OCserv 遭到阻断？

小小泥娃

近几天才出现的状况，连接后几十秒内会被断开

1. ocserv[30087]: worker[me]: *.*.*.* worker-auth.c:708: error connecting to sec-mod socket '/var/run/ocserv-socket.30077': Connection refused
   
2. tail: /tmp/ocserv.log: file truncated
   
3. note: setting 'plain' as primary authentication method
   
4. note: setting 'file' as supplemental config option
   
5. listening (TCP) on 0.0.0.0:4443...
   
6. listening (TCP) on [::]:4443...
   
7. listening (UDP) on 0.0.0.0:4443...
   
8. listening (UDP) on [::]:4443...
   
9. ocserv[30113]: main: initialized ocserv 0.11.8
   
10. ocserv[30115]: sec-mod: reading supplemental config from files
    
11. ocserv[30115]: sec-mod: sec-mod initialized (socket: /var/run/ocserv-socket.30113)
    
12. ocserv[30115]: sec-mod: session open but with non-existing SID!
    
13. ocserv[30113]: main: *.*.*.*:5075 could not open session
    
14. ocserv[30113]: main: *.*.*.*:5075 failed authentication attempt for user ''
    
15. ocserv[30116]: worker: *.*.*.*failed cookie authentication attempt
    
16. ocserv[30113]: main: *.*.*.*:5075 user disconnected (reason: unspecified, rx: 0, tx: 0)
    
17. ocserv[30115]: sec-mod: error receiving msg head from main
    
18. ocserv[30115]: sec-mod: error processing async command from main
    
19. tail: /tmp/ocserv.log: file truncated
    
20. note: setting 'plain' as primary authentication method
    
21. note: setting 'file' as supplemental config option
    

复制代码

eategg

禁用udp试试

hostvps

udp干扰，一般是VP N连接后几分钟端开一次，然后再连接就不会断开了

Moruy

udp 的问题

小小泥娃

@hostvps @eategg
关闭 dtls-legacy 和 udp 后症状依旧。

1. listening (TCP) on 0.0.0.0:4443...
   
2. listening (TCP) on [::]:4443...
   
3. ocserv[30565]: main: initialized ocserv 0.11.8
   
4. ocserv[30567]: sec-mod: reading supplemental config from files
   
5. ocserv[30567]: sec-mod: sec-mod initialized (socket: /var/run/ocserv-socket.30565)
   
6. ocserv[30567]: sec-mod: using 'plain' authentication to authenticate user (session: RlatsK)
   
7. ocserv[30565]: main: *.*.*.*:5148 user disconnected (reason: unspecified, rx: 0, tx: 0)
   
8. ocserv[30565]: main: *.*.*.*:5149 user disconnected (reason: unspecified, rx: 0, tx: 0)
   
9. ocserv[30567]: sec-mod: initiating session for user 'me' (session: RlatsK)
   
10. ocserv[30565]: main[me]: *.*.*.*:5150 new user session
    
11. ocserv[30572]: worker[me]: *.*.*.*suggesting DPD of 30 secs
    
12. ocserv[30572]: worker[me]: *.*.*.*configured link MTU is 1500
    
13. ocserv[30572]: worker[me]: *.*.*.*peer's link MTU is 1500
    
14. ocserv[30572]: worker[me]: *.*.*.*sending IPv4 192.168.233.15
    
15. ocserv[30572]: worker[me]: *.*.*.*adding DNS 8.8.8.8
    
16. ocserv[30572]: worker[me]: *.*.*.*adding DNS 8.8.4.4
    
17. ocserv[30572]: worker[me]: *.*.*.*Link MTU is 1500 bytes
    
18. ocserv[30565]: main[me]: *.*.*.*:5150 user logged in
    
19. ocserv[30567]: sec-mod: error receiving msg head from main
    
20. ocserv[30567]: sec-mod: error processing sync command from main
    
21. ocserv[30572]: worker[me]: *.*.*.*worker-auth.c:708: error connecting to sec-mod socket '/var/run/ocserv-socket.30565': Connection refused
    
22. tail: /tmp/ocserv.log: file truncated
    
23. note: setting 'plain' as primary authentication method
    
24. note: setting 'file' as supplemental config option
    
25. listening (TCP) on 0.0.0.0:4443...
    
26. listening (TCP) on [::]:4443...
    
27. ocserv[30600]: main: initialized ocserv 0.11.8
    
28. ocserv[30602]: sec-mod: reading supplemental config from files
    
29. ocserv[30602]: sec-mod: sec-mod initialized (socket: /var/run/ocserv-socket.30600)
    
30. ocserv[30602]: sec-mod: session open but with non-existing SID!
    
31. ocserv[30600]: main: *.*.*.*:5156 could not open session
    
32. ocserv[30600]: main: *.*.*.*:5156 failed authentication attempt for user ''
    
33. ocserv[30603]: worker: *.*.*.*failed cookie authentication attempt
    
34. ocserv[30600]: main: *.*.*.*:5156 user disconnected (reason: unspecified, rx: 0, tx: 0)
    

复制代码

qwwujh

用sstp吧 申请一个SSL证书的事

hostvps

用https://goo.gl/3NUUk6 这个搭建openvp n