Topics

1

General Discussion / High ping glitches

« on: December 13, 2021, 01:51:16 am »

Hi folks.

Running the latest OPNsense (all updated) on an i3 2nd gen.  CPU & RAM use always low on this device as it just runs a couple of VPN connections for routing traffic.

Over the last 3 weeks or so, I've been getting problems with glitches which I can see when I run a ping test.

If you check out the ping from Google below, you'll notice average times in the 36ms range.  This would be expected.  But you'll also see multiple high latency returns, right up to over 1000ms.

Code: [Select]

64 bytes from sea09s29-in-f14.1e100.net (142.250.217.78): icmp_seq=20 ttl=117 time=35.7 ms
64 bytes from sea09s29-in-f14.1e100.net (142.250.217.78): icmp_seq=21 ttl=117 time=33.8 ms
64 bytes from sea09s29-in-f14.1e100.net (142.250.217.78): icmp_seq=22 ttl=117 time=36.1 ms
64 bytes from sea09s29-in-f14.1e100.net (142.250.217.78): icmp_seq=23 ttl=117 time=36.0 ms
64 bytes from sea09s29-in-f14.1e100.net (142.250.217.78): icmp_seq=24 ttl=117 time=1141 ms
64 bytes from sea09s29-in-f14.1e100.net (142.250.217.78): icmp_seq=25 ttl=117 time=87.0 ms
64 bytes from sea09s29-in-f14.1e100.net (142.250.217.78): icmp_seq=26 ttl=117 time=41.6 ms
64 bytes from sea09s29-in-f14.1e100.net (142.250.217.78): icmp_seq=27 ttl=117 time=34.5 ms
64 bytes from sea09s29-in-f14.1e100.net (142.250.217.78): icmp_seq=28 ttl=117 time=523 ms

This is an issue that only recently started, and is affecting all traffic, even pure direct-to-WAN (VPN bypass).

This recurring and persistent problem is affecting VoIP calls and my kid's internet gaming is apparently suffering considerably.

I hooked a PC direct to modem, and the issue disappeared(45 minute test), so I know it is happening through OPNsense (or possibly my D-Link switch).  This is with devices that are hardwired.

Any thoughts on how I could begin to troubleshoot?
Thanks!

2

Virtual private networks / Route DNS queries over WG VPN client connection

« on: August 17, 2021, 01:19:27 am »

Good day everyone.  I've been searching for some answers and guides, but haven't stumbled on the correct solution yet it seems :-(

I set up OPNSense a few days ago, and I'm loving it. 
I set up a WG tunnel with my commercial VPN provider, and managed to find enough forum posts to help me figure out most of the firewall settings.  Hooray.

I've now got an Alias set up that routes specific IPs through the WG tunnel.  Other hosts remain on the standard WAN connection.

Problem :
The devices routing over the tunnel are not passing DNS leak tests.  They are showing the DNS address of Cloudflare (the public DSN provider I selected).

Question :
Is there a simple way to route DNS requests to my VPN provider for those devices that are part of the WG group and using the VPN IP address?