Softethervpn: Softether VPN - ์—…๋กœ๋“œ ์†๋„๊ฐ€ ์ด์ƒํ•œ ๊ฒƒ

์— ๋งŒ๋“  2018๋…„ 06์›” 01์ผ  ยท  11์ฝ”๋ฉ˜ํŠธ  ยท  ์ถœ์ฒ˜: SoftEtherVPN/SoftEtherVPN

Hello there, ์•ˆ๋…•,

i set a local bridge interface (not TAP, a second virtual interface my VM) and my Upload speed is constant 355 kb/sec ๋กœ์ปฌ ๋ธŒ๋ฆฌ์ง€ ์ธํ„ฐํŽ˜์ด์Šค(TAP ์•„๋‹˜, ๋‚ด VM์˜ ๋‘ ๋ฒˆ์งธ ๊ฐ€์ƒ ์ธํ„ฐํŽ˜์ด์Šค)๋ฅผ ์„ค์ •ํ•˜๊ณ  ์—…๋กœ๋“œ ์†๋„๋Š” 355kb/sec๋กœ ์ผ์ •ํ•ฉ๋‹ˆ๋‹ค.

But, if i enable SecureNAT and after disable it, the Upload speed up to 60 Mbit/sec. ๊ทธ๋Ÿฌ๋‚˜ SecureNAT๋ฅผ ํ™œ์„ฑํ™”ํ•˜๊ณ  ๋น„ํ™œ์„ฑํ™”ํ•˜๋ฉด ์—…๋กœ๋“œ ์†๋„๊ฐ€ ์ตœ๋Œ€ 60Mbit/sec์ž…๋‹ˆ๋‹ค. It is good, but if i restart the server, it need to do it again (SecureNAT enable/disable) to normalize the Upload speed. ์ข‹๊ธด ํ•œ๋ฐ ์„œ๋ฒ„๋ฅผ ๋‹ค์‹œ ์‹œ์ž‘ํ•˜๋ฉด ์—…๋กœ๋“œ ์†๋„๋ฅผ ์ •์ƒํ™”ํ•˜๊ธฐ ์œ„ํ•ด ๋‹ค์‹œ ์„œ๋ฒ„๋ฅผ ๋‹ค์‹œ ์‹œ์ž‘ํ•ด์•ผ ํ•ฉ๋‹ˆ๋‹ค(SecureNAT ํ™œ์„ฑํ™”/๋น„ํ™œ์„ฑํ™”).

I use latest PPA ubuntu release. ์ตœ์‹  PPA ์šฐ๋ถ„ํˆฌ ๋ฆด๋ฆฌ์Šค๋ฅผ ์‚ฌ์šฉํ•ฉ๋‹ˆ๋‹ค.

My system: ubuntu 18.04 (Proxmox VM) ๋‚ด ์‹œ์Šคํ…œ: ์šฐ๋ถ„ํˆฌ 18.04(Proxmox VM)

Edit: if i restart only softether VPN service the Upload speed is still normal. ํŽธ์ง‘: softether VPN ์„œ๋น„์Šค๋งŒ ๋‹ค์‹œ ์‹œ์ž‘ํ•˜๋ฉด ์—…๋กœ๋“œ ์†๋„๋Š” ์—ฌ์ „ํžˆ ์ •์ƒ์ž…๋‹ˆ๋‹ค. It only need to do the above method, if i restart the server. ์„œ๋ฒ„๋ฅผ ๋‹ค์‹œ ์‹œ์ž‘ํ•˜๋ฉด ์œ„์˜ ๋ฐฉ๋ฒ•๋งŒ ์ˆ˜ํ–‰ํ•˜๋ฉด ๋ฉ๋‹ˆ๋‹ค.

en
performance

๊ฐ€์žฅ ์œ ์šฉํ•œ ๋Œ“๊ธ€

Using SecureNAT, Try disable/set "DisableIpRawModeSecureNAT" and "DisableKernelModeSecureNAT" to '1' in Virtual Hub Extended Option. SecureNAT๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ Virtual Hub ํ™•์žฅ ์˜ต์…˜์—์„œ "DisableIpRawModeSecureNAT" ๋ฐ "DisableKernelModeSecureNAT"๋ฅผ '1'๋กœ ๋น„ํ™œ์„ฑํ™”/์„ค์ •ํ•ด ๋ณด์‹ญ์‹œ์˜ค.

