search for: metaprotocol

...pport 2.0 modularity 2.0 support for tun device >1.1 admin scripts: tinc-on/tinc-off/tincconfig/tinc-add/tinc-keygen 1.1 fix "make rpm" 1.0 use DESTDIR in po/Makefile 1.0 sequence numbers for packets & metaprotocol 1.0 delay before reconnect on inconsistency 1.0 configurable timeout 1.0 force IndirectData by server 1.1 support for tinc in ifup/ifdown 1.1 metaprotocol over SSL 2.0 fix license problem 1.0 -- Ivo Timmermans -------------- next part -------------- A non-te...

...relaying I realized that there is one issue I didn't account for, which is that the sending node only knows the PMTU to the first relay node. It doesn't know the PMTU of the entire relay path beyond the first hop, because the relay nodes don't provide their own PMTU information over the metaprotocol. Now, in the legacy protocol this is not really an issue, because TCP MSS clamping (which is really what matters in practice) is applied on a hop-per-hop basis, i.e. each hop clamps the MSS according to the PMTU information it has. Unfortunately, that doesn't work for SPTPS because relay nodes...

Dear developers, I am interested in understanding in more details how tinc's metaprotocol works. I apologize in advance if this was already described somewhere, I could not find it in the mailing list archive. So let's say machine A has a Address= ip.b.example and manages to contact server B via the meta connection. 1) Then B's tinc daemon will send to A edge and subnet inform...

...authentication and key regeneration. I will add this, so it will be able to run completely over UDP. One reason it is currently using TCP is that for UDP packet reception, tinc requires an established session so it can very the source of the packets, so the initial handshake has to be done via the metaprotocol. And then I got lazy. > This is not so much of an issue for initial SPTPS negotiation because > the handshake is restarted after a 10-second timeout, but there is no > such timeout for key regeneration, Indeed, such a timeout should be added. > The legacy protocol doesn't have th...

Hi, I'm currently trying to troubleshoot what appears to be a very subtle bug (most likely a race condition) in SPTPS that causes state to become corrupted during SPTPS key regeneration. The tinc version currently deployed to my production nodes is git 7ac5263, which is somewhat old (2014-09-06), but I think this is still relevant because the affected code paths haven't really changed

...d appreciate that. Currently there is no meaning behind log levels. Having a meaning one can easily set the proper log level. I would also add some more log messages, i.e. which configuration file tinc read after startup etc.. I already added some of them in the version I'm using. > The metaprotocol definition was removed because it was just after a > rewrite of the protocol, so the specification was obsolete, and it > needs a rewrite. Since I'm stuck with a meta protocol error right now it would help a lot to have the spec. > As for contributing to tinc, any help is appreciated...