openVPN - Out of memory

Hello, I have the same problem since yesterday.

I’m running Cor 170. I created a new certificate for OpenVPN because that’s why I’m getting this error.

I had no problems with the old certificate until yesterday.

Oct 18 13:43:48 famschamrouter kernel: Out of memory: Killed process 20609 (openvpn-authent) total-vm:6056616kB, anon-rss:5725164kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:11848kB oom_score_adj:0

The problem keeps recurring, this process (openvpn-authent) fills up the memory until it is full. This process occurs periodically every night or after a new certificate is created. Other processes are then terminated (qemu). I have now deleted the certificates and deactivated OpenVPN, since then the problem has not occurred again.

Hi,

to rule out a bug in OpenVPN < 2.5.7, may I ask you to install the latest Core Update 171, reboot your IPFire machine, and test whether the latest OpenVPN version makes a difference?

Thanks in advance, and best regards,
Peter Müller

5 Likes

I have now installed the update to Core 171.

I created a new certificate for openVPN and started openVPN. The problem doesn’t seem to exist at the moment.
On Core 170, the process (openvpn-authentic) is carried out immediately after creating a certificate, the frequency of the CPU has increased to 100% and the memory is filled.

Will continue to monitor the development, but it seems like the update will fix it.


Thanks and best regards,
Jurgen Schamberger

1 Like

Unfortunately too early happy. Same again tonight :confused:

Oct 21 01:49:21 famschamrouter kernel: oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/,task=openvpn-authent,pid=7917,uid=0
Oct 21 01:49:21 famschamrouter kernel: Out of memory: Killed process 7917 (openvpn-authent) total-vm:8616456kB, anon-rss:6662008kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:15108kB oom_score_adj:0

I noticed that the trigger is a new contact establishment or openVPN is stopped.

MorningReconnect here:

Oct 21 01:10:00 famschamrouter ipfire: ConnSched disconnect
Oct 21 01:10:00 famschamrouter pppd[4532]: Terminating on signal 15
Oct 21 01:10:00 famschamrouter pppd[4532]: Connect time 437.5 minutes.
Oct 21 01:10:00 famschamrouter pppd[4532]: Sent 392473603 bytes, received 15497873 bytes.
Oct 21 01:10:00 famschamrouter pppd[4532]: Connection terminated.
Oct 21 01:10:00 famschamrouter openvpnserver[7877]: event_wait : Interrupted system call (code=4)
Oct 21 01:10:00 famschamrouter openvpnserver[7877]: /sbin/ip route del 10.80.147.0/24
Oct 21 01:10:00 famschamrouter openvpnserver[7877]: ERROR: Linux route delete command failed: external program exited with error status: 2
Oct 21 01:10:00 famschamrouter openvpnserver[7877]: /sbin/ip route del 10.90.147.0/24
Oct 21 01:10:00 famschamrouter openvpnserver[7877]: ERROR: Linux route delete command failed: external program exited with error status: 2
Oct 21 01:10:00 famschamrouter openvpnserver[7877]: Closing TUN/TAP interface
Oct 21 01:10:00 famschamrouter openvpnserver[7877]: /sbin/ip addr del dev tun0 local 10.90.147.1 peer 10.90.147.2
Oct 21 01:10:00 famschamrouter openvpnserver[7877]: Linux ip addr del failed: external program exited with error status: 2

and here I stopped openVPN manually

Oct 21 02:35:49 famschamrouter openvpnserver[13717]: event_wait : Interrupted system call (code=4)
Oct 21 02:35:49 famschamrouter openvpnserver[13717]: /sbin/ip route del 10.80.147.0/24
Oct 21 02:35:49 famschamrouter openvpnserver[13717]: ERROR: Linux route delete command failed: external program exited with error status: 2
Oct 21 02:35:49 famschamrouter openvpnserver[13717]: /sbin/ip route del 10.90.147.0/24
Oct 21 02:35:49 famschamrouter openvpnserver[13717]: ERROR: Linux route delete command failed: external program exited with error status: 2
Oct 21 02:35:49 famschamrouter openvpnserver[13717]: Closing TUN/TAP interface
Oct 21 02:35:49 famschamrouter openvpnserver[13717]: /sbin/ip addr del dev tun0 local 10.90.147.1 peer 10.90.147.2
Oct 21 02:35:49 famschamrouter openvpnserver[13717]: Linux ip addr del failed: external program exited with error status: 2
Oct 21 02:35:49 famschamrouter openvpnserver[13717]: SIGTERM[hard,] received, process exiting
Oct 21 02:35:50 famschamrouter vnstatd[9357]: Interface "tun0" disabled.

1 Like

Hi,

i have the same problem.
My N2N setup work, but i’m not able to connect by roadwarrior.

Nov 27 14:55:46 fw kernel: openvpn-authent invoked oom-killer: gfp_mask=0x1100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
Nov 27 14:55:46 fw kernel: CPU: 0 PID: 2418 Comm: openvpn-authent Not tainted 5.15.71-ipfire #1
Nov 27 14:55:46 fw kernel: [   2418]     0  2418   371498   336105  2871296    14190             0 openvpn-authent
Nov 27 14:55:46 fw kernel: [   2440]    99  2440     1906       68    53248      157             0 openvpn
Nov 27 14:55:46 fw kernel: [   3570]     0  3570    35054    29222   307200     1230             0 openvpn-authent
Nov 27 14:55:46 fw kernel: [   3850]    99  3850     1873      170    53248        0             0 openvpn
Nov 27 14:55:46 fw kernel: [   3889]     0  3889     4020     1803    73728        0             0 openvpn-authent
Nov 27 14:55:46 fw kernel: oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/,task=openvpn-authent,pid=2418,uid=0
Nov 27 14:55:46 fw kernel: Out of memory: Killed process 2418 (openvpn-authent) total-vm:1485992kB, anon-rss:1344420kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:2804kB oom_score_adj:0

I allready extended the memory, but no difference.

Thanks Frank

@frodo maybe you could add your comment to the bug report.

There is a patch for the problem. IPFire - Patchwork

Thank you Michael Tremer

Regards
Jurgen

1 Like