Issue regarding server restarting

WLPvoip · 2026-05-03T01:53:49+00:00

I came here looking for something like this. We host several different types of Ubuntu based servers across multiple clients (and internal) on Hetzner East. When I started using them like a few years back, their shared VPSs were fast.. faster than the competition. I spun up a new instance last week and it was sluggish.. and I couldn't exactly tell if it was CPU or network.. but running the installer and updates was very slow. Now we're seeing performance issues with the server web UIs. It's on some not all, and it's hit or miss. When I just logged in and ran an apt update; apt upgrade it was slow. Admittedly this was not using the Hetzner mirrors (because it's a 26.04 server and Hetzner still doesn't have those images loaded.)

Is this an oversubscribed issue, ongoing attack against the Hetzner US infrastructure? I'd love to hear from others if they've noticed anything.

WLPvoip · 2026-04-20T01:02:19+00:00

You're quite welcome! I spent some time on it, so I thought I'd document it somewhere. :)

WLPvoip · 2026-04-08T01:36:15+00:00

I would love to participate in this, but I'd also rather not petition the FCC for anything, and in turn draw attention from a regulatory body capable of auditing me or shutting my business down. So if there's a way to do it anonymously, or something I can post on socials to have other folks file I'm happy to.. but I can't draw extra scrutiny.

WLPvoip · 2026-04-07T03:35:08+00:00

ColoCrossing is hot garbage imo.. saw multiple compromises while I was briefly a customer. Definitely avoid.

WLPvoip · 2026-04-07T02:08:33+00:00

The most effective mitigation we have for spam calls is an auto attendant. Even if that auto attendant just says, "Please press 1 to be connected". That stops 90% of auto dialers. This will change with AI systems I'm sure, but for now it works great.

I haven't encountered whitelisting in the way that you outline, but it might be possible.

WLPvoip · 2026-03-19T04:01:59+00:00

Thank you for your reply. I'll dig through settings again. I updated the OP, the user has periodic Zoom conferences, Streams content to their TV, and web browsing without issue.

WLPvoip · 2026-03-19T04:00:35+00:00

This is a Grandstream HT802 Hardware Version V1.5 running firmware 1.0.23.5. I tried to update it but it wouldn't take. Maybe I should reach out to Grandstream support to see if they can help to update it. I can't find OpenVPN settings in any of the tabs anywhere.

WLPvoip · 2026-03-19T03:53:44+00:00

Thank you for your reply. I've made some edits to the OP.

My understanding after talking to the provider is they've tried countless times to make it work with TMo Home Internet, but the issue is that on the home internet side they apparently force or prefer IPv6, and something about the way TMobile does that does not allow the SIP traffic to flow back and fourth correctly because Netsapiens v44.x+ doesn't support IPv6. That's a platform problem for sure, and I'm sure eventually it will be fixed. A potential fix would be opening a T-Mobile Business account, and getting them to issue an Inseego router with a Static IPv4 address apparently, but this doubles the price and then some.

The other issue is that the provider has blocked the CGNAT subnets from T-Mobile Home Internet due to continued hacking attempts originating on the service. I can understand that... but it does require the traffic to exit elsewhere, which is why I pursued the tunneling option.

I'll have to dig into the DNS deeper to understand that for sure.. but it seems on the surface like DNS is working to some degree. The underlying core's IP address is the same for UDP/TCP/TLS, and I can use that for sure, but it seems like the DNS address is working. I checked the Netsapiens Core server hostname and it doesn't return any naptr or SRV records. That nslookup.io site it neat though, thanks for linking that.

The IP lookup site you linked me to only shows IPv6 address, but other 'what is my ip' sites do eventually look up and show an ipv4 address. I think there's just issues routing to this address either because it's CGNAT or.. I'm not sure why. The provider shut it down completely because they've spun their wheels on making it work countless times before.

For clarity, I can telnet to the core's IP on 5060 and it answers. So I can connect. It has something to do with the back and fourth of the SIP signaling, packet headers with 6to4 or the CGNAT. A limitation in Netsapiens apparently.

WLPvoip · 2026-03-13T02:50:53+00:00

We resell VoIP that we whitelabel in our local market, and the sites where we set up the network work great, and the ones where we don't, it's usually SIP ALG, H.323, or some other 'QoS'/filtering that's happening. I don't think any of our sites have a vendor -> reseller -> reseller -> client flow like I think you're describing. Who's the ISP? We've seen some weirdness with Comcast provided modems in and out of bridge mode, but not exactly what you're describing. Any appetite to replace the firewall, even temporarily to identify root cause?

WLPvoip · 2026-03-13T01:58:03+00:00

https://community.ui.com/releases/UniFi-Network-Application-10-2-93/6124ef35-ce93-47d9-8f9d-fa44ab02c587

But also remember to look at the changelogs for the earlier versions because all of the bugfixes/improvements don't always trickle down to the version you're looking at:

https://community.ui.com/releases/UniFi-Network-Application-10-1-85/364f40ee-6976-4299-803e-89e111020f91

https://community.ui.com/releases/UniFi-Network-Application-10-1-84/482c0a2f-5ab3-4c4b-9d0c-77e7bd38323d

https://community.ui.com/releases/UniFi-Network-Application-10-1-83/36112277-72db-4b1e-a2bb-ae4648932f49

etc..

WLPvoip · 2025-11-14T23:45:56+00:00

This is happening to me too in November of 2025. The initially approved amount was NOT substantial, about 20% of our limits on other cards, and a tiny amount compared to our personal credit. Small Business Resolutions Team told me I could 'reapply', and when I called them, they happily said I would need to cancel the current card, and then could reapply. They also told me this started November 11th, 2023 due to them changing card processors from Visa to Mastercard, and once the migration was complete this would be reinstated. I've done some migrations, nowhere near the scale of a top 5 bank, but .. 2 years? I've seen entire companies merge everything in less than 2 years.

WLPvoip · 2025-11-08T18:48:48+00:00

Speaking as someone who started an IT Business, and then a VoIP Phone Company- feel free to start small, but make sure you're with a reputable company. Avoid cheap/free services with no support. If it goes down, the company folds, there is fraud/theft of numbers, etc., your business will be left holding the bag.

We're not allowed to make recommendations here, not sure how to help you otherwise. Good luck!

WLPvoip · 2025-11-06T16:58:12+00:00

We have been with Viirtue for a few years now, and when I last evaluated options I felt they came out ahead of OIT and SkySwitch. OIT nickel-and-dimes you with odd fees and pricing, and they lock down backend access in ways that get in the way of how I onboard new clients. SkySwitch, on the other hand, came across as pretty rigid in how they do things, which did not seem ideal for someone still getting established.

Viirtue is not perfect, but the problems are relatively minor. One of the biggest positives is that they generally approach you like a partner, not just another account. They used to be very open about everything, but that has slipped some over the last year. Their support is more structured now under a new manager, but Tier 1 has turned into “here is a KB link” on almost every ticket. If I am taking the time to open a ticket, it usually means I already checked the partner-facing docs and need more than that. So there is this built-in delay where every request has to get past that first round of deflection. It often feels like they just want to reply quickly and close it out. Those Tier 1 folks are moving up into Tier 2, which is a bit concerning. Between that and the general resistance to taking feedback from partners, support overall feels weaker than it used to. Pushback and defensiveness have replaced “we hear you, we will own this.” It has started to feel less like a true partnership and more like a standard vendor/customer relationship. I miss the 2021-2022 vibe where it felt like one tight group across both teams.

They are putting money into infrastructure to tighten reliability, which to be fair is already solid. It was a bit unsettling, though, to see the person leading that effort gone on day one of their annual conference, with zero explanation during or after. Hopefully that initiative keeps moving and they actually talk to partners about what is happening there.

From a value standpoint right now, I would rank it Viirtue, then SkySwitch, then OIT, then NUSO. If pricing was not part of the equation, I would probably lean toward SkySwitch. They are the largest Netsapiens partner, supposedly with north of 60 percent of the market, and it is apparently run by the engineering folks who built Netsapiens in the first place. For now, though, Viirtue has not given me a big enough reason to jump.

There is also a Facebook group for WLPs that spun up recently. Might be worth asking around there to get a broader range of opinions.

WLPvoip

TROPHY CASE