TL-SG1016DE Poisoned By VPN Traffic

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

TL-SG1016DE Poisoned By VPN Traffic

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
TL-SG1016DE Poisoned By VPN Traffic
TL-SG1016DE Poisoned By VPN Traffic
2024-09-23 18:28:45 - last edited 2024-09-24 01:17:26
Model: TL-SG1016DE  
Hardware Version: V6
Firmware Version: 1.0.0 Build 20230220 Rel.32196

Every so often I experience crippling disruption on a small network which, by a process of experiment, appears to be associated with the SG1016 switch and VPN usage.

 

The SG1016 serves the internal network, handing off to the Internet via a Netgate pfSense appliance and high-quality internet router in the DMZ.

From time to time I use Adblock VPN on either a wireless or LAN connected host. After periods of heavy VPN usage I notice a variety of LAN/Internet issues involving performance and DNS (my DNS/Domain Controller is internal and pretty standard). Restarting the switch is the one action that appears to 'fix' the problem, until the next occurrence.

 

With no VPN in use these issues do not happen.

 

By what mechanism does the VPN traffic appear to 'poison the well'? Admittely, my observations are empirical but they are closely observed. Any suggestions?

(I don't particularly want to have to develop a script that boots the switch on a schedule just to work around this).

 

Thanks for any advice.

 

Dave

 

 

  0      
  0      
#1
Options
1 Reply
Re:TL-SG1016DE Poisoned By VPN Traffic
2024-09-24 02:04:46

Hi @DaveC64 

Thanks for posting in our business forum.

First, this is a L2 switch routing based on the MAC address. I could not find any relation between the VPN and the switch.

 

You have clearly known what's wrong with it. The VPN.

Have you tested it if your VPN can work properly without the switch?

I bet you'd face the same problem.

I have tried the Adblock VPN before but I don't think it works well anymore in today. The ad today does not work well with the DNS blackhole. You can try that out and you won't get Youtube ads blocked anymore or Google.

They have integrated the ad into the DNS resolution video stream. If you block the ad, you block the video stream as well. You won't be able to even load the video as well as the ad.

 

If you ask me, I would not have any doubt about the switch. It's just a problem with the VPN. I don't find any solutions yet with the ads from Google or others. Some may work with the DNS blackhole. But many have become smarter than before and they integrate their ad services into the video stream domains. You block one, you lose all.

 

DNS rewrite or any sort does not work anymore. Simply good for some. Some serious ways to remove the ad will involve the HTTPS rewrite or certificate modifications. That is kind of sensitive to people who care about security. You gotta know what you are doing.

Regardless of whatsoever I talked about here, any changes to the DNS or HTTPS rewrite would potentially break your normal connection. Rules require frequent updates. I don't think the switch is causing the problem. It should be your VPN or DNS issues.

  2  
  2  
#2
Options