Всем привет. Openvpn не ожиданно перестал работать по протоколу udp, просто перестал его слушать
user@gateway:~$ sudo netstat -ntulp
Активные соединения с интернетом (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:8330 0.0.0.0:* LISTEN 4714/openvpn
tcp 0 0 10.34.40.3:22 0.0.0.0:* LISTEN 3176/sshd
tcp 0 0 10.34.40.3:3128 0.0.0.0:* LISTEN 2076/(squid-1)
udp 0 0 0.0.0.0:57230 0.0.0.0:* 2076/(squid-1)
udp 0 0 внешний_ип:1198 0.0.0.0:* 4714/openvpn
udp6 0 0 :::39100 :::* 2076/(squid-1)
лог впн'а
Wed Jun 28 15:07:23 2017 OpenVPN 2.3.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jun 22 2017
Wed Jun 28 15:07:23 2017 library versions: OpenSSL 1.0.2g 1 Mar 2016, LZO 2.08
Wed Jun 28 15:07:23 2017 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:8330
Wed Jun 28 15:07:23 2017 Diffie-Hellman initialized with 2048 bit key
Wed Jun 28 15:07:23 2017 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Wed Jun 28 15:07:23 2017 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jun 28 15:07:23 2017 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jun 28 15:07:23 2017 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1400)
Wed Jun 28 15:07:23 2017 Socket Buffers: R=[212992->212992] S=[212992->212992]
Wed Jun 28 15:07:23 2017 ROUTE_GATEWAY ип_адрес/255.255.255.252 IFACE=enp4s0 HWADDR=00:00:21:ff:24:e8
Wed Jun 28 15:07:23 2017 TUN/TAP device tun0 opened
Wed Jun 28 15:07:23 2017 TUN/TAP TX queue length set to 100
Wed Jun 28 15:07:23 2017 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Jun 28 15:07:23 2017 /sbin/ip link set dev tun0 up mtu 1400
Wed Jun 28 15:07:23 2017 /sbin/ip addr add dev tun0 local 192.168.40.1 peer 192.168.40.2
Wed Jun 28 15:07:23 2017 /sbin/ip route add 192.168.40.0/24 via 192.168.40.2
Wed Jun 28 15:07:23 2017 GID set to nogroup
Wed Jun 28 15:07:23 2017 UID set to nobody
Wed Jun 28 15:07:23 2017 UDPv4 link local (bound): [AF_INET]ип_адрес:1198
Wed Jun 28 15:07:23 2017 UDPv4 link remote: [undef]
Wed Jun 28 15:07:23 2017 MULTI: multi_init called, r=256 v=256
Wed Jun 28 15:07:23 2017 IFCONFIG POOL: base=192.168.40.4 size=62, ipv6=0
Wed Jun 28 15:07:23 2017 ifconfig_pool_read(), in='юзер_1,192.168.40.4', TODO: IPv6
Wed Jun 28 15:07:23 2017 succeeded -> ifconfig_pool_set()
Wed Jun 28 15:07:23 2017 ifconfig_pool_read(), in='юзер_2,192.168.40.8', TODO: IPv6
Wed Jun 28 15:07:23 2017 succeeded -> ifconfig_pool_set()
Wed Jun 28 15:07:23 2017 IFCONFIG POOL LIST
Wed Jun 28 15:07:23 2017 юзер_1,192.168.40.4
Wed Jun 28 15:07:23 2017 юзер_2,192.168.40.8
Wed Jun 28 15:07:23 2017 Initialization Sequence Completed
и если использовать tcp
user@gateway:~$ sudo netstat -ntulp
Активные соединения с интернетом (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:8330 0.0.0.0:* LISTEN 4829/openvpn
tcp 0 0 внешний_ип:1198 0.0.0.0:* LISTEN 4829/openvpn
tcp 0 0 10.34.40.3:22 0.0.0.0:* LISTEN 3176/sshd
tcp 0 0 10.34.40.3:3128 0.0.0.0:* LISTEN 2076/(squid-1)
udp 0 0 0.0.0.0:57230 0.0.0.0:* 2076/(squid-1)
udp6 0 0 :::39100 :::* 2076/(squid-1)
лог
Wed Jun 28 15:09:59 2017 OpenVPN 2.3.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jun 22 2017
Wed Jun 28 15:09:59 2017 library versions: OpenSSL 1.0.2g 1 Mar 2016, LZO 2.08
Wed Jun 28 15:09:59 2017 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:8330
Wed Jun 28 15:09:59 2017 Diffie-Hellman initialized with 2048 bit key
Wed Jun 28 15:09:59 2017 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Wed Jun 28 15:09:59 2017 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jun 28 15:09:59 2017 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jun 28 15:09:59 2017 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1400)
Wed Jun 28 15:09:59 2017 Socket Buffers: R=[87380->87380] S=[16384->16384]
Wed Jun 28 15:09:59 2017 ROUTE_GATEWAY ип_адрес/255.255.255.252 IFACE=enp4s0 HWADDR=00:00:21:ff:24:e8
Wed Jun 28 15:09:59 2017 TUN/TAP device tun0 opened
Wed Jun 28 15:09:59 2017 TUN/TAP TX queue length set to 100
Wed Jun 28 15:09:59 2017 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Jun 28 15:09:59 2017 /sbin/ip link set dev tun0 up mtu 1400
Wed Jun 28 15:09:59 2017 /sbin/ip addr add dev tun0 local 192.168.40.1 peer 192.168.40.2
Wed Jun 28 15:09:59 2017 /sbin/ip route add 192.168.40.0/24 via 192.168.40.2
Wed Jun 28 15:09:59 2017 GID set to nogroup
Wed Jun 28 15:09:59 2017 UID set to nobody
Wed Jun 28 15:09:59 2017 Listening for incoming TCP connection on [AF_INET]ип_адрес:1198
Wed Jun 28 15:09:59 2017 TCPv4_SERVER link local (bound): [AF_INET]ип_адрес:1198
Wed Jun 28 15:09:59 2017 TCPv4_SERVER link remote: [undef]
Wed Jun 28 15:09:59 2017 MULTI: multi_init called, r=256 v=256
Wed Jun 28 15:09:59 2017 IFCONFIG POOL: base=192.168.40.4 size=62, ipv6=0
Wed Jun 28 15:09:59 2017 ifconfig_pool_read(), in='юзер_1,192.168.40.4', TODO: IPv6
Wed Jun 28 15:09:59 2017 succeeded -> ifconfig_pool_set()
Wed Jun 28 15:09:59 2017 ifconfig_pool_read(), in='юзер_2,192.168.40.8', TODO: IPv6
Wed Jun 28 15:09:59 2017 succeeded -> ifconfig_pool_set()
Wed Jun 28 15:09:59 2017 IFCONFIG POOL LIST
Wed Jun 28 15:09:59 2017 юзер_1,192.168.40.4
Wed Jun 28 15:09:59 2017 юзер_2,192.168.40.8
Wed Jun 28 15:09:59 2017 MULTI: TCP INIT maxclients=1024 maxevents=1028
Wed Jun 28 15:09:59 2017 Initialization Sequence Completed
почему просто взять и не использовать tcp, потому что, с udp скорость на порядок выше. Почему так, тоже вопрос хороший..