search for: priorityinherit

Hello! I'd like to use PriorityInheritance option, despite it is still experimental. (Why it could be experimental, when it looks quite simple feature, no?) But this option doesn't change the TOS field of outgoing UDP packet. I just do tcpdump on outgoing interface from vty1: $ sudo tcpdump -vni eth0 udp dst port 655 And from vt...

On Wed, Dec 03, 2014 at 12:07:59AM -0800, Dave Taht wrote: [...] > https://github.com/dtaht/tinc > > I successfully converted tinc to use sendmsg and recvmsg, acquire (at > least on linux) the TTL/Hoplimit and IP_TOS/IPv6_TCLASS packet fields, Windows does not have sendmsg()/recvmsg(), but the BSDs support it. > as well as SO_TIMESTAMPNS, and use a higher resolution internal

With pleasure we announce the release of tinc versions 1.0.32 and 1.1pre15. Here is a summary of the changes in tinc 1.0.32: * Fix segmentation fault when using Cipher = none. * Fix Proxy = exec. * Support PriorityInheritance for IPv6 packets. * Fixes for Solaris tun/tap support. * Bind outgoing TCP sockets when ListenAddress is used. Thanks to Vittorio Gambaletta for his contribution to this version of tinc. Here is a summary of the changes in tinc 1.1pre15: * Detect when the machine is resuming from suspension...

With pleasure we announce the release of tinc versions 1.0.32 and 1.1pre15. Here is a summary of the changes in tinc 1.0.32: * Fix segmentation fault when using Cipher = none. * Fix Proxy = exec. * Support PriorityInheritance for IPv6 packets. * Fixes for Solaris tun/tap support. * Bind outgoing TCP sockets when ListenAddress is used. Thanks to Vittorio Gambaletta for his contribution to this version of tinc. Here is a summary of the changes in tinc 1.1pre15: * Detect when the machine is resuming from suspension...

On Wed, Dec 3, 2014 at 6:17 AM, David P. Reed <dpreed at reed.com> wrote: > Tor needs this stuff very badly. Tor has many, many problematic behaviors relevant to congestion control in general. Let me paste a bit of private discussion I'd had on it in a second, but a very good paper that touched upon it all was: DefenestraTor: Throwing out Windows in Tor

...sure we announce the release of tinc version 1.0.25. Here is a summary of the changes: * Documentation updates. * Support linking against -lresolv on Mac OS X. * Fix scripts on Windows when using the ScriptsInterpreter option. * Allow a minimum reconnect timeout to be specified. * Support PriorityInheritance on IPv6 sockets. Thanks to David Pflug, Baptiste Jonglez, Alexis Hildebrandt, Borg, Jochen Voss, Tomislav ?ohar and VittGam for their contributions to this version of tinc. Note that this will be one of the last releases of the 1.0 branch of tinc. Most of the development is now happening on t...

...sure we announce the release of tinc version 1.0.25. Here is a summary of the changes: * Documentation updates. * Support linking against -lresolv on Mac OS X. * Fix scripts on Windows when using the ScriptsInterpreter option. * Allow a minimum reconnect timeout to be specified. * Support PriorityInheritance on IPv6 sockets. Thanks to David Pflug, Baptiste Jonglez, Alexis Hildebrandt, Borg, Jochen Voss, Tomislav ?ohar and VittGam for their contributions to this version of tinc. Note that this will be one of the last releases of the 1.0 branch of tinc. Most of the development is now happening on t...

...PM Guus Sliepen <guus at tinc-vpn.org> wrote: > With pleasure we announce the release of tinc versions 1.0.32 and > 1.1pre15. > > Here is a summary of the changes in tinc 1.0.32: > > * Fix segmentation fault when using Cipher = none. > * Fix Proxy = exec. > * Support PriorityInheritance for IPv6 packets. > * Fixes for Solaris tun/tap support. > * Bind outgoing TCP sockets when ListenAddress is used. > > Thanks to Vittorio Gambaletta for his contribution to this version of > tinc. > > Here is a summary of the changes in tinc 1.1pre15: > > * Detect whe...

...PM Guus Sliepen <guus at tinc-vpn.org> wrote: > With pleasure we announce the release of tinc versions 1.0.32 and > 1.1pre15. > > Here is a summary of the changes in tinc 1.0.32: > > * Fix segmentation fault when using Cipher = none. > * Fix Proxy = exec. > * Support PriorityInheritance for IPv6 packets. > * Fixes for Solaris tun/tap support. > * Bind outgoing TCP sockets when ListenAddress is used. > > Thanks to Vittorio Gambaletta for his contribution to this version of > tinc. > > Here is a summary of the changes in tinc 1.1pre15: > > * Detect whe...

...nvironments. The first environment is running for about a month without any problems. The second environment causes some trouble. It looks like a memory leak on the client side. tincd.conf: ConnectTo=ServerHost Device=/dev/net/tun Mode=switch Name=ClientHost PMTUDiscovery = yes DeviceType=tap PriorityInheritance = yes Compression=10 hosts/ServerHost Address=XXXX PMTUDiscovery = yes PriorityInheritance = yes -----BEGIN RSA PUBLIC KEY----- XXX -----END RSA PUBLIC KEY----- Linux Kernel 3.10.40-0-grsec #1-Alpine SMP Wed May 14 07:59:37 UTC 2014 x86_64 Linux apk info tinc tinc-1.0.23-r1 description:...

...environments. The first environment is running for about a month without any problems. The second environment causes some trouble. It looks like a memory leak on the client side. tincd.conf: ConnectTo=ServerHost Device=/dev/net/tun Mode=switch Name=ClientHost PMTUDiscovery = yes DeviceType=tap PriorityInheritance = yes Compression=10 hosts/ServerHost Address=XXXX PMTUDiscovery = yes PriorityInheritance = yes -----BEGIN RSA PUBLIC KEY----- XXX -----END RSA PUBLIC KEY----- Linux Kernel 3.10.40-0-grsec #1-Alpine SMP Wed May 14 07:59:37 UTC 2014 x86_64 Linux apk info tinc tinc-1.0.23-r1 description:...

...nd clarifications in the documentation. * Allow tinc to be cross-compiled with Android's NDK. * The discovered PMTU is now also applied to VLAN tagged traffic. * The LocalDiscovery option now makes use of all addresses tinc is bound to. * Fixed support for tunemu on iOS devices. * The PriorityInheritance option now also works with switch mode. * Fixed tinc crashing when using a SOCKS5 proxy. Thanks to Mesar Hameed, Vilbrekin and Martin Sch?rrer for their contributions to this version of tinc. This version of tinc is compatible with 1.0pre8, 1.0 and later, but not with earlier version of tin...

...nd clarifications in the documentation. * Allow tinc to be cross-compiled with Android's NDK. * The discovered PMTU is now also applied to VLAN tagged traffic. * The LocalDiscovery option now makes use of all addresses tinc is bound to. * Fixed support for tunemu on iOS devices. * The PriorityInheritance option now also works with switch mode. * Fixed tinc crashing when using a SOCKS5 proxy. Thanks to Mesar Hameed, Vilbrekin and Martin Sch?rrer for their contributions to this version of tinc. This version of tinc is compatible with 1.0pre8, 1.0 and later, but not with earlier version of tin...

...environments. The first environment is running for about a month without any problems. The second environment causes some trouble. It looks like a memory leak on the client side. tincd.conf: ConnectTo=ServerHost Device=/dev/net/tun Mode=switch Name=ClientHost PMTUDiscovery = yes DeviceType=tap PriorityInheritance = yes Compression=10 hosts/ServerHost Address=XXXX PMTUDiscovery = yes PriorityInheritance = yes -----BEGIN RSA PUBLIC KEY----- XXX -----END RSA PUBLIC KEY----- Linux Kernel 3.10.40-0-grsec #1-Alpine SMP Wed May 14 07:59:37 UTC 2014 x86_64 Linux apk info tinc tinc-1.0.23-r1 description:...

On Wed, Dec 3, 2014 at 4:02 AM, Guus Sliepen <guus at tinc-vpn.org> wrote: > On Wed, Dec 03, 2014 at 12:07:59AM -0800, Dave Taht wrote: > > [...] >> https://github.com/dtaht/tinc >> >> I successfully converted tinc to use sendmsg and recvmsg, acquire (at >> least on linux) the TTL/Hoplimit and IP_TOS/IPv6_TCLASS packet fields, > > Windows does not have

I have long included tinc in the cerowrt project as a lighter weight, meshy alternative to conventional vpns. I sat down a few days ago to think about how to make vpn connections work better through fq_codel, and decided I should maybe hack on a vpn to do the job. So I picked up tinc's source code for the first time, got it working on IPv6 as a switch in a matter of minutes between two

...PN 1.5 beta12 - OpenBSD FTP server VPN client settings: - Generic OpenVPN settings: cipher bf-cbc dev tap tun-mtu 1500 tun-mtu-extra 32 - OpenVPN-TCP settings: proto tcp-client - OpenVPN-UDP settings: proto udp - OpenVPN-UDP-LZO settings: proto udp comp-lzo - Generic TINC settings: Mode = switch PriorityInheritance = no Cipher = blowfish Compression = 0 MACLength = 4 - TINC-TCP settings: TCPonly = yes - TINC-UDP settings: TCPonly = no **** Test results: PING: packet loss: - plain network: 0% - OpenVPN-TCP: 0% - OpenVPN-UDP: 27,3% - OpenVPN-UDP-LZO: 25% - TINC-TCP: 19,3% - TINC-UDP: 52% OpenVPN-TCP...

...prevent any mistakes here are the configuration files! vogeliusweg name = vogeliusweg Interface = Tinc-VPN ConnectTo = parkweg Mode = switch ------------------------------------------------ laptop name = Laptop ConnectTo = vogeliusweg ConnectTo = parkweg Interface = Tinc-VPN Mode = switch #PriorityInheritance = no ------------------------------------------------ Parkweg name = parkweg AddressFamily = ipv4 ConnectTo = vogeliusweg #ConnectTo = laptop Interface = Tinc-VPN Mode = switch ----------------------------------------------- you need hostfiles too? -------------- next part -------------...

Hello Tincers, Is it possible to replicate the TOS of a package (or even the mark) from a packet before entering the TAP to match the encrypted packet that goes to the Internet? I have a 20+ nodes in a tinc network and I need to privilege ssh packets that goes inside the VPN above anything. I can't just give priority to all tinc packets as there are a lot of bulk traffic going on that does

...indows. * Fixed support for the tunemu device on iOS, the UML and VDE devices. * Small improvements to the documentation and error messages. * Fixed broadcast packets not reaching the whole