Probs with Port / Eddi / hummingbird

[tami 0]

Hello,

I get crazy

First: very less linux/raspberry knowledge, so please forgive me

I installated on the Raspberry (buster) Eddie. Port forwarding in the account (for torrent) -> all was running directly perfect, BUT eddie needs a lot of ressources.
Tried hummingbird because of lesser ressources.
 

iptables v1.8.2 (legacy): can't initialize iptables table `security': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
ip6tables v1.8.2 (legacy): can't initialize ip6tables table `security': Table does not exist (do you need to insmod?)
Perhaps ip6tables or your kernel needs to be upgraded.

Ok, searched on google, not really helpful informations found.
apt-get update/upgrade/dist-upgrade = no updates available.

Wanted to switch back to Eddie - now no port forwarding is working anymore. Restarted the rasp already 100 times...
I have nothing changed. connected to the server, Internet on the raspberry is working, but no port open. Made a second port in the account, tried this on canyouseeme -> port closed.
No firewall on the raspberry and no idea anymore
Removed and reinstalled Eddie = no success.

Someone would be so kind and help me please?

EDIT:
Ok, looks like I am, for sure, the first noob of the year.
After starting qbittorrent and change the network-interface - the port is open ...

But still so all "ok", just would be more happy to run hummingbird because of ressources. Edited ... by tami

[OpenSourcerer 1442]

Which RasPi?
Try installing nftables:

apt-get install nftables

Then make hummingbird use them with -N nftables.

[tami 0]

Raspberry Pi 4 Model B Rev 1.4
Linux raspberrypi 5.4.79-v7l+ #1373 SMP Mon Nov 23 13:27:40 GMT 2020 armv7l GNU/Linux
 

sudo ./hummingbird AirVPN_Europe_UDP-443.ovpn -N nftables
Hummingbird - AirVPN OpenVPN 3 Client 1.1.0 - 23 June 2020

Mon Jan  4 23:31:16.230 2021 System and service manager in use is systemd
Mon Jan  4 23:31:16.308 2021 Starting thread
Mon Jan  4 23:31:16.308 2021 OpenVPN core 3.6.4 AirVPN linux arm 32-bit
Mon Jan  4 23:31:16.309 2021 Frame=512/2048/512 mssfix-ctrl=1250
Mon Jan  4 23:31:16.310 2021 UNUSED OPTIONS
3 [resolv-retry] [infinite] 
4 [nobind] 
5 [persist-key] 
6 [persist-tun] 
7 [auth-nocache] 
8 [route-delay] [5] 
9 [verb] [3] 
10 [explicit-exit-notify] [5] 
Mon Jan  4 23:31:16.310 2021 EVENT: RESOLVE
Mon Jan  4 23:31:16.311 2021 Network filter and lock is using nftables
Mon Jan  4 23:31:16.317 2021 Successfully loaded kernel module nf_tables
Mon Jan  4 23:31:16.326 2021 Network filter successfully initialized
Mon Jan  4 23:31:16.327 2021 Local IPv4 address xxx
Mon Jan  4 23:31:16.327 2021 Local IPv6 address xxx
Mon Jan  4 23:31:16.327 2021 Local interface eth0
Mon Jan  4 23:31:16.327 2021 Setting up network filter and lock
Mon Jan  4 23:31:16.327 2021 Allowing system DNS 192.168.1.1 to pass through the network filter
Mon Jan  4 23:31:16.327 2021 Allowing system DNS 1.1.1.1 to pass through the network filter
Mon Jan  4 23:31:16.327 2021 Allowing system DNS 8.8.8.8 to pass through the network filter
Mon Jan  4 23:31:21.336 2021 Resolved server europe.vpn.airdns.org into IPv4 xxx
Mon Jan  4 23:31:21.336 2021 Adding IPv4 server xxx to network filter
Mon Jan  4 23:31:21.534 2021 Network filter and lock successfully activated
Mon Jan  4 23:31:26.311 2021 Server poll timeout, trying next remote entry...
Mon Jan  4 23:31:26.311 2021 EVENT: RECONNECTING
Mon Jan  4 23:31:26.311 2021 ERROR: Backup copy of resolv.conf not found.
Mon Jan  4 23:31:26.325 2021 Network filter successfully restored
Mon Jan  4 23:31:26.325 2021 ERROR: N_RECONNECT
Mon Jan  4 23:31:26.326 2021 EVENT: RESOLVE
Mon Jan  4 23:31:26.326 2021 Network filter and lock is using nftables
Mon Jan  4 23:31:26.339 2021 Successfully loaded kernel module nf_tables
Mon Jan  4 23:31:26.347 2021 Network filter successfully initialized
Mon Jan  4 23:31:26.347 2021 Local IPv4 address 192.168.1.118
Mon Jan  4 23:31:26.347 2021 Local IPv6 address xxx

And then just a loop... Edited ... by tami

[OpenSourcerer 1442]

11 hours ago, tami said:

Mon Jan 4 23:31:26.311 2021 Server poll timeout, trying next remote entry...

You don't seem to be able to connect. Try -N off.

[tami 0]

Danke

The "lesser ressources" is just a dream, as it looks like:






Whats the negative impact to use the -N off, if I may ask?
And, because of ressources, it doesnt really make sense for me to use hummingbird, right?

I have a 10/10 MiB/s internet connection.
I tried now different torrents (private tracker) just for testing the speed (also curl -s https://raw.githubusercontent.com/sivel/speedtest-cli/master/speedtest.py | python - , there i get just around 2-3 MiB/s )
I let AirVPN choose my server (mostly he takes Celaeno/NL). I tried also some others.

I understand, that every server (and user) has his "limit". The load on Celaeno is 16% (at the moment), my download speed is just 1/3 of my max. internetconnection (so like 2-4 MiB/s), my Latency 81ms.
Its now not a complain, just a question:
Whats the limit or better: why is my VPN traffic just like 30-40% of my normal speed?

And, thanks for the help!

[Staff 10016]

@tami

Hello!

Hummingbird has a tiny RAM footprint if compared to Eddie (a dozen MB against hundreds of MB), even because it does not need Mono and does not have a GUI, so if you don't need a GUI use Hummingbird. CPU usage is high when traffic encryption/decryption is necessary and that's also why you can't beat some throughput limit.

Hummingbird 1.1.0 is linked against mbedTLS library. New Hummingbird 1.1.1 (you can already test it, RC 1 was out some days ago) is linked against OpenSSL, which now provides higher performance than mbedTLS, at the price of a little more needed RAM. Please test it if you can and check whether the problem remains.

-N off disables "Network Lock" feature. If disabling "Network Lock" resolves the problem, why Network Lock activation prevents you from connecting remains to be seen. If the problem persists with Hummingbird 1.1.1, would you like to post the complete log? If you post it, please make sure not to delete VPN server IP address as you did. It's an important information and does not compromise your privacy.

Since Raspberry CPU does not support AES-NI, you can boost performance by connecting with cipher CHACHA20-POLY1305. New Hummingbird 1.1.1 is linked against our latest OpenVPN 3 AirVPN library release, which supports data-ciphers directive and is updated to comply to OpenVPN 2.5 (which runs in our servers) specifications, so you can enforce CHACHA20 and any other supported cipher with a proper profile, or by command line option.

To download Hummingbird 1.1.1 please see here:
https://airvpn.org/forums/topic/48435-linux-new-software-airvpn-suite-10-beta/

Hummingbird is included in the suite (of course feel free to test Goldcrest+Bluetit too).

Kind regards