Just in case this sheds any light. The first traceroute below is from a machine with a wired connection straight into the UCG (no VPN), whose LAN IP is 192.168.0.1, triggered by a spike (30.5%) in the packet loss. Whenever this happens the (private) IP 172.17.45.118 shows up in the traceroute. This is never the case for a period traceroute.
2025-06-03 09:02:51 TRIGGERED
+----+-----------------------------------------------------------------------+-------+-----+------+------+------+------+
| # | Hostname | Loss% | Snt | Last | Avg | Best | Wrst |
+----+-----------------------------------------------------------------------+-------+-----+------+------+------+------+
| 1 | 192.168.0.1 | 35.0 | 100 | 0.6 | 1.1 | 0.6 | 1.4 |
| 2 | ??? | 100.0 | 100 | - | - | - | - |
| 3 | ??? | 100.0 | 100 | - | - | - | - |
| 4 | ??? | 100.0 | 100 | - | - | - | - |
| 5 | 172.17.45.118 | 96.0 | 100 | 1.7 | 2.0 | 1.7 | 2.1 |
| 6 | ??? | 100.0 | 100 | - | - | - | - |
| 7 | ??? | 100.0 | 100 | - | - | - | - |
| 8 | ??? | 100.0 | 100 | - | - | - | - |
| 9 | ??? | 100.0 | 100 | - | - | - | - |
| 10 | ??? | 100.0 | 100 | - | - | - | - |
| 11 | ec2-13-39-234-20.eu-west-(13.39.234.20) | - | 100 | 10.3 | 10.4 | 9.7 | 11.0 |
+----+-----------------------------------------------------------------------+-------+-----+------+------+------+------+
This second traceroute has run roughly at the same time from a machine with a wired connection to the Openwrt router running wireguard and reaching the internet through the UCG. The openwrt router lan ip is 192.168.1.254, 10.2.0.1 is the IP of the wireguard interface (actually it should be 10.2.0.2 with 10,2.0.1 the address for DNS) , 149,40.48.124 is the VPN server IP address. All trace routes from the connection through the VPN look the same and the monitor never runs a triggered one (reported packet loss in the monitor on this interface at the time was 0%). Honestly I cannot see any difference between the two.
2025-06-03 09:00:13 PERIODIC
+----+-----------------------------------------------------------------------+-------+-----+------+------+------+------+
| # | Hostname | Loss% | Snt | Last | Avg | Best | Wrst |
+----+-----------------------------------------------------------------------+-------+-----+------+------+------+------+
| 1 | _gateway (192.168.1.254) | - | 10 | 0.6 | 0.7 | 0.5 | 0.8 |
| 2 | 10.2.0.1 | 20.0 | 10 | 2.3 | 2.3 | 2.2 | 2.4 |
| 3 | unn-149-40-48-124 (149.40.48.124) | 90.0 | 10 | 2.4 | 2.4 | 2.4 | 2.4 |
| 4 | vl221.lon-eq7-core-1.cdn77.com (79.127.192.222) | 20.0 | 10 | 3.7 | 2.9 | 2.4 | 4.7 |
| 5 | ??? | 100.0 | 10 | - | - | - | - |
| 6 | ??? | 100.0 | 10 | - | - | - | - |
| 7 | 52.46.166.146 | 30.0 | 10 | 4.0 | 10.7 | 3.9 | 50.7 |
| 8 | ??? | 100.0 | 10 | - | - | - | - |
| 9 | ??? | 100.0 | 10 | - | - | - | - |
| 10 | ??? | 100.0 | 10 | - | - | - | - |
| 11 | ??? | 100.0 | 10 | - | - | - | - |
| 12 | ??? | 100.0 | 10 | - | - | - | - |
| 13 | ??? | 100.0 | 10 | - | - | - | - |
| 14 | ec2-13-39-234-20.eu-west (13.39.234.20) | 90.0 | 10 | 11.4 | 11.4 | 11.4 | 11.4 |
+----+-----------------------------------------------------------------------+-------+-----+------+------+------+------+
Thanks for all your help and apologies for the poor formatting!
I also got a new email of work in the area on 17/06 after writing to
[email protected], although the timing may be only coincidental.
Edited by Pippo123456 (Tue 03-Jun-25 11:35:02)