maryliak < >>>>>>>> rostyslav.maryl...@idealscorp.com>: >>>>>>>> >>>>>>>>> Dear OpenVPN developers, >>>>>>>>> >>>>>>>>> I've faced a very strange issue with slow outbound network speed >>>>>>>>> from Windows Server 2016 Standard server via the OpenVPN tunnel. >>>>>>>>> OpenVPN server is Windows Server 2012 R2, client is Windows Server >>>>>>>>> 2016. The inbound network speed for Windows Server 2016 is great. >>>>>>>>> But the outbound network speed is nearly 30-40 kbps. I've got the >>>>>>>>> same results using several tests: iperf testings, file download via >>>>>>>>> SMB, >>>>>>>>> Web-based downloading (using HTTP) etc. >>>>>>>>> >>>>>>>>> The tunnels is getting up and it works greatly, but only in one >>>>>>>>> direction - from Windows Server 2012 R2 to Windows Server 2016. >>>>>>>>> I've been using such server-client configurations setup for >>>>>>>>> several years with Windows Server 2012 R2 servers and I've never >>>>>>>>> faced such >>>>>>>>> issue before. >>>>>>>>> At first I thought that our ISP has some network limitations, but >>>>>>>>> it turned out that the same tests shows great network speed results >>>>>>>>> using >>>>>>>>> the public IP addresses in both directions. >>>>>>>>> The issue only occurs inside the VPN tunnel. I've spent 3 days >>>>>>>>> tryng to figure it out, but failed. I've installed all latest Windows >>>>>>>>> updates, reinstalled OpenVPN, tried to switch from UDP to TCP, >>>>>>>>> played with performance settings in configs (link-mtu, sndbuf, >>>>>>>>> rcvbuf etc) but still no luck. I've tested the same setup between two >>>>>>>>> Windows Server 2012 R2 servers and it works greatly in both >>>>>>>>> directions. >>>>>>>>> Then I've tested it with another Windows Server 2016 Standard >>>>>>>>> server (different server and different ISP) and it showed the same >>>>>>>>> awful >>>>>>>>> results in outbound direction. >>>>>>>>> When I've set the same OpenVPN tunnel between two Windows Server >>>>>>>>> 2016 Standard servers I've got the same poor network speed in both >>>>>>>>> directions. >>>>>>>>> >>>>>>>>> I believe that the issue is somehow related only to the Windows >>>>>>>>> Server 2016 version and I am more than confident that it depends on >>>>>>>>> server's TCP stack settings. >>>>>>>>> I've noticed that Windows Server 2016 has a congestion control >>>>>>>>> provider setting set to "default", while previous versions of Windows >>>>>>>>> has >>>>>>>>> this setting set to "none". >>>>>>>>> >>>>>>>>> I've created a topic on OpenVPN Support Forum and it was suggested >>>>>>>>> to post my issue to you and reference the thread. >>>>>>>>> >>>>>>>>> You can reference to the >>>>>>>>> https://forums.openvpn.net/viewtopic.php?f=6&t=27173 for config >>>>>>>>> files and additional information. >>>>>>>>> >>>>>>>>> Have you faced a similar issue before? Can you provide any hint >>>>>>>>> how can I resolve the issue? What did I missed? >>>>>>>>> I would be very grateful for any help. Thank you in advance. >>>>>>>>> >>>>>>>>> >>>>>>>>> -- >>>>>>>>> >>>>>>>>> Best regards, >>>>>>>>> >>>>>>>>> *Rostyslav Maryliak* >>>>>>>>> >>>>>>>>> System Administrator >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> *iDeals™ Solutions Group*| + 38(073)437-72-51 >>>>>>>>> <%2B%2038%28093%29575-35-16> | Skype: rostyslav.maryliak.ideals| >>>>>>>>> *rostyslav.maryl...@idealscorp.com >>>>>>>>> <dmitry.zaporozhche...@idealscorp.com>* | www.idealsvdr.com >>>>>>>>> <http://www.idealscorp.com/> >>>>>>>>> >>>>>>>>> CONFIDENTIALITY NOTE: The information transmitted, including >>>>>>>>> attachments, is intended only for the person(s) or entity to which it >>>>>>>>> is >>>>>>>>> addressed and may contain confidential and/or privileged material. Any >>>>>>>>> review, retransmission, dissemination or other use of, or taking of >>>>>>>>> any >>>>>>>>> action in reliance upon this information by persons or entities other >>>>>>>>> than >>>>>>>>> the intended recipient is prohibited. If you received this in error, >>>>>>>>> please >>>>>>>>> contact the sender and destroy any copies of this information. >>>>>>>>> _______________________________________________ >>>>>>>>> Openvpn-devel mailing list >>>>>>>>> Openvpn-devel@lists.sourceforge.net >>>>>>>>> https://lists.sourceforge.net/lists/listinfo/openvpn-devel >>>>>>>>> >>>>>>>> >>>>>>> >>>>>>> -- >>>>>>> >>>>>>> Best regards, >>>>>>> >>>>>>> *Rostyslav Maryliak* >>>>>>> >>>>>>> System Administrator >>>>>>> >>>>>>> >>>>>>> >>>>>>> *iDeals™ Solutions Group*| + 38(073)437-72-51 >>>>>>> <%2B%2038%28093%29575-35-16> | Skype: rostyslav.maryliak.ideals| >>>>>>> *rostyslav.maryl...