pingowanie i jego wynik

[ddebny]

Hej!
Ostatnio trochę uczę się działania sieci i mam pewne pytanie.

Dla testów ustawiłem sobie tunel VPN1(USA)->VPN2(DE)->VPN3(PL)
z wirtualki na której mam VPN3 pinguję pewną stronę i mam time 170ms
z wirtualki numer2 210ms
a z wirtualki numer 1 140ms

Czy to oznacza, że tunelowanie nie działa ponieważ VPN3 ma mniejszy ping niż VPN2? Tak na zdrową logikę to chyba VPN3 powinien mieć gorszy wynik ms.

Testowałem wirtualkę1 ściągając duży plik z wirtualki3 programem nsload i wydaje się, że tunelowanie działa poprawnie tak więc dlaczego wortualka3 miała mniejszy ping od wirtualki2?

[mariaczi]

Trasy z tych VPNów masz takie same do tej "pewnej strony"?

[ddebny]

zgadza się Wszystko idzie po jednej trasie.

enp0 pobiera neta
enp1 przekazuje go do dalszej maszyny
tun3 ma włączonego vpn;a

masquerade na enp1 oraz tun3

[mariaczi]

zgadza się Wszystko idzie po jednej trasie.

To pokaż wynik dla traceroute z każdej tej maszyny do tej pewnej strony.

[ddebny]

A niech to będzie moja strona. Nie ma różnicy.

VPN1

Kod: Zaznacz cały

user@user-VirtualBox:~$ traceroute debek-it.pl
traceroute to debek-it.pl (176.9.92.10), 30 hops max, 60 byte packets
 1  172.17.103.1 (172.17.103.1)  78.546 ms  79.087 ms  79.092 ms
 2  juniper-msk.ntx.ru (192.162.100.155)  79.091 ms  79.089 ms  79.087 ms
 3  185.68.144.19 (185.68.144.19)  79.087 ms  79.086 ms  81.218 ms
 4  89.208.48.1 (89.208.48.1)  81.831 ms  81.837 ms  81.835 ms
 5  te9-2.sr2.msk1.ip.di-net.ru (213.248.3.237)  82.690 ms  82.698 ms  83.044 ms
 6  vl-738.br2.msk1.ip.di-net.ru (213.248.3.220)  84.512 ms  94.237 ms  187.351 ms
 7  amsix-gw.hetzner.de (80.249.209.55)  121.772 ms  122.080 ms  122.161 ms
 8  core1.hetzner.de (213.239.203.157)  129.900 ms  129.428 ms  129.761 ms
 9  core22.hetzner.de (213.239.245.178)  134.117 ms core21.hetzner.de (213.239.245.217)  134.466 ms  134.964 ms
10  juniper1.rz15.hetzner.de (213.239.245.90)  135.051 ms juniper2.rz15.hetzner.de (213.239.245.130)  135.118 ms juniper2.rz15.hetzner.de (213.239.245.198)  135.761 ms
11  hos-tr1.ex3k13.rz15.hetzner.de (213.239.244.14)  140.325 ms hos-tr4.ex3k13.rz15.hetzner.de (213.239.244.110)  139.902 ms hos-tr1.ex3k13.rz15.hetzner.de (213.239.244.14)  136.948 ms
12  * * *
13  * * *
14  * * *
15  * * *
16  * * *
17  * * *
18  * * *
19  * * *
20  * * *
21  * * *
22  * * *
23  * * *
24  * * *
25  * * *
26  * * *
27  * * *
28  * * *
29  * * *
30  * * *

VPN2

Kod: Zaznacz cały

user@user-VirtualBox:~$ traceroute debek-it.pl
traceroute to debek-it.pl (176.9.92.10), 30 hops max, 60 byte packets
 1  10.34.0.1 (10.34.0.1)  150.408 ms  305.825 ms  305.793 ms
 2  95.141.32.1 (95.141.32.1)  305.772 ms  305.751 ms  305.731 ms
 3  95.141.47.254 (95.141.47.254)  305.591 ms  305.571 ms  305.449 ms
 4  81.25.202.149 (81.25.202.149)  339.586 ms  339.344 ms  339.295 ms
 5  ae-1.r02.mlanit01.it.bb.gin.ntt.net (129.250.2.41)  339.256 ms  339.220 ms  339.183 ms
 6  ix-ae-10-0.thar1.WI3-Milan.as6453.net (195.219.166.37)  339.010 ms  151.759 ms  152.272 ms
 7  if-ae-1-2.tcore1.FR0-Frankfurt.as6453.net (195.219.166.130)  322.200 ms  322.636 ms  322.640 ms
 8  195.219.219.10 (195.219.219.10)  322.637 ms  322.656 ms  322.582 ms
 9  core21.hetzner.de (213.239.245.13)  322.636 ms core22.hetzner.de (213.239.245.17)  322.589 ms  347.706 ms
10  juniper1.rz15.hetzner.de (213.239.245.90)  347.712 ms juniper2.rz15.hetzner.de (213.239.245.198)  347.751 ms juniper1.rz15.hetzner.de (213.239.245.90)  347.703 ms
11  hos-tr3.ex3k13.rz15.hetzner.de (213.239.244.78)  347.467 ms hos-tr4.ex3k13.rz15.hetzner.de (213.239.244.110)  347.709 ms hos-tr3.ex3k13.rz15.hetzner.de (213.239.244.78)  347.483 ms
12  * * *
13  * * *
14  * * *
15  * * *
16  * * *
17  * * *
18  * * *
19  * * *
20  * * *
21  * * *
22  * * *
23  * * *
24  * * *
25  * * *
26  * * *
27  * * *
28  * * *
29  * * *
30  * * *