This fix my issue on slow download speed ์ด๊ฒƒ์€ ๋Š๋ฆฐ ๋‹ค์šด๋กœ๋“œ ์†๋„์— ๋Œ€ํ•œ ๋‚ด ๋ฌธ์ œ๋ฅผ ์ˆ˜์ •ํ•ฉ๋‹ˆ๋‹ค.

en

๋ชจ๋“  11 ๋Œ“๊ธ€

My dirty solution: ๋‚ด ๋”๋Ÿฌ์šด ํ•ด๊ฒฐ์ฑ…:

I create a shell script, that running after reboot: ์žฌ๋ถ€ํŒ… ํ›„ ์‹คํ–‰๋˜๋Š” ์…ธ ์Šคํฌ๋ฆฝํŠธ๋ฅผ ๋งŒ๋“ญ๋‹ˆ๋‹ค.

!/bin/bash
/usr/bin/vpncmd localhost /SERVER /HUB:vpn /CMD SecureNatEnable
/bin/sleep 15
/usr/bin/vpncmd localhost /SERVER /HUB:vpn /CMD SecureNatDisable

It solve my problem. ๋‚ด ๋ฌธ์ œ๋ฅผ ํ•ด๊ฒฐํ•ฉ๋‹ˆ๋‹ค.

en

Hi there, thanks for the help. ์•ˆ๋…•ํ•˜์„ธ์š”, ๋„์›€์„ ์ฃผ์…”์„œ ๊ฐ์‚ฌํ•ฉ๋‹ˆ๋‹ค. Our server has the same problem with limited upload speed. ์šฐ๋ฆฌ ์„œ๋ฒ„๋Š” ์ œํ•œ๋œ ์—…๋กœ๋“œ ์†๋„์™€ ๋™์ผํ•œ ๋ฌธ์ œ๊ฐ€ ์žˆ์Šต๋‹ˆ๋‹ค. Sadly this solution did not work. ์Šฌํ”„๊ฒŒ๋„ ์ด ์†”๋ฃจ์…˜์€ ์ž‘๋™ํ•˜์ง€ ์•Š์•˜์Šต๋‹ˆ๋‹ค. The Uplaod from the server remains at the slow rate. ์„œ๋ฒ„์˜ ์—…๋กœ๋“œ๋Š” ๋Š๋ฆฐ ์†๋„๋กœ ์œ ์ง€๋ฉ๋‹ˆ๋‹ค.

en

If you ebable SecureNAT, the Upload speed is better? SecureNAT๋ฅผ ํ™œ์„ฑํ™”ํ•˜๋ฉด ์—…๋กœ๋“œ ์†๋„๊ฐ€ ๋” ๋นจ๋ผ์ง€๋‚˜์š”? (i know that is generate high CPU, it only just test) (๋‚˜๋Š” ๊ทธ๊ฒƒ์ด ๋†’์€ CPU๋ฅผ ์ƒ์„ฑํ•œ๋‹ค๋Š” ๊ฒƒ์„ ์•Œ๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค. ๋‹จ์ง€ ํ…Œ์ŠคํŠธ์ผ ๋ฟ์ž…๋‹ˆ๋‹ค)

en

์•„๋‹ˆ์š”, ์†๋„๋Š” ์•ฝ 190kb/s๋กœ ๋™์ผํ•˜๊ฒŒ ์œ ์ง€๋ฉ๋‹ˆ๋‹ค.

en

์ด์ƒํ•ฉ๋‹ˆ๋‹ค... TAP ์žฅ์น˜๋ฅผ ๋งŒ๋“ค๋ ค๊ณ  ํ•ฉ๋‹ˆ๊นŒ?

