search for: maclength

...tap mode) /dev/net/tun: 2011-08-16 14:24:41 tinc.ci1070300036[14384]: total bytes in: 2294 2011-08-16 14:24:41 tinc.ci1070300036[14384]: total bytes out: 13329 2011-08-16 14:24:41 tinc.ci1070300036[14384]: Nodes: 2011-08-16 14:24:41 tinc.ci1070300036[14384]: ca1070300036 at (null) cipher 0 digest 0 maclength 0 compression 0 options 0 status 0020 nexthop - via - pmtu 1518 (min 0 max 1518) 2011-08-16 14:24:41 tinc.ci1070300036[14384]: ca1070300362 at (null) cipher 0 digest 0 maclength 0 compression 0 options 0 status 0020 nexthop - via - pmtu 1518 (min 0 max 1518) 2011-08-16 14:24:41 tinc.ci1070300036[14...

...Maybe tinc is deciding that the path with higher initial MTU is better quality -- even though the PMTU from HostC to HostB is small as well? Reachability for all nodes is "directly with UDP". [HostA]#: tinc -n mesh1 dump nodes HostA id e45fbb0b9280 at MYSELF port 655 cipher 0 digest 0 maclength 0 compression 0 options 400000c status 0058 nexthop HostA via HostA distance 0 pmtu 1518 (min 0 max 1518) HostC id a86da73de11c at x.x.x.x port 655 cipher 0 digest 0 maclength 0 compression 0 options 400000c status 00da nexthop HostC via HostC distance 1 pmtu 1439 (min 1439 max 1439) HostB id a...

...53 schuerrer tinc.msch[4346]: Error while processing METAKEY from xxxxx (81.10.. port 57004) here's the output of USR2 on zzzzz: Statistics for Generic BSD tun device /dev/tun1: total bytes in: 57750 total bytes out: 86210 Nodes: bbbbb at 199.167.. port 655 cipher 427 digest 64 maclength 4 compression 0 options c status 001a nexthop bbbbb via bbbbb pmtu 1518 (min 0 max 1518) yyyyy at 86.56.. port 655 cipher 0 digest 0 maclength 0 compression 0 options c status 0018 nexthop bbbbb via yyyyy pmtu 1518 (min 0 max 1518) aaaaa at 188.40.. port 655 cipher 427 digest 64 maclength 4 compr...

...x.62.187.113 port 655 options c weight 76 VPS01PP to MIKEDEV02 at x.62.187.113 port 655 options c weight 87 tinc.rgdevvpn> From this screen, it seems that MIKEHOMEPC is only accessible via VPS01PP? tinc.rgdevvpn> dump reachable nodes MIKEHOMEPC at x.241.100.155 port 655 cipher 91 digest 64 maclength 4 compression 0 options c status 0018 nexthop VPS01PP via MIKEHOMEPC distance 2 pmtu 1451 (min 0 max 1518) MIKELAPTOP at x.241.100.155 port 655 cipher 91 digest 64 maclength 4 compression 0 options c status 0018 nexthop VPS01PP via MIKELAPTOP distance 2 pmtu 1459 (min 0 max 1518) MIKEWORKPC at...

...device (tun mode) /dev/net/tun: 2014-11-12 19:06:48 tinc.ccvpn[1879]: total bytes in: 76020994 2014-11-12 19:06:48 tinc.ccvpn[1879]: total bytes out: 75874909 2014-11-12 19:06:48 tinc.ccvpn[1879]: Nodes: 2014-11-12 19:06:48 tinc.ccvpn[1879]: node1 at 10.60.19.107 port 655 cipher 91 digest 0 maclength 4 compression 0 options 8 status 001a nexthop node1 via node1 pmtu 1454 (min 0 max 1518) 2014-11-12 19:06:48 tinc.ccvpn[1879]: node2 at 10.60.19.102 port 655 cipher 91 digest 0 maclength 4 compression 0 options 8 status 001a nexthop node2 via node2 pmtu 1454 (min 0 max 1518) 2014-11-12 19:06:48 ti...

Hi everyone, you can find the current version of my enhanced tinc using subversion: svn://tardyon.mon-clan.de/tinc I allowed anonymous read access, so feel free to download the sources. Unfortunately, my enhancements are based on a rather old git-checkout from Guus. The version should run under windows and Debian/Ubuntu. Best, Daniel -----Original Message----- From: folkert [mailto:folkert

...multicasts continuously. Below is the server configuration. Name = tserver AddressFamily = ipv4 BindToAddress = 192.168.21.254 30000 KeyExpire = 28800 ReplayWindow = 0 DeviceStandby = no DeviceType = tap DirectOnly = yes Mode = hub ProcessPriority = high ClampMSS = yes Cipher = none Digest = none MACLength = 0 PMTUDiscovery = yes I have taken out what I believe is performance sapping options in an effort to boost performance. All clients (Windows 7) configuration is identical save its own name. Name = <client name> ConnectTo = tserver AddressFamily = ipv4 KeyExpire = 28800 ReplayWindow = 0 B...

