Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This question builds on a previous question, Can Tor connections between hidden services be aggregated using ifenslave? (… and might Mevade be doing this?).

In researching that, I came across VPN Bonding, which explains how to bond multiple SSH tunnels with ifenslave in balance-rr mode. And so I decided to try bonding multiple OpenVPN-through-Tor tunnels in that way.

I installed OpenVPN in the workstation of one Whonix 7 instance, and created a certificate authority. I then generated certificates and keys for several OpenVPN servers, and for one client each. Next I created configuration files, and verified that the servers were running (on ports 5000, 5001, etc). Then, in the gateway, I created a hidden service for each OpenVPN server.

Next, I installed OpenVPN in the workstation of another Whonix 7 instance, and set up the OpenVPN clients, pointing them to the corresponding hidden services. They all came up, with 1-2 second pings. However, I've had no luck usefully bonding them with ifenslave.

I can create bond0 on each end, using mode "balance-rr". Running ifconfig shows the new bond0 interface, and all component tun interfaces report "UP POINTOPOINT RUNNING NOARP SLAVE MULTICAST". I see no errors in /var/log/messages, just the expected "Adding slave tun*" and "enslaving tun* as an active interface with an up link" messages. But ping fails on the bonded link.

I did add "loop, lp, rtc and bonding" to /etc/modules. However, lsmod only showed three of them (loop, lp and bonding). Could the missing rtc be problematic?

Or perhaps it's more likely that ifenslave simply can't bond interfaces with 1-2 second latency, and ~0.5 second jitter.

Is there any hope for joy here?

share|improve this question

migrated from tor.stackexchange.com Nov 1 '13 at 13:48

This question came from our site for researchers, developers, and users of Tor.

You might have luck messing with some of the timing parameters that the bonding infrastructure provides. I suspect that this is more of a linux/networking question than a Tor question. – weasel - Peter Palfrader Nov 1 '13 at 9:01
Should I answer this question myself with something like "no way"? – mirimir Jun 9 '14 at 8:20

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.