@idealscorp.com >>>>>>> <dmitry.zaporozhche...@idealscorp.com>* | www.idealsvdr.com >>>>>>> <http://www.idealscorp.com/> >>>>>>> >>>>>>> CONFIDENTIALITY NOTE: The information transmitted, including >>>>>>> attachments, is intended only for the person(s) or entity to which it is >>>>>>> addressed and may contain confidential and/or privileged material. Any >>>>>>> review, retransmission, dissemination or other use of, or taking of any >>>>>>> action in reliance upon this information by persons or entities other >>>>>>> than >>>>>>> the intended recipient is prohibited. If you received this in error, >>>>>>> please >>>>>>> contact the sender and destroy any copies of this information. >>>>>> >>>>>> >>>>> >>>>> -- >>>>> >>>>> Best regards, >>>>> >>>>> *Rostyslav Maryliak* >>>>> >>>>> System Administrator >>>>> >>>>> >>>>> >>>>> *iDeals™ Solutions Group*| + 38(073)437-72-51 >>>>> <%2B%2038%28093%29575-35-16> | Skype: rostyslav.maryliak.ideals| >>>>> *rostyslav.maryl...@idealscorp.com >>>>> <dmitry.zaporozhche...@idealscorp.com>* | www.idealsvdr.com >>>>> <http://www.idealscorp.com/> >>>>> >>>>> CONFIDENTIALITY NOTE: The information transmitted, including >>>>> attachments, is intended only for the person(s) or entity to which it is >>>>> addressed and may contain confidential and/or privileged material. Any >>>>> review, retransmission, dissemination or other use of, or taking of any >>>>> action in reliance upon this information by persons or entities other than >>>>> the intended recipient is prohibited. If you received this in error, >>>>> please >>>>> contact the sender and destroy any copies of this information. >>>> >>>> >>> >>> -- >>> >>> Best regards, >>> >>> *Rostyslav Maryliak* >>> >>> System Administrator >>> >>> >>> >>> *iDeals™ Solutions Group*| + 38(073)437-72-51 >>> <%2B%2038%28093%29575-35-16> | Skype: rostyslav.maryliak.ideals| >>> *rostyslav.maryl...@idealscorp.com >>> <dmitry.zaporozhche...@idealscorp.com>* | www.idealsvdr.com >>> <http://www.idealscorp.com/> >>> >>> CONFIDENTIALITY NOTE: The information transmitted, including >>> attachments, is intended only for the person(s) or entity to which it is >>> addressed and may contain confidential and/or privileged material. Any >>> review, retransmission, dissemination or other use of, or taking of any >>> action in reliance upon this information by persons or entities other than >>> the intended recipient is prohibited. If you received this in error, please >>> contact the sender and destroy any copies of this information. >> >> > > -- > > Best regards, > > *Rostyslav Maryliak* > > System Administrator > > > > *iDeals™ Solutions Group*| + 38(073)437-72-51 <%2B%2038%28093%29575-35-16> | > Skype: rostyslav.maryliak.ideals| *rostyslav.maryl...@idealscorp.com > <dmitry.zaporozhche...@idealscorp.com>* | www.idealsvdr.com > <http://www.idealscorp.com/> > > CONFIDENTIALITY NOTE: The information transmitted, including attachments, > is intended only for the person(s) or entity to which it is addressed and > may contain confidential and/or privileged material. Any review, > retransmission, dissemination or other use of, or taking of any action in > reliance upon this information by persons or entities other than the > intended recipient is prohibited. If you received this in error, please > contact the sender and destroy any copies of this information.
_______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