Cipher is enabled with the default setting (Blowfish CBC) Digest is disabled Compression is disabled MACLength is the default (4 if I remember correctly) I suspect that the issue is related to the encryption. I tried disabling encryption and the issue wasn?t reproduced during an automated test run of 400 reconnections. Regards, Alexandre Beaulieu > On Nov 22, 2014, at 3:19 PM, Guus Sliepen <guus at...

...nteresting: root at test2:~# cat /var/log/tinc-coppint.log | grep PMTU 2014-02-25 13:31:18 tinc.coppint[413140]: Increase in PMTU to sllm1 (192.168.0.200 port 655) detected, restarting PMTU discovery What do I have to look for in this file ? Host config contains only Address, Cipher, Digest and MACLength; but I think that 3 last are rewritten by sptps. Tinc config is : AddressFamily = ipv4 #BindToInterface = vmbr1 Broadcast = mst ConnectTo = host1 ConnectTo = host2 ConnectTo = host3 ConnectTo = host4 ConnectTo = host5 ConnectTo = host6 ConnectTo = sllm1 Forwarding = internal GraphDumpFile = /tmp/...

We run tinc in a linux environment in which it sits there waiting for connections from the clients. All clients are configured to only have one ConnectTo which points to this server. We're seeing in the server log that as soon as a client's connection is activated, a whole bunch of "Flushing x bytes to that host would block" is logged and the whole vpn is bogged down and has

...rt xxx local xxx port xxx options c weight 984 D to C at xxx port xxx local xxx port xxx options c weight 182 Both A and D are configured with both Ed25519 and RSA keys. Node B and C are configured with only RSA key. tinc dump nodes on node A | grep D: D id xxxx at xxx port 655 cipher 0 digest 0 maclength 0 compression 0 options 400000c status 0078 nexthop B via A distance 2 pmtu 1518 (min 0 max 1518) tinc dump nodes on node D | grep A: A id xxx at xxx port 8964 cipher 0 digest 0 maclength 0 compression 0 options 400000d status 0078 nexthop B via C distance 2 pmtu 1518 (min 0 max 1518) And then,...

...Generic OpenVPN settings: cipher bf-cbc dev tap tun-mtu 1500 tun-mtu-extra 32 - OpenVPN-TCP settings: proto tcp-client - OpenVPN-UDP settings: proto udp - OpenVPN-UDP-LZO settings: proto udp comp-lzo - Generic TINC settings: Mode = switch PriorityInheritance = no Cipher = blowfish Compression = 0 MACLength = 4 - TINC-TCP settings: TCPonly = yes - TINC-UDP settings: TCPonly = no **** Test results: PING: packet loss: - plain network: 0% - OpenVPN-TCP: 0% - OpenVPN-UDP: 27,3% - OpenVPN-UDP-LZO: 25% - TINC-TCP: 19,3% - TINC-UDP: 52% OpenVPN-TCP works as well as the plain network connection during...

...0.19.106 port 655) is -2035506251 seqs in the future, dropped (3) > 2014-11-12 19:05:07 tinc.ccvpn[1879]: Packet from node5 (10.60.19.106 port 655) is 1665101896 seqs in the future, dropped (4) Hm, this should not happen of course. Can you tell me if you have Cipher, Compression, Digest, and/or MACLength set in any of your configuration files? -- Met vriendelijke groet / with kind regards, Guus Sliepen <guus at tinc-vpn.org> -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: Digital sig...

...ding = internal GraphDumpFile = /tmp/tinc-graph LocalDiscovery = no Mode = switch MACExpire = 30 Name = host1 PrivateKeyFile = /etc/tinc/my_tinc_network/rsa_key.priv ProcessPriority = high And for each host : Address = XXX.XXX.XXX.XXX Cipher = ECDHE-RSA-AES256-SHA384 Compression = 3 Digest = sha1 MACLength = 20 Each node is Intel Core i7/Xeon powered. I can see in the graph dump file that every node is connected to each other (no indirect connections). What could be the bottleneck of my network ? If you need some other configuration values, let me know. Thank you for your help.

Hi everyone , i have a few questions/problems with tinc , which i need to address ASAP , so i'll make it brief . i have 33 sites , connected with each other using wan , in each site , there are two linux firewalls + 3-4 more servers , i preferred to have a full mesh within my network , but unfortunately it was not possible , when i wanted every site to be connected to every other , as the

(Second try to send this. I wonder if the first one gotten eaten by a spam filter; I'll link to patches instead of attaching them.) Here are the tincctl patches I've been working on. They apply to http://www.tinc-vpn.org/svn/tinc/branches/1.1@1545. I intend to commit them once the crypto stuff's fixed. Since they're basically done, I'm emailing them now for review and in case