en

Ok, tested with another host. ์•Œ๊ฒ ์Šต๋‹ˆ๋‹ค. ๋‹ค๋ฅธ ํ˜ธ์ŠคํŠธ์—์„œ ํ…Œ์ŠคํŠธํ–ˆ์Šต๋‹ˆ๋‹ค. Test with Network Traffic Test Tool. ๋„คํŠธ์›Œํฌ ํŠธ๋ž˜ํ”ฝ ํ…Œ์ŠคํŠธ ๋„๊ตฌ๋กœ ํ…Œ์ŠคํŠธํ•˜์‹ญ์‹œ์˜ค. Fullduplex Test 2 connections. ์ „์ด์ค‘ ํ…Œ์ŠคํŠธ 2 ์—ฐ๊ฒฐ. Testserver on connecting side, Testclient on local network ์—ฐ๊ฒฐ ์ธก์˜ ํ…Œ์ŠคํŠธ ์„œ๋ฒ„, ๋กœ์ปฌ ๋„คํŠธ์›Œํฌ์˜ ํ…Œ์ŠคํŠธ ํด๋ผ์ด์–ธํŠธ

bridge and securenat on then off: ๋ธŒ๋ฆฌ์ง€ ๋ฐ ๋ณด์•ˆ ์ผœ๊ธฐ ๋ฐ ๋„๊ธฐ:
VPNClient to VPNServer 30Mb/s VPNClient์—์„œ VPNServer 30Mb/s๋กœ
VPNServer to VPNClient 300kb/s VPN์„œ๋ฒ„์—์„œ VPNํด๋ผ์ด์–ธํŠธ๋กœ 300kb/s

tap no modification: ์ˆ˜์ • ์—†์Œ ํƒญ:
VPNClient to VPNServer 30Mb/s VPNClient์—์„œ VPNServer 30Mb/s๋กœ
VPNServer to VPNClient 300kb/s VPN์„œ๋ฒ„์—์„œ VPNํด๋ผ์ด์–ธํŠธ๋กœ 300kb/s

tap and securenat on off: ํƒญํ•˜๊ณ  ๋ณด์•ˆ ์ผœ๊ธฐ:
VPNClient to VPNServer 30Mb/s VPNClient์—์„œ VPNServer 30Mb/s๋กœ
VPNServer to VPNClient 8Mb/s VPN์„œ๋ฒ„ ๋Œ€ VPNํด๋ผ์ด์–ธํŠธ 8Mb/s

A bit on the odd side maybe related or not, if the Testserver and Testclient roles are swapped to Testclient on connecting side, Testserver on local network, the following results: ํ…Œ์ŠคํŠธ ์„œ๋ฒ„์™€ ํ…Œ์ŠคํŠธ ํด๋ผ์ด์–ธํŠธ ์—ญํ• ์ด ์—ฐ๊ฒฐ ์ชฝ์—์„œ ํ…Œ์ŠคํŠธ ํด๋ผ์ด์–ธํŠธ๋กœ, ๋กœ์ปฌ ๋„คํŠธ์›Œํฌ์—์„œ ํ…Œ์ŠคํŠธ ์„œ๋ฒ„๋กœ ๋ฐ”๋€Œ๋ฉด ๋‹ค์Œ๊ณผ ๊ฐ™์€ ๊ฒฐ๊ณผ๊ฐ€ ๋‚˜์˜ต๋‹ˆ๋‹ค.
tap and securenat on off: ํƒญํ•˜๊ณ  ๋ณด์•ˆ ์ผœ๊ธฐ:
VPNClient to VPNServer 46Mb/s VPNClient์—์„œ VPNServer๋กœ 46Mb/s
VPNServer to VPNClient 1.5Mb/s VPN์„œ๋ฒ„์—์„œ VPNํด๋ผ์ด์–ธํŠธ๋กœ 1.5Mb/s

en

I am an idiot. ๋‚˜๋Š” ๋ฐ”๋ณด๋‹ค.

