Issue with multiple tunnels to the same VPN server

Started by _Dave_, January 07, 2025, 10:29:02 PM

Previous topic - Next topic
Hello everyone,

I recently built an OPNsense box and am loving it so far. I have come across some weird behavior though.

What I am trying to accomplish it to load balance three VPN connections to the same VPN server. The reason for this is that I want to use port forwarding. If I have the same public IP, and there is an incoming connection, ProtonVPN should send the port traffic to the tunnel that has port forwarding enabled (the other two peers do not have port forwarding enabled).

The endpoint address, port, and peer public key are all the same. I had to export the config, edit it, and import it back in to allow for the same public key. I have interfaces for each tunnel with separate virtual IPs, and a gateway group for all of the tunnels.

I seem to be able to use this setup just fine, and the client program (split tunnel) load balances across all three tunnels. The weird thing is that the monitoring IPs work just fine if there is other traffic on the tunnels from the client, but as soon as I stop traffic, the monitoring IPs show 100% packet loss. If I start the client up, the monitoring IPs start functioning again, and so on. The same setup with three separate servers do not show this behavior, and the monitoring IPs never show packet loss. What is causing this behavior?

-Dave