VPN3

Kod: Zaznacz cały

user@user-VirtualBox:~$ traceroute debek-it.pl
traceroute to debek-it.pl (176.9.92.10), 30 hops max, 60 byte packets
 1  10.7.7.1 (10.7.7.1)  324.660 ms  375.209 ms  375.244 ms
 2  * * *
 3  5.230.129.169 (5.230.129.169)  375.286 ms  375.309 ms  375.331 ms
 4  de-cix.c04.anc.fra.ghostnet.de (5.175.255.13)  721.296 ms  721.295 ms  721.293 ms
 5  decix2-gw.hetzner.de (80.81.193.164)  721.202 ms  375.316 ms  375.263 ms
 6  core21.hetzner.de (213.239.245.13)  721.240 ms core22.hetzner.de (213.239.245.17)  369.166 ms  824.764 ms
 7  juniper1.rz15.hetzner.de (213.239.245.90)  824.425 ms  824.396 ms juniper1.rz15.hetzner.de (213.239.245.202)  824.384 ms
 8  hos-tr2.ex3k13.rz15.hetzner.de (213.239.244.46)  824.373 ms  824.351 ms  824.357 ms
 9  * * *
10  * * *
11  * * *
12  * * *
13  * * *
14  * * *
15  * * *
16  * * *
17  * * *
18  * * *
19  * * *
20  * * *
21  * * *
22  * * *
23  * * *
24  * * *
25  * * *
26  * * *
27  * * *
28  * * *
29  * * *
30  * * *

Wcześniej sprawdzałem komendą ping nazwastrony.pl

[ddebny]

PING VPN2

Kod: Zaznacz cały

user@user-VirtualBox:~$ ping debek-it.pl -c 20
PING debek-it.pl (176.9.92.10) 56(84) bytes of data.
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=1 ttl=51 time=171 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=2 ttl=51 time=173 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=3 ttl=51 time=173 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=4 ttl=51 time=174 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=5 ttl=51 time=174 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=6 ttl=51 time=176 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=7 ttl=51 time=180 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=8 ttl=51 time=172 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=9 ttl=51 time=270 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=10 ttl=51 time=172 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=11 ttl=51 time=177 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=12 ttl=51 time=172 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=13 ttl=51 time=174 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=14 ttl=51 time=330 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=15 ttl=51 time=172 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=16 ttl=51 time=175 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=17 ttl=51 time=179 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=18 ttl=51 time=171 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=19 ttl=51 time=304 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=20 ttl=51 time=175 ms

--- debek-it.pl ping statistics ---
20 packets transmitted, 20 received, 0% packet loss, time 19028ms
rtt min/avg/max/mdev = 171.338/193.647/330.633/46.468 ms

PING VPN3:

Kod: Zaznacz cały

user@user-VirtualBox:~$ ping debek-it.pl -c 20
PING debek-it.pl (176.9.92.10) 56(84) bytes of data.
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=1 ttl=55 time=357 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=2 ttl=55 time=175 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=3 ttl=55 time=168 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=4 ttl=55 time=170 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=5 ttl=55 time=170 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=6 ttl=55 time=168 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=7 ttl=55 time=169 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=8 ttl=55 time=173 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=9 ttl=55 time=172 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=10 ttl=55 time=171 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=11 ttl=55 time=170 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=12 ttl=55 time=172 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=13 ttl=55 time=219 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=14 ttl=55 time=174 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=15 ttl=55 time=171 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=16 ttl=55 time=167 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=17 ttl=55 time=169 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=18 ttl=55 time=169 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=19 ttl=55 time=182 ms
64 bytes from server3.seo-linuxpl.com (176.9.92.10): icmp_seq=20 ttl=55 time=190 ms

--- debek-it.pl ping statistics ---
20 packets transmitted, 20 received, 0% packet loss, time 19013ms
rtt min/avg/max/mdev = 167.506/184.293/357.252/41.282 ms

Z tego mogę wnioskować, że moje tunelowanie nie działa?

[mariaczi]

Którym interfejsem puszczałeś ping?
Za

Kod: Zaznacz cały

man ping

Kod: Zaznacz cały

       -I interface address
              Set source address to specified interface address. Argument may be numeric IP address or name  of  device.  When
              pinging IPv6 link-local address this option is required.

[ddebny]

Pingowanie działa tylko na tun3. Na innych nie.

[ddebny]

Pomoże ktoś?