The two NICs connecting the firewall and the vpn gateway were set to 100mbit instead of 1000 mbit. ๋ฐฉํ™”๋ฒฝ๊ณผ VPN ๊ฒŒ์ดํŠธ์›จ์ด๋ฅผ ์—ฐ๊ฒฐํ•˜๋Š” ๋‘ ๊ฐœ์˜ NIC๋Š” 1000mbit ๋Œ€์‹  100mbit๋กœ ์„ค์ •๋˜์—ˆ์Šต๋‹ˆ๋‹ค. However the connection to the internet is "only" a 100 mbit line. ๊ทธ๋Ÿฌ๋‚˜ ์ธํ„ฐ๋„ท ์—ฐ๊ฒฐ์€ "๋‹จ" 100mbit ํšŒ์„ ์ž…๋‹ˆ๋‹ค. Setting the NICs on the fw and vpn to 1000 yields the following results. fw ๋ฐ vpn์˜ NIC๋ฅผ 1000์œผ๋กœ ์„ค์ •ํ•˜๋ฉด ๋‹ค์Œ๊ณผ ๊ฐ™์€ ๊ฒฐ๊ณผ๊ฐ€ ๋‚˜ํƒ€๋‚ฉ๋‹ˆ๋‹ค.

Test with Network Traffic Test Tool. ๋„คํŠธ์›Œํฌ ํŠธ๋ž˜ํ”ฝ ํ…Œ์ŠคํŠธ ๋„๊ตฌ๋กœ ํ…Œ์ŠคํŠธํ•˜์‹ญ์‹œ์˜ค. Fullduplex Test 2 connections. ์ „์ด์ค‘ ํ…Œ์ŠคํŠธ 2 ์—ฐ๊ฒฐ. Testserver on connecting side, Testclient on local network ์—ฐ๊ฒฐ ์ธก์˜ ํ…Œ์ŠคํŠธ ์„œ๋ฒ„, ๋กœ์ปฌ ๋„คํŠธ์›Œํฌ์˜ ํ…Œ์ŠคํŠธ ํด๋ผ์ด์–ธํŠธ
bridge and securenat on then off: ๋ธŒ๋ฆฌ์ง€ ๋ฐ ๋ณด์•ˆ ์ผœ๊ธฐ ๋ฐ ๋„๊ธฐ:
VPNClient to VPNServer 43Mb/s VPNClient์—์„œ VPNServer๋กœ 43Mb/s
VPNServer to VPNClient 38Mb/s VPN์„œ๋ฒ„ ๋Œ€ VPNํด๋ผ์ด์–ธํŠธ 38Mb/s

Ok that is at least close to symmetric. ์ ์–ด๋„ ๋Œ€์นญ์— ๊ฐ€๊น์Šต๋‹ˆ๋‹ค.

Test with Network Traffic Test Tool. ๋„คํŠธ์›Œํฌ ํŠธ๋ž˜ํ”ฝ ํ…Œ์ŠคํŠธ ๋„๊ตฌ๋กœ ํ…Œ์ŠคํŠธํ•˜์‹ญ์‹œ์˜ค. Fullduplex Test 2 connections. ์ „์ด์ค‘ ํ…Œ์ŠคํŠธ 2 ์—ฐ๊ฒฐ. Testclient on connecting side, Testserver on local network ์—ฐ๊ฒฐ ์ธก์˜ ํ…Œ์ŠคํŠธ ํด๋ผ์ด์–ธํŠธ, ๋กœ์ปฌ ๋„คํŠธ์›Œํฌ์˜ ํ…Œ์ŠคํŠธ ์„œ๋ฒ„
bridge and securenat on then off: ๋ธŒ๋ฆฌ์ง€ ๋ฐ ๋ณด์•ˆ ์ผœ๊ธฐ ๋ฐ ๋„๊ธฐ:
VPNClient to VPNServer 76Mb/s VPNClient์—์„œ VPNServer 76Mb/s๋กœ
VPNServer to VPNClient 71Mb/s VPN์„œ๋ฒ„ ๋Œ€ VPNํด๋ผ์ด์–ธํŠธ 71Mb/s

