Comments (3)
Hi @inducer -
Thanks for the report. I see you're running 1.6.1+dfsg-3+b6
while the latest Nebula version is v1.7.2. Can you re-test with the latest version of Nebula in order to verify this behavior still exists? v1.7.0 has some improvements in this area.
What kind of traffic is your laptop receiving/sending through Nebula? Each packet Nebula processes is going to incur some overhead! ifconfig
can give some hints at how many packets you've processed since starting dnclient, but setting up one of the stats
tools and graphing packets would probably be more useful: https://nebula.defined.net/docs/config/stats/
defined1: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1300
inet 192.168.123.14 netmask 255.255.255.0 destination 192.168.123.14
inet6 fe80::c83d:54d8:642a:6ea7 prefixlen 64 scopeid 0x20<link>
unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 500 (UNSPEC)
RX packets 1462490 bytes 1604093122 (1.4 GiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 1569642 bytes 113401859 (108.1 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
Powertop isn't a tool that we've used before (for observing Nebula, or otherwise.) Have you compared Nebula against other similar tools (with the same traffic sent/received)? Packet processing does require some processing power and without context, it's hard to say whether the wakeups you're saying are abnormal or not.
from nebula.
I'll retry with 1.7.2 when I have a chance.
It's reasonable that processing packets will cost energy, but in my case, the link was quiescent, i.e. no packets going either direction. I was expecting Nebula to have close to zero cost (in terms of wakeups/power) in that scenario. This matters (to me at least) in that it would allow me to just leave Nebula running in the background and not having to manually turn it off and on whenever power consumption matters.
from nebula.
I'll retry with 1.7.2 when I have a chance.
It's reasonable that processing packets will cost energy, but in my case, the link was quiescent, i.e. no packets going either direction. I was expecting Nebula to have close to zero cost (in terms of wakeups/power) in that scenario. This matters (to me at least) in that it would allow me to just leave Nebula running in the background and not having to manually turn it off and on whenever power consumption matters.
Thanks for explaining. Here are some of the jobs that Nebula continues to perform even when no traffic is flowing:
- Updating the Lighthouse with its current IP addresses (
lighthouse.interval
, defaults to 10s) - Keeping track of and pushing forward in-flight handshakes (
handshakes.try_interval
, defaults to 100ms) - Emitting interface stats (
stats.interval
, defaults to 10s) - Connection management (
connectionManager.Run
is non-configurable, will fire every 500ms) - Conntrack management (
firewall.conntrack.routine_cache_timeout
, defaults to 1s) - Re-querying for DNS hostnames in the
static_host_map
(static_map.cadence
, defaults to 30s)
You may consider increasing some of these values to see if it improves your energy performance. Do note that increasing these values may increase the time it takes for a new connection to form or for a failed connection to recover.
from nebula.
Related Issues (20)
- Feature Request: Support TCP protocol (or TCP relaying) for networks that block or shape UDP traffic
- Feature request: publish firewall hash to Prometheus HOT 2
- 🐛 BUG: No normal communication between the two machines HOT 8
- 🐛 BUG:unsafe_unsafe routes: same subnet but different via IP address but could not reach the site HOT 3
- Feature request: Support UDP/TCP port fowarding to a host without setting up a tun HOT 2
- 🐛 BUG: Unable to ping the lighthouse, all connections are disconnected. HOT 2
- 🐛 BUG: HOT 3
- Feature Request: Allow for setting DNS HOT 1
- Feature request: Add ability to set fwmark on clearnet traffic
- Feature request: Support for AWS spot fleets
- 🐛 BUG: Stoping Nebula does not free up port :4242 HOT 11
- Lots of prometheus metrics has the wrong type HOT 2
- Handshake timing out for windows nodes HOT 1
- 🐛 BUG: Wintun interface cannot be created after Windows crash ("Cannot create a file when that file already exists.") HOT 8
- Documentation Improvement: routes vs unsafe_routes HOT 2
- Feature request: Firewall to reject connections instead of dropping them HOT 3
- Add Google Authenticator MFA to Nebula HOT 2
- 🐛 BUG: nebula does not send Systemd ready signal when using type: notify HOT 2
- New CA or renew existing CA; what can I do? HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from nebula.