Openwrt droping packets

Hi
I am having some packet loss at my openwrt router. I suppose it could be @ _gateway an Untangle firewall? Anyway it is obvious when watching videos. Not terrible but annoying. ISP is spectrum 60 down and 5 up. Far from the best but the only option here in rural area. They may be the problem. LOL

Modem <> openwrt <> Untangle <> Switch

Openwrt is doing openvpn to 185.238.231.125 .

This is mtr result from a computer on the network via Ethernet.

  1. _gateway 0.0% 4953 0.9 0.7 0.4 4.8 0.3
  2. openwrt 1.8% 4953 1.8 1.4 0.7 4.3 0.5
  3. (waiting for reply)
  4. 185.238.231.125 0.0% 4953 25.3 25.4 24.0 98.8 3.9
  5. vl203.den-cs1-core-1.cdn77.com 0.0% 4953 25.3 25.4 24.3 93.7 3.3
  6. (waiting for reply)
  7. 38.x.x.x 0.0% 4952 26.3 29.1 25.1 117.4 7.0
  8. 1xx.x.x.x 0.0% 4952 26.7 26.9 23.6 143.9 5.8

1.8% of 4953 is 89 packets

Openwrt is x86 64 "OpenWrt 22.03.4 r20123-38ccc47687 / LuCI openwrt-22.03 branch git-23.119.80898-65ef406".
Untangle is 16.6.2 (current) and slightly behind debian 11. Both are vm's on proxmox on latest updates as of this morning. Both are way over provisioned.

Reading above made me think and I installed mtr on the Untangle with about the same result. (without _gateway) So i think it is openwrt causing the issue? So what logs should I be looking at? Or maybe some settings?

Going to figure out how to upgrade to 22.03.5 and keep the vpn settings etc. Lots of post so I will pick one and try on a clone. Thanks proxmox for making that so easy.

Thanks

Hi

Is there any chance, for testing purpose, to install openvpn on computer, connect to ISP modem and test from there ?

If you're getting no packet loss from any later hops then OpenWRT isn't dropping packets while routing. A router dropping ping responses isn't unusual.

I ran mtr on openwrt all night with 0% loss. Then I moved the vpn to the untangle and the dropped now show on the untangle. So I am guessing it may be something with openvpn or the vpn provider. Will try another vpn server location. And upgrading to v22.03.5 .

Still wondering if there are any logs I could be looking at?

Thanks

Yes, if packet loss increases at and stays elevated beyond a specific hop, that is an indication of that specific node dropping real packets (in addition of the ICMP probe packets mtr/traceroute use by default)... "transient" loss in mtr results on any hop but the last can usually be ignored, infrastructure nodes like ISP routers try to generate ICMP responses if they have CPU cycles left, if not they simply do not generate ICMP responses which mtr reports as packet loss.

So I am not dismissing your issue, but I think the intermediate loss is not your problem...

That, or even testing a different VPN provider seems like a decent way to diagnose the issue. If you suspect OpenVPN* you might want to give wireguard a try, which generally is considered to be less resource hungry than OpenVPN and some VPNproviders support it (it does have some caveats, e.g. it will use UDP packets and you might need to use an additional TCP tunnel if your ISP has issues with UDP).

*) There is no indication of OpenVPN doing anything unbecoming in the data you posted though.

P.S.: When posting mtr results, please consider to :
"sandwich" your text between two rows of backtick characters ` (which themselves will be invisible in the preview) looking something like this in the editor:
```
Your Pasted Text as preformatted text with fixed width font
1
1111 (note with fixed-width fonts the numbers are right-aligned)
```
but looking like this in the rendered forum:

Your Pasted Text as preformatted text with fixed width font
   1
1111 (note with fixed-width fonts the numbers are right-aligned)

this results in easy to read mtr results simply from copy and pasting the console output of mtr:

123-1234567:~ user$mtr -ezb4w -c 20 www.heise.de
Start: 2023-05-24T16:56:02+0200
HOST: 123-1234567.local                                                 Loss%   Snt   Last   Avg  Best  Wrst StDev
  1. AS???    192.168.250.1                                              0.0%    20    0.3   0.3   0.2   0.4   0.1
  2. AS680    XX-physik1-XXXX.net.gwdg.de (134.76.NNN.NNN)               0.0%    20    0.9   0.8   0.5   1.0   0.1
  3. AS680    134.76.250.59                                              0.0%    20    1.1   1.0   0.8   1.6   0.2
  4. AS680    fw-perimeter-gwdg-bb-xr-int.net.gwdg.de (134.76.NNN.NN)    0.0%    20    0.8   0.7   0.5   0.9   0.1
  5. AS680    xr-gwdg1-ext-bb-fw-perimeter.net.gwdg.de (134.76.NNN.NN)  55.0%    20    1.8   1.4   1.1   1.8   0.3
  6. AS680    cr-han2-be14-1189.x-win.dfn.de (188.1.231.125)             0.0%    20    2.9   3.0   2.7   3.3   0.1
  7. AS680    cr-fra2-be12.x-win.dfn.de (188.1.144.133)                  0.0%    20    7.9   8.1   7.9   8.4   0.2
  8. AS???    be100.c350.f.de.plusline.net (80.81.193.132)               0.0%    20    8.4   8.7   8.3  11.3   0.6
  9. AS12306  82.98.102.79                                               0.0%    20    8.7   9.0   8.7  11.1   0.5
       [MPLS: Lbl 24002 TC 0 S u TTL 1]
 10. AS12306  c125.f.de.plusline.net (82.98.102.40)                      0.0%    20    8.3   8.6   8.3   8.8   0.2
       [MPLS: Lbl 24007 TC 0 S u TTL 1]
 11. AS12306  82.98.102.65                                               0.0%    20    8.1   8.3   7.9   8.6   0.2
 12. AS12306  212.19.61.13                                               0.0%    20    8.0   8.5   8.0  15.2   1.6
 13. AS12306  www.heise.de (193.99.144.85)                               0.0%    20    8.1   8.1   8.0   8.5   0.1
123-1234567:~ user$ 

Thanks for the tips.