That is damn near linespeed and symetrical. ๊ทธ๊ฒƒ์€ ๊ฑฐ์˜ ๋ผ์ธ ์†๋„์™€ ๋Œ€์นญ์— ๊ฐ€๊น์Šต๋‹ˆ๋‹ค.
But why differ the total speeds so much depending on who innitates the test... ๊ทธ๋Ÿฌ๋‚˜ ํ…Œ์ŠคํŠธ๋ฅผ ์‹œ์ž‘ํ•˜๋Š” ์‚ฌ๋žŒ์— ๋”ฐ๋ผ ์ด ์†๋„๊ฐ€ ์™œ ๊ทธ๋ ‡๊ฒŒ ๋งŽ์ด ๋‹ค๋ฅธ์ง€...
Anyway thx for the on/off tip, that really helped. ์–ด์จŒ๋“  on/off ํŒ์— ๋Œ€ํ•œ thx, ๊ทธ๊ฒƒ์€ ์ •๋ง ๋„์›€์ด ๋˜์—ˆ์Šต๋‹ˆ๋‹ค.

en

Using SecureNAT, Try disable/set "DisableIpRawModeSecureNAT" and "DisableKernelModeSecureNAT" to '1' in Virtual Hub Extended Option. SecureNAT๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ Virtual Hub ํ™•์žฅ ์˜ต์…˜์—์„œ "DisableIpRawModeSecureNAT" ๋ฐ "DisableKernelModeSecureNAT"๋ฅผ '1'๋กœ ๋น„ํ™œ์„ฑํ™”/์„ค์ •ํ•ด ๋ณด์‹ญ์‹œ์˜ค.

This fix my issue on slow download speed ์ด๊ฒƒ์€ ๋Š๋ฆฐ ๋‹ค์šด๋กœ๋“œ ์†๋„์— ๋Œ€ํ•œ ๋‚ด ๋ฌธ์ œ๋ฅผ ์ˆ˜์ •ํ•ฉ๋‹ˆ๋‹ค.

en

Hello, ์—ฌ๋ณด์„ธ์š”,

Just leaving a message to say that I have the exact same problem here (on proxmox lxc ubuntu 16). ์—ฌ๊ธฐ(proxmox lxc ubuntu 16์—์„œ)์™€ ๋˜‘๊ฐ™์€ ๋ฌธ์ œ๊ฐ€ ์žˆ๋‹ค๋Š” ๋ฉ”์‹œ์ง€๋ฅผ ๋‚จ๊น๋‹ˆ๋‹ค.
Perfect with secureNat. secureNat์œผ๋กœ ์™„๋ฒฝํ•ฉ๋‹ˆ๋‹ค. I'm using a pfSense firewall (which isn't throttling, I tried it...). ๋‚˜๋Š” pfSense ๋ฐฉํ™”๋ฒฝ์„ ์‚ฌ์šฉํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.
I'm using the latest beta release of SoftEther. ์ €๋Š” SoftEther์˜ ์ตœ์‹  ๋ฒ ํƒ€ ๋ฆด๋ฆฌ์Šค๋ฅผ ์‚ฌ์šฉํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.
65Mb/s up/down with SecureNat SecureNat์œผ๋กœ 65Mb/s ์—…/๋‹ค์šด

65Mb/s up without, 500Kb/s download (from the client perspective)... ์ตœ๋Œ€ 65Mb/s, ๋‹ค์šด๋กœ๋“œ ์—†์ด 500Kb/s(ํด๋ผ์ด์–ธํŠธ ๊ด€์ ์—์„œ)...

