Search found 12 matches

by marekm
25 Jan 2022, 20:41
Forum: PPPoE
Topic: NetFlow accounting on PPPoE interfaces?
Replies: 2
Views: 3645

Re: NetFlow accounting on PPPoE interfaces?

I'm not sure how to tell pmacct to detect dynamic PPPoE interfaces created and removed by accel-ppp. My RADIUS configuration is such that they are all named ppp-$USER where $USER is the PPPoE username. I need to collect and log all IP headers (only headers, no data) of all traffic flows on all PPPoE...
by marekm
24 Jan 2022, 20:19
Forum: PPPoE
Topic: NetFlow accounting on PPPoE interfaces?
Replies: 2
Views: 3645

NetFlow accounting on PPPoE interfaces?

Is is possible to do NetFlow traffic accounting on the dynamic PPPoE interfaces created by accel-ppp? I'm running a PPPoE server on VyOS which includes accel-ppp, but VyOS only allows physical interfaces to be specified for traffic accounting. Is this just a limitation of the VyOS CLI (must specify ...
by marekm
20 Aug 2020, 19:02
Forum: PPPoE
Topic: PPPoE session still open after client connects to different server
Replies: 2
Views: 3940

Re: PPPoE session still open after client connects to different server

Proposed patch (warning: not tested yet other than it compiles): - use uint32_t consistently for LCP magic numbers instead of (signed) int - use mrand48() instead of random() for full 32 bits of randomness (like pppd does) - remember peer's negotiated magic in lcp->peer_magic - check it in received ...
by marekm
11 Aug 2020, 22:36
Forum: PPPoE
Topic: PPPoE session still open after client connects to different server
Replies: 2
Views: 3940

PPPoE session still open after client connects to different server

I've seen a situation which looks like a bug to me. It happens in a redundant / load balancing setup with two (or more) PPPoE servers on the same network. I've never seen it happen while running a similar setup with two MikroTik PPPoE servers for a long time earlier on the same network with mostly t...
by marekm
21 Jul 2020, 20:32
Forum: PPPoE
Topic: Mass disconnects under high load
Replies: 6
Views: 6567

Re: Mass disconnects under high load

After some more tuning... wel'll see, testing is not easy in a production setup as I don't want the customers more angry than they already are. unit-cache= - disabled again, I suspect (not confirmed yet) it might have bad effect on dynamic routing protocols (I redistribute connected PPPoE routes via...
by marekm
07 Jul 2020, 15:37
Forum: Free for all
Topic: Any experts in Linux tc filter actions here?
Replies: 0
Views: 18539

Any experts in Linux tc filter actions here?

I'm looking to do a seemingly simple thing that should be possible with u32 match and skbedit action, but can't seem to figure out the proper syntax. The error I'm getting is usually "Error: Class doesn't support blocks." and I can't even find this string anywhere in the tc binary. Running...
by marekm
07 Jul 2020, 12:05
Forum: PPPoE
Topic: Mass disconnects under high load
Replies: 6
Views: 6567

Re: Mass disconnects under high load

It's a bit difficult to debug without making customers angry, especially now that everyone is working remotely etc. VyOS people also suggested the unit-cache option, we'll see. In the meantime I'm also seeing another issue, adaptive LCP echo sometimes has the unwanted effect of keeping alive stale P...
by marekm
01 Jul 2020, 09:44
Forum: PPPoE
Topic: Mass disconnects under high load
Replies: 6
Views: 6567

Mass disconnects under high load

I'm using accel-ppp 1.12.0 that comes as part of VyOS 1.2.5 - running on PC Engines apu4d4. Works fine most of the time, but I was getting occasional mass disconnects of PPPoE clients. One thing suggested by VyOS people that helped a bit (but not completely yet) was to set [radius] acct-timeout=0 - ...
by marekm
12 Apr 2016, 21:52
Forum: Feature requests
Topic: PPPoE RFC4638
Replies: 10
Views: 8566

Re: PPPoE RFC4638

Congratulations, very good news to see progress on this! Both Mikrotik PPPoE server and accel-ppp have almost all features I need, with these exceptions: Mikrotik missing Delegated-IPv6-Prefix RADIUS attribute, accel-ppp missing RFC4638 support (OK, may still have issues but it's a start). So I was ...
by marekm
23 Jun 2015, 23:59
Forum: Patches
Topic: Porting to x32 ABI, fix a few warnings
Replies: 1
Views: 4987

Porting to x32 ABI, fix a few warnings

I'm playing with the unofficial Debian jessie port to x32 ABI http://www.debian-x32.org . One caveat is that time_t is 64-bit to avoid year 2038 bugs (they are still in the RADIUS protocol itself though), while long is 32-bit just like pointers; these types shouldn't be assumed to be the same. I als...