- 03 May, 2019 1 commit
-
-
Killian Lufau authored
Passing `--cipher none` to OpenVPN is not enough anymore because clients and servers can still negotiate the algorithm to use for encryption (by default not empty). We pass the option `--ncp-disable` to disable cipher negotiation. /reviewed-on !12
-
- 29 Apr, 2019 1 commit
-
-
Killian Lufau authored
The behaviour of --link-mtu has changed and we increase the values to at least have interface MTU greater than IPv6 minimum. We'll see later to have even greater values in ovpn_link_mtu_dict (so that the resulting MTU is closer to what we had with 2.3) or review the whole MTU part completely.
-
- 23 Oct, 2017 1 commit
-
-
Julien Muchembled authored
-
- 14 Aug, 2015 1 commit
-
-
Julien Muchembled authored
-
- 27 Apr, 2015 1 commit
-
-
Julien Muchembled authored
-
- 14 Apr, 2015 1 commit
-
-
Julien Muchembled authored
-
- 08 Apr, 2015 2 commits
-
-
Julien Muchembled authored
There is no plan for a default ipv4 route.
-
Julien Muchembled authored
This simplify network configuration a lot, and on recent kernels, this fixes wrong source address for extra interfaces that already have a public IP.
-
- 03 Apr, 2015 1 commit
-
-
Julien Muchembled authored
-
- 07 Mar, 2015 1 commit
-
-
Julien Muchembled authored
-
- 06 Mar, 2015 1 commit
-
-
Julien Muchembled authored
-
- 03 Nov, 2014 1 commit
-
-
Julien Muchembled authored
-
- 09 Oct, 2014 1 commit
-
-
Julien Muchembled authored
-
- 29 Jul, 2014 1 commit
-
-
Julien Muchembled authored
We'll have to revive UDP because we experienced congestion with TCP. This should make UDP efficient in good environment. MTU discovery is required however to enable UDP by default.
-
- 16 Jul, 2014 1 commit
-
-
Julien Muchembled authored
-
- 12 Jul, 2014 1 commit
-
-
Julien Muchembled authored
256 * (1 - (1-42/256.)**(15/4.)) ≈ 125 where: - 42 is default rtt-decay - 4 is default hello in babeld - 15 is default hello in re6st
-
- 11 Jul, 2014 1 commit
-
-
Julien Muchembled authored
-
- 10 Jul, 2014 1 commit
-
-
Julien Muchembled authored
-
- 02 Jul, 2014 1 commit
-
-
Julien Muchembled authored
-
- 12 Mar, 2013 1 commit
-
-
Julien Muchembled authored
-
- 21 Sep, 2012 1 commit
-
-
Julien Muchembled authored
-
- 12 Sep, 2012 2 commits
-
-
Julien Muchembled authored
It's normally safe to use --table=0 because most nodes use SLAAC and by default, any existing default route is deleted. It's better to abort if someone who explicitely wants to use a separate table whereas the kernel is limited.
-
Julien Muchembled authored
-
- 11 Sep, 2012 1 commit
-
-
Julien Muchembled authored
-
- 10 Sep, 2012 3 commits
-
-
Julien Muchembled authored
-
Julien Muchembled authored
-
Julien Muchembled authored
-
- 09 Sep, 2012 1 commit
-
-
Julien Muchembled authored
-
- 07 Sep, 2012 2 commits
-
-
Julien Muchembled authored
-
Julien Muchembled authored
-
- 06 Sep, 2012 2 commits
-
-
Julien Muchembled authored
-
Julien Muchembled authored
-
- 03 Sep, 2012 2 commits
-
-
Julien Muchembled authored
The previous broadcast model is replaced by a query-response one. During normal operation, the cache of peers is not used anymore to select peers to connect to. It now only used for bootstrapping and avoid querying an already known address.
-
Julien Muchembled authored
-
- 30 Aug, 2012 1 commit
-
-
Julien Muchembled authored
-
- 17 Aug, 2012 1 commit
-
-
Ulysse Beaugnon authored
-
- 16 Aug, 2012 2 commits
-
-
Ulysse Beaugnon authored
-
Ulysse Beaugnon authored
-
- 14 Aug, 2012 2 commits
-
-
Ulysse Beaugnon authored
Currently, a peer broadcast its address to evrybody but this should change
-
Ulysse Beaugnon authored
-