search for: clamp_mss

...ide to trigger UDP path probing, and no blocking firewall on the way) # tinc info T: (tinc 1.0.24, directly connected) Node: T Node ID: 97e7a2ff259b Address: 1.2.3.4 port 4200 Online since: 2015-05-13 22:38:45 Status: validkey visited reachable Options: pmtu_discovery clamp_mss Protocol: 17.0 Reachability: directly with TCP # tinc info V: (tinc 1.0.24, no direct connect) Node: V Node ID: 80a618663578 Address: 2.3.4.5 port 20316 Online since: 2015-05-13 22:38:45 Status: validkey visited reachable Options: pmtu_discovery clamp_mss Protocol:...

Hi all, I'm back again with my speed issues. The past issues where dependant of network I used. Now I run my tests in a lab, with 2 configurations linked by a Gigabit switch : node1: Intel Core i5-2400 with Debian 7.2 node2: Intel Core i5-3570 with Debian 7.2 Both have AES and PCLMULQDQ announced in /proc/cpuinfo. I use Tinc 1.1 from Git. When I run an iperf test from node2 (client) to

....100.2, subnet 255.255.0.0. Pulling tinc info client on the server gives the following: Node: client Node ID: xxx928356yyy Address: public IP university network port 655 Online since: 2016-11-17 13:04:03 Status: validkey visited reachable sptps Options: pmtu_discovery clamp_mss Protocol: 17.7 Reachability: directly with TCP Edges: serverwin Subnets: Pulling tinc info serverwin on the client gives the following: Node: serverwin Node ID: xxx168af2859yyy Address: public IP company network port 655 Online since: 2016-11-17 13:04:03 Status:...

...ping each other but larger data does not go. test1=sllm1 test2=sllm2 test1:/usr/src/tinc# tinc -n coppint info sllm2 Node: sllm2 Address: 192.168.0.202 port 655 Online since: 2014-02-25 13:36:39 Status: validkey visited reachable sptps udp_confirmed Options: pmtu_discovery clamp_mss Protocol: 17.3 Reachability: directly with UDP PMTU: 1518 Edges: host1 host3 host4 host6 sllm1 Subnets: 1a:26:ce:e3:fb:13 6e:de:af:13:55:bf root at test2:~# tinc -n coppint info sllm1 Node: sllm1 Address: 192.168.0.200 port 655 Online since: 2014-02-25 13:36:3...

We have a Zenoss server in our main office monitoring (among many other things) an Apache server in a remote network, with a Tinc link between the two networks. The monitoring simply involves making an HTTP request to a URL once every 5 minutes and confirming that a response page comes back. Most of the requests to this particular web server succeed (and similar requests to other web servers

...than Stratton Treadway wrote: > It seems that when the cksum is incorrect, it is always off by 1. > [...] > Am I correct in concluding that this cksum problem is a bug in Tinc? After investigating this further, I'm fairly certain that problem originates in the following lines of the clamp_mss() function in route.c: [...] csum ^= 0xffff; csum -= oldmss; csum += newmss; csum ^= 0xffff; packet->data[50] = csum >> 8; packet->data[51] = csum & 0xff; Since the TCP checksum value needs to be computed using one's compliment arithmetic, th...

Hi, I propose that the "ad-hoc connections" (localdiscovery) are also displayed in the graph (graphdumpfile) as it is useful for debugging. I find the command-line tooling a bit cumbersome to find out where the problem is - maybe a web-interface can be added to tincd? Implementing a http server is trivial I found out. Folkert van Heusden -- Curious about the inner workings of your

Hi, I am using Shorewall 2.0.6 on Debian with iptables 1.29. Before I was using Shorewall 2.0.3 and If work correctly, I am not sure that my problems begin after upgrade to 2.0.6, but my problem is that I can''t see some websites on the pc clients ( such as www.microsoft.com ), but some websites yes ( they are not in the pc cache ). My config is Shorewall as gateway/router of

Hi, I have a very simple server setup, using shorewall as my firewall. I have a line like this at the top of my rules file to allow ssh connections, but limited to 3 connection per minute with a burst rate of 3: SSH/ACCEPT net $FW - - - - 3/min:3 - Now when I have that in place, and from a remote machine run scp server:/some/file ., I find