OCserv 遭到阻断？

小小泥娃

近几天才出现的状况，连接后几十秒内会被断开

[ol]

ocserv[30087]: worker[me]: *.*.*.* worker-auth.c:708: error connecting to sec-mod socket '/var/run/ocserv-socket.30077': Connection refused

tail: /tmp/ocserv.log: file truncated

note: setting 'plain' as primary authentication method

note: setting 'file' as supplemental config option

listening (TCP) on 0.0.0.0:4443...

listening (TCP) on [::]:4443...

listening (UDP) on 0.0.0.0:4443...

listening (UDP) on [::]:4443...

ocserv[30113]: main: initialized ocserv 0.11.8

ocserv[30115]: sec-mod: reading supplemental config from files

ocserv[30115]: sec-mod: sec-mod initialized (socket: /var/run/ocserv-socket.30113)

ocserv[30115]: sec-mod: session open but with non-existing SID!

ocserv[30113]: main: *.*.*.*:5075 could not open session

ocserv[30113]: main: *.*.*.*:5075 failed authentication attempt for user ''

ocserv[30116]: worker: *.*.*.*failed cookie authentication attempt

ocserv[30113]: main: *.*.*.*:5075 user disconnected (reason: unspecified, rx: 0, tx: 0)

ocserv[30115]: sec-mod: error receiving msg head from main

ocserv[30115]: sec-mod: error processing async command from main

tail: /tmp/ocserv.log: file truncated

note: setting 'plain' as primary authentication method

note: setting 'file' as supplemental config option

[/ol]复制代码

eategg

禁用udp试试

hostvps

udp干扰，一般是VP N连接后几分钟端开一次，然后再连接就不会断开了

Moruy

udp 的问题

小小泥娃

@hostvps @eategg
关闭 dtls-legacy 和 udp 后症状依旧。

[ol]

listening (TCP) on 0.0.0.0:4443...

listening (TCP) on [::]:4443...

ocserv[30565]: main: initialized ocserv 0.11.8

ocserv[30567]: sec-mod: reading supplemental config from files

ocserv[30567]: sec-mod: sec-mod initialized (socket: /var/run/ocserv-socket.30565)

ocserv[30567]: sec-mod: using 'plain' authentication to authenticate user (session: RlatsK)

ocserv[30565]: main: *.*.*.*:5148 user disconnected (reason: unspecified, rx: 0, tx: 0)

ocserv[30565]: main: *.*.*.*:5149 user disconnected (reason: unspecified, rx: 0, tx: 0)

ocserv[30567]: sec-mod: initiating session for user 'me' (session: RlatsK)

ocserv[30565]: main[me]: *.*.*.*:5150 new user session

ocserv[30572]: worker[me]: *.*.*.*suggesting DPD of 30 secs

ocserv[30572]: worker[me]: *.*.*.*configured link MTU is 1500

ocserv[30572]: worker[me]: *.*.*.*peer's link MTU is 1500

ocserv[30572]: worker[me]: *.*.*.*sending IPv4 192.168.233.15

ocserv[30572]: worker[me]: *.*.*.*adding DNS 8.8.8.8

ocserv[30572]: worker[me]: *.*.*.*adding DNS 8.8.4.4

ocserv[30572]: worker[me]: *.*.*.*Link MTU is 1500 bytes

ocserv[30565]: main[me]: *.*.*.*:5150 user logged in

ocserv[30567]: sec-mod: error receiving msg head from main

ocserv[30567]: sec-mod: error processing sync command from main

ocserv[30572]: worker[me]: *.*.*.*worker-auth.c:708: error connecting to sec-mod socket '/var/run/ocserv-socket.30565': Connection refused

tail: /tmp/ocserv.log: file truncated

note: setting 'plain' as primary authentication method

note: setting 'file' as supplemental config option

listening (TCP) on 0.0.0.0:4443...

listening (TCP) on [::]:4443...

ocserv[30600]: main: initialized ocserv 0.11.8

ocserv[30602]: sec-mod: reading supplemental config from files

ocserv[30602]: sec-mod: sec-mod initialized (socket: /var/run/ocserv-socket.30600)

ocserv[30602]: sec-mod: session open but with non-existing SID!

ocserv[30600]: main: *.*.*.*:5156 could not open session

ocserv[30600]: main: *.*.*.*:5156 failed authentication attempt for user ''

ocserv[30603]: worker: *.*.*.*failed cookie authentication attempt

ocserv[30600]: main: *.*.*.*:5156 user disconnected (reason: unspecified, rx: 0, tx: 0)

[/ol]复制代码

qwwujh

用sstp吧 申请一个SSL证书的事

hostvps

用https://goo.gl/3NUUk6 这个搭建openvp n