Best regards ์นœ์• ํ•˜๋Š”

en

Hey, ์—ฌ๊ธฐ์š”,

running SE on Ubuntu 18. With secureNat I get nearly speeds as without using VPN. Ubuntu 18์—์„œ SE๋ฅผ ์‹คํ–‰ํ•ฉ๋‹ˆ๋‹ค. secureNat์„ ์‚ฌ์šฉํ•˜๋ฉด VPN์„ ์‚ฌ์šฉํ•˜์ง€ ์•Š๊ณ  ๊ฑฐ์˜ ์†๋„๋ฅผ ์–ป์„ ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. Using my own DHCP server (dnsmasq) I get high download speeds but only 1/10 of my previous upload. ์ž์ฒด DHCP ์„œ๋ฒ„(dnsmasq)๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ ๋‹ค์šด๋กœ๋“œ ์†๋„๋Š” ๋น ๋ฅด์ง€๋งŒ ์ด์ „ ์—…๋กœ๋“œ ์†๋„์˜ 1/10์— ๋ถˆ๊ณผํ•ฉ๋‹ˆ๋‹ค. Couldn't figure out what the reason is so far... ์ง€๊ธˆ๊นŒ์ง€ ์ด์œ ๋ฅผ ์•Œ ์ˆ˜ ์—†์—ˆ์Šต๋‹ˆ๋‹ค...

best ๋ฒ ์ŠคํŠธ

en

I was seeing exactly what r-mach was seeing... 60 megabits/s up and about 300 kilobits/s down from the Softether server. ๋‚˜๋Š” r-mach๊ฐ€ ๋ณด๊ณ  ์žˆ๋Š” ๊ฒƒ์„ ์ •ํ™•ํžˆ ๋ณด๊ณ  ์žˆ์—ˆ์Šต๋‹ˆ๋‹ค... Softether ์„œ๋ฒ„์—์„œ ์ตœ๋Œ€ 60 ๋ฉ”๊ฐ€๋น„ํŠธ/์ดˆ ๋ฐ ์•ฝ 300 ํ‚ฌ๋กœ๋น„ํŠธ/์ดˆ. Oddly, ooijiyoung's solution worked for me even with SecureNAT disabled and I am now getting wire speed through ipsec in both directions. ์ด์ƒํ•˜๊ฒŒ๋„ ooijiyoung์˜ ์†”๋ฃจ์…˜์€ SecureNAT๊ฐ€ ๋น„ํ™œ์„ฑํ™”๋œ ์ƒํƒœ์—์„œ๋„ ์ €์—๊ฒŒ ํšจ๊ณผ์ ์ด์—ˆ๊ณ  ์ด์ œ ์–‘๋ฐฉํ–ฅ์—์„œ ipsec์„ ํ†ตํ•ด ์œ ์„  ์†๋„๋ฅผ ์–ป๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค.

FWIW, I've seen a lot of other people with the same issue trying to run Softether in a container and looking at docker-related causes, but I'm even getting wire speed through the container now with the above two Virtual Hub Extended Options set. FWIW, ์ปจํ…Œ์ด๋„ˆ์—์„œ Softether๋ฅผ ์‹คํ–‰ํ•˜๋ ค๊ณ  ์‹œ๋„ํ•˜๊ณ  ๋„์ปค ๊ด€๋ จ ์›์ธ์„ ์‚ดํŽด๋ณด๋Š” ๋™์ผํ•œ ๋ฌธ์ œ๋ฅผ ๊ฐ€์ง„ ๋‹ค๋ฅธ ๋งŽ์€ ์‚ฌ๋žŒ๋“ค์„ ๋ณด์•˜์ง€๋งŒ ์œ„์˜ ๋‘ ๊ฐ€์ง€ ๊ฐ€์ƒ ํ—ˆ๋ธŒ ํ™•์žฅ ์˜ต์…˜์„ ์‚ฌ์šฉํ•˜์—ฌ ์ด์ œ ์ปจํ…Œ์ด๋„ˆ๋ฅผ ํ†ตํ•ด ์œ ์„  ์†๋„๋ฅผ ์–ป๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค. ์„ธํŠธ.

Thanks! ๊ฐ์‚ฌํ•ด์š”!

en
์ด ํŽ˜์ด์ง€๊ฐ€ ๋„์›€์ด ๋˜์—ˆ๋‚˜์š”?
0 / 5 - 0 ๋“ฑ๊ธ‰