Softether VPNSERVER 99% cpu Usage

[AdroitAdorKhan]

Prerequisites

• Can you reproduce?
• Are you running the latest version of SoftEtherVPN?

SoftEther version:
Component: [Server]
Operating system: [Linux]
Architecture: [64 bit]

[In case it's a computer with known specs, such as the Raspberry Pi, you can specify it omitting the details.]
Processor: [Intel Xeon Processor (Skylake, IBRS)]

Description

[Description of the bug]

Whenever I use securenat on my kvm server, cpu usage goes to 99%. Even with zero user connected, just whenever I enable securenate, vpnserver usage goes to 99%+-. And, it causes issue with the internet speed.

Steps to reproduce

1. [Enable Secure Nat On Server]
2. [Check cpu process, and VPN server hits to 99%]
3. [Disabling Secure NAT fixes the issue. Local bridge doesnt work for me, IDK why.]

[davidebeatrici]

Could you try to enable DisableIpRawModeSecureNAT in the server's configuration, please?

[AdroitAdorKhan]

@davidebeatrici Yes. It was already enabled. But still no luck. vpnserver always stuck at top of cpu usage.

[DainBB]

Had exactly the same issue and fixed by configuring tap instead of using bridge on interface, in my case it's a KVM VM.

[AdroitAdorKhan]

@DainBB Can you send me a guide? Or, tell me what you did?

[DainBB]

Connect to VPN server in Server manager - Click Local Bridge Settting
Delete existing bridge on top part of the screen

At the bottom part of the screen pick Virtual Hub name from dropdown list, then instead of default "Bridge with Physical Existing Network Adapter" choose "Bridge with New Tap Device"
Give some "name" for tap, tap interface will be created as tap_"name", click "Create Local Bridge"

That's it, you should see tap_"name" in ifconfig -a output on your server and you can enable SecureNAT after that, on my VM CPU utilization never goes above 10% with this setup, before I created tap it was 80% on idle.

[AdroitAdorKhan]

@DainBB Thanks a lot mate. But I am in a rush, can you please explain the SmartNAT part? That would be a great help.

[DainBB]

It's SecureNAT, sorry, you know how to enable it.

[AdroitAdorKhan]

@DainBB did you make any change in the SecureNAT config with new TAP interface?

[DainBB]

No changes, all default settings

[AdroitAdorKhan]

@DainBB Thanks again mate! You are awesome!

[libnumafly]

Hi @AdroitAdorKhan nice to meet you and sorry for sounding your inbox, DainBB's solution is works good for your problem?
Years ago I encountered same problem that cpu usage pumps up to 100% and slow down the speed.

That time, found caused by LOCAL BRIDGE and SECURE-NAT bothes enabled.
then, disable LOCAL BRIDGE and simply enable SECURE-NAT is works to solve the problem...

AdroitAdorKhan's problem is like this?
(Sorry for bad my English!)

[AdroitAdorKhan]

Hello @libnumafly I used a different approach there. I used dnsmasq and bridge, and it's working super fine now!

[libnumafly]

Got it, thanks reply @AdroitAdorKhan !