Connection terminated by CODE 3 (Client) & CODE 11 (Server)

chengang · Post by **chengang** » Sun Jan 19, 2025 7:04 am

My VPN server is reconnected when the network traffic is heavy during peak hours on weekends, where the error on the client side is (code 3) and the server side is (code 11), and everything is normal. Does this have anything to do with broadcast packets? I've gotten rid of most of the broadcast packets from different clients, and the server configuration hasn't improved from 2 cores 4G to 4 cores 8G.
-----------------------------------------------------------------client log----------------------------------------------------------------------------------------
2025-01-18 14:05:05.418 VPN Connection Setting "yunconnect7": The connection has been either disconnected or it failed. Cause: Connection has been disconnected. (code 3)
2025-01-18 14:05:20.412 VPN Connection Setting "yunconnect7": Connection operation starting (this is now 2 times).
2025-01-18 14:05:20.895 VPN Connection Setting "yunconnect7": Now connected. Session name: "SID-YUNNGINX5-3930"
2025-01-18 14:06:23.195 VPN Connection Setting "yunconnect7": The connection has been either disconnected or it failed. Cause: Connection has been disconnected. (code 3)
2025-01-18 14:06:38.190 VPN Connection Setting "yunconnect7": Connection operation starting (this is now 2 times).
2025-01-18 14:06:38.361 VPN Connection Setting "yunconnect7": Now connected. Session name: "SID-YUNNGINX5-3931"

--------------------------------------------------------------------server.log------------------------------------------------------------------------------------

2025-01-18 14:00:39.396 On the TCP Listener (Port 6028), a Client (IP address 1xxxxxxxxxxxx, Host name "hostedby.privatelayer.com", Port number 63955) has connected.
2025-01-18 14:00:39.396 For the client (IP address: 1xxxxxxxxxxxx, host name: "hostedby.privatelayer.com", port number: 63955), connection "CID-11263" has been created.
2025-01-18 14:00:39.406 Connection "CID-11263" has been terminated.
2025-01-18 14:00:39.406 The connection with the client (IP address 31xxxxxxxx, Port number 63955) has been disconnected.
2025-01-18 14:00:43.240 On the TCP Listener (Port 6013), a Client (IP address 1xxxxxxxxxxxx, Host name "42.106.broad.ha.dynamic.163data.com.cn", Port number 48171) has connected.
2025-01-18 14:00:43.240 For the client (IP address: 1xxxxxxxxxxxx, host name: "42.106.broad.ha.dynamic.163data.com.cn", port number: 48171), connection "CID-11264" has been created.
2025-01-18 14:00:43.280 SSL communication for connection "CID-11264" has been started. The encryption algorithm name is "AES128-SHA".
2025-01-18 14:00:43.350 Connection "CID-11264" has been terminated.
2025-01-18 14:02:01.755 On the TCP Listener (Port 6013), a Client (IP address 1xxxxxxxxxxxx, Host name "42.106.broad.ha.dynamic.163data.com.cn", Port number 39978) has connected.
2025-01-18 14:02:01.755 For the client (IP address: 106.42.181.106, host name: "42.106.broad.ha.dynamic.163data.com.cn", port number: 39978), connection "CID-11265" has been created.
2025-01-18 14:02:01.805 SSL communication for connection "CID-11265" has been started. The encryption algorithm name is "AES128-SHA".
2025-01-18 14:02:01.886 Connection "CID-11265" has been terminated.
2025-01-18 14:03:02.802 On the TCP Listener (Port 6013), a Client (IP address 1xxxxxxxx, Host name "31xxxxxxxx", Port number 1057) has connected.
2025-01-18 14:03:02.802 For the client (IP address: 1xxxxxxxxxxxx, host name: "1xxxxxxxx", port number: 1057), connection "CID-11266" has been created.
2025-01-18 14:03:02.842 SSL communication for connection "CID-11266" has been started. The encryption algorithm name is "AES128-SHA".
2025-01-18 14:03:02.912 Connection "CID-11266" has been terminated.
2025-01-18 14:03:37.247 On the TCP Listener (Port 6013), a Client (IP address 1xxxxxxxx, Host name "198.1.broad.ha.dynamic.163data.com.cn", Port number 1086) has connected.
2025-01-18 14:03:37.247 For the client (IP address: 1xxxxxxxxxxxx, host name: "198.1.broad.ha.dynamic.163data.com.cn", port number: 1086), connection "CID-11267" has been created.
2025-01-18 14:03:37.287 SSL communication for connection "CID-11267" has been started. The encryption algorithm name is "AES128-SHA".
2025-01-18 14:03:37.367 Connection "CID-11267" has been terminated.
2025-01-18 14:04:17.938 On the TCP Listener (Port 6024), a Client (IP address 31xxxxxxxx, Host name "hostedby.privatelayer.com", Port number 63796) has connected.
2025-01-18 14:04:17.938 For the client (IP address: 1xxxxxxxxxxxx, host name: "hostedby.privatelayer.com", port number: 63796), connection "CID-11268" has been created.
2025-01-18 14:04:17.938 Connection "CID-11268" has been terminated.
2025-01-18 14:04:17.938 The connection with the client (IP address 31xxxxxxxx, Port number 63796) has been disconnected.
2025-01-18 14:05:20.543 A new client authentication ticket has been received from the cluster controller. Virtual Hub "WeiXin7", User name "yunnginx5" ("yunnginx5"), Session name "SID-YUNNGINX5-3930", Ticket "39D33FF3F4E5EC6B381E213F51051567378F4F3C", Expiration 60 seconds
2025-01-18 14:05:20.654 On the TCP Listener (Port 6001), a Client (IP address 1xxxxxxxxxxxx, Host name "1xxxxxxxxxxxx", Port number 63515) has connected.
2025-01-18 14:05:20.654 For the client (IP address: 1xxxxxxxxxxxx, host name: "1xxxxxxxxxxxx", port number: 63515), connection "CID-11269" has been created.
2025-01-18 14:05:20.664 SSL communication for connection "CID-11269" has been started. The encryption algorithm name is "TLS_AES_256_GCM_SHA384".
2025-01-18 14:05:20.895 [HUB "WeiXin7"] The connection "CID-11269" (IP address: 1xxxxxxxxxxxx, Host name: 1xxxxxxxxxxxx, Port number: 63515, Client name: "SoftEther VPN Client", Version: 4.34, Build: 9745) is attempting to connect to the Virtual Hub. The auth type provided is "Ticket authentication" and the user name is "yunnginx5".
2025-01-18 14:05:20.895 [HUB "WeiXin7"] Connection "CID-11269": Successfully authenticated as user "yunnginx5".
2025-01-18 14:05:20.895 [HUB "WeiXin7"] Connection "CID-11269": The new session "SID-YUNNGINX5-3930" has been created. (IP address: 1xxxxxxxxxxxx, Port number: 63515, Physical underlying protocol: "Standard TCP/IP (IPv4)")
2025-01-18 14:05:20.895 [HUB "WeiXin7"] Session "SID-YUNNGINX5-3930": The parameter has been set. Max number of TCP connections: 1, Use of encryption: Yes, Use of compression: No, Use of Half duplex communication: No, Timeout: 20 seconds.
2025-01-18 14:05:20.895 [HUB "WeiXin7"] Session "SID-YUNNGINX5-3930": VPN Client details: (Client product name: "SoftEther VPN Client", Client version: 434, Client build number: 9745, Server product name: "SoftEther VPN Server (64 bit)", Server version: 442, Server build number: 9798, Client OS name: "Linux", Client OS version: "CentOS Linux release 7.9.2009 (Core)", Client product ID: "--", Client host name: "hn1-nginx-pro-005", Client IP address: "31xxxxxxxx", Client port number: 63515, Server host name: "1xxxxxxxxxxxx", Server IP address: "31xxxxxxxx", Server port number: 6001, Proxy host name: "", Proxy IP address: "0.0.0.0", Proxy port number: 0, Virtual Hub name: "weixin7", Client unique ID: "45F502D90E51CCFEA244CED2EABD927D")
2025-01-18 14:05:20.996 [HUB "WeiXin7"] Session "SID-YUNNGINX5-3930": A new MAC address "5E-21-24-EA-48-BD" has been assigned.
2025-01-18 14:05:21.549 [HUB "WeiXin7"] Session "SID-YUNNGINX5-3930": A large volume of broadcast packets has been detected. There are cases where packets are discarded based on the policy. The source MAC address is 5E-21-24-EA-48-BD, the source IP address is 31xxxxxxxx, the destination IP address is 0.0.0.0. The number of broadcast packets is equal to or larger than 260 items per 1 second (note this information is the result of mechanical analysis of part of the packets and could be incorrect).
2025-01-18 14:05:23.923 [HUB "WeiXin7"] Session "SID-YUNNGINX5-3459": The session has been terminated. The statistical information is as follows: Total outgoing data size: 895978024 bytes, Total incoming data size: 537119547 bytes.
2025-01-18 14:05:23.943 Connection "CID-5133" terminated by the cause "The VPN session has been deleted. It is possible that either the administrator disconnected the session or the connection from the client to the VPN Server has been disconnected." (code 11).
2025-01-18 14:05:23.943 Connection "CID-5133" has been terminated.
2025-01-18 14:05:23.943 The connection with the client (IP address 1xxxxxxxxxxxx, Port number 47751) has been disconnected.
2025-01-18 14:06:38.268 A new client authentication ticket has been received from the cluster controller. Virtual Hub "WeiXin7", User name "yunnginx5" ("yunnginx5"), Session name "SID-YUNNGINX5-3931", Ticket "2468AB97DFD4D4D5CA7A0B0199DD06AFB08140A1", Expiration 60 seconds
2025-01-18 14:06:38.278 On the TCP Listener (Port 6001), a Client (IP address 1xxxxxxxxxxxx, Host name "1xxxxxxxxxxxx", Port number 35431) has connected.
2025-01-18 14:06:38.278 For the client (IP address: 1xxxxxxxxxxxx, host name: "1xxxxxxxxxxxx", port number: 35431), connection "CID-11270" has been created.
2025-01-18 14:06:38.328 SSL communication for connection "CID-11270" has been started. The encryption algorithm name is "TLS_AES_256_GCM_SHA384".
2025-01-18 14:06:38.348 [HUB "WeiXin7"] The connection "CID-11270" (IP address: 1xxxxxxxxxxxx, Host name: 1xxxxxxxxxxxx, Port number: 35431, Client name: "SoftEther VPN Client", Version: 4.34, Build: 9745) is attempting to connect to the Virtual Hub. The auth type provided is "Ticket authentication" and the user name is "yunnginx5".
2025-01-18 14:06:38.348 [HUB "WeiXin7"] Connection "CID-11270": Successfully authenticated as user "yunnginx5".
2025-01-18 14:06:38.348 [HUB "WeiXin7"] Connection "CID-11270": The new session "SID-YUNNGINX5-3931" has been created. (IP address: 1xxxxxxxxxxxx, Port number: 35431, Physical underlying protocol: "Standard TCP/IP (IPv4)")
2025-01-18 14:06:38.348 [HUB "WeiXin7"] Session "SID-YUNNGINX5-3931": The parameter has been set. Max number of TCP connections: 1, Use of encryption: Yes, Use of compression: No, Use of Half duplex communication: No, Timeout: 20 seconds.
2025-01-18 14:06:38.358 [HUB "WeiXin7"] Session "SID-YUNNGINX5-3931": VPN Client details: (Client product name: "SoftEther VPN Client", Client version: 434, Client build number: 9745, Server product name: "SoftEther VPN Server (64 bit)", Server version: 442, Server build number: 9798, Client OS name: "Linux", Client OS version: "CentOS Linux release 7.9.2009 (Core)", Client product ID: "--", Client host name: "hn1-nginx-pro-005", Client IP address: "31xxxxxxxx", Client port number: 35431, Server host name: "31xxxxxxxx", Server IP address: "31xxxxxxxx", Server port number: 6001, Proxy host name: "", Proxy IP address: "0.0.0.0", Proxy port number: 0, Virtual Hub name: "weixin7", Client unique ID: "45F502D90E51CCFEA244CED2EABD927D")
2025-01-18 14:06:38.459 [HUB "WeiXin7"] Session "SID-YUNNGINX5-3931": A new MAC address "5E-21-24-EA-48-BD" has been assigned.
2025-01-18 14:06:39.022 [HUB "WeiXin7"] Session "SID-YUNNGINX5-3931": A large volume of broadcast packets has been detected. There are cases where packets are discarded based on the policy. The source MAC address is 5E-21-24-EA-48-BD, the source IP address is 31xxxxxxxx, the destination IP address is 0.0.0.0. The number of broadcast packets is equal to or larger than 132 items per 1 second (note this information is the result of mechanical analysis of part of the packets and could be incorrect).
2025-01-18 14:06:42.291 [HUB "WeiXin7"] Session "SID-YUNNGINX5-3930": The session has been terminated. The statistical information is as follows: Total outgoing data size: 805699 bytes, Total incoming data size: 954206 bytes.
2025-01-18 14:06:42.311 Connection "CID-11269" terminated by the cause "The VPN session has been deleted. It is possible that either the administrator disconnected the session or the connection from the client to the VPN Server has been disconnected." (code 11).
2025-01-18 14:06:42.311 Connection "CID-11269" has been terminated.