1. 20 Nov, 2013 2 commits
    • Julien Muchembled's avatar
      Disable UDP protocol by default for OpenVPN tunnels · cd653523
      Julien Muchembled authored
      UDP protocol is useless if nothing is done to prevent fragmentation.
      Otherwise, it is at best unefficient.
      
      There exist routers on the internet that filter fragmented packets with specific
      data. This is hard to debug because TCP connections hang randomly when there is
      no OpenVPN encryption.
      
      Now, only TCP is enabled by default. A second protocol should be there for
      better performance when possible, either existing UDP one (provided it is
      guaranteed there is no fragmentation) or something better (GRE ?).
      cd653523
    • Julien Muchembled's avatar
      Apply tun_mtu when starting TAP interfaces · a6be6881
      Julien Muchembled authored
      For the moment, this does nothing since it should always be 1500.
      a6be6881
  2. 13 Nov, 2013 1 commit
  3. 01 Oct, 2013 1 commit
  4. 27 Sep, 2013 1 commit
    • Julien Muchembled's avatar
      Speed up bootstrap and reconnection · c4c04f4b
      Julien Muchembled authored
      The way peer addresses were exchanged polluted caches with information about
      dead nodes. In particular, bootstrapping often took a long time because the
      cache of the primary node was mostly useless.
      
      This also fixes bootstrap of registry.
      c4c04f4b
  5. 09 Aug, 2013 1 commit
  6. 02 Aug, 2013 2 commits
  7. 25 Jun, 2013 1 commit
    • Julien Muchembled's avatar
      Fix OverflowError on Windows · e3874b09
      Julien Muchembled authored
      Traceback (most recent call last):
        File "/opt/re6stnet/re6stnet", line 403, in main
          tunnel_manager.handlePeerEvent()
        File "/cygdrive/d/slapos/opt/git/re6stnet/re6st/tunnel.py", line 472, in handlePeerEvent
          self.sock.sendto('\1' + ''.join(msg), address)
      e3874b09
  8. 18 Jun, 2013 2 commits
  9. 11 Jun, 2013 2 commits
  10. 03 Jun, 2013 2 commits
  11. 20 May, 2013 1 commit
  12. 13 May, 2013 5 commits
  13. 07 May, 2013 1 commit
  14. 23 Apr, 2013 2 commits
  15. 22 Apr, 2013 2 commits
  16. 17 Apr, 2013 1 commit
  17. 16 Apr, 2013 1 commit
    • Julien Muchembled's avatar
      Fix use of alternate addresses · 620b9e98
      Julien Muchembled authored
      When a peer advertised several addresses, a node trying to create a tunnel to
      it never tried any other address than the first one.
      
      Before, we wrongly assumed OpenVPN would try all addresses before aborting
      (--ping-exit). New code reexecutes OpenVPN until all addresses are tried
      and update the peer db to reorder addresses if the first one failed.
      620b9e98
  18. 27 Mar, 2013 1 commit
  19. 25 Mar, 2013 1 commit
  20. 19 Mar, 2013 3 commits
  21. 18 Mar, 2013 3 commits
    • Julien Muchembled's avatar
      Add a warning about a possible misuse of multiple --ip arguments · 9dac60f9
      Julien Muchembled authored
      '--ip any' was also broken due to missing parenthesis.
      9dac60f9
    • Julien Muchembled's avatar
      Fix possible bootstrap issue · ed2846b4
      Julien Muchembled authored
      When 2 nodes were started for the first time whereas:
      - one of them is in client-only mode, connected to the other one
      - the registry node is temporarily down
      then the normal node never tried to rebootstrap or connect directly to the
      only node it knows (the registry node).
      Such case required to restart the daemon when the registry is back.
      
      Moreover, there was no reason to query the registry node immediately after
      having open new tunnels to peers found in cache, when this number is less than
      expected.
      ed2846b4
    • Julien Muchembled's avatar
      Select gateway in turns instead of randomly · 6b35d638
      Julien Muchembled authored
      This reduces the probability to lose all connections at the same time when a
      gateway becomes out-of-order.
      6b35d638
  22. 15 Mar, 2013 4 commits