wg Tunnelblockade #100
Description
Symptoms:
- Packets going into the wg interface on the supernode stop arriving on the node at the mesh_wg interface. (tcpdump -ni mesh_wg inbound).
- Packets are still visible on br-wan.
- wg handshakes are renewed.
- CPU load drops significantly (to <20% on ER-X).
- Memory load increases by a small but stable base amount.
Resulting symptoms:
- Batman VPN Neighbors goes down to 0.
- TX Link Quality to Supernodes (aka. TQ) no longer gets telemetry.
- RX Link Quality from Supernodes (aka. reversed TQ) goes down to <5%.
- Forward TX Traffic drops to 0.
See from:
- Mailthread: "Failure Check"
- Grafana: https://stats.ffh.zone/d/EGysRPsMz/router-fur-meshviewer?var-node=74acb9a77737&from=1685753778880&to=1685786777470&orgId=1
- debug_info: https://gist.github.com/1977er/7ed4ba1028b903a8957be8bdf61beecb
- debug_info: https://gist.github.com/1977er/3c52bf5ffba9273ef54766f286a87c6f
Actions taken so far:
- Monitoring checks if vpn_neighbors=0 (only works for sites with multiple uplinks).
(Edit by @lemoer: translated using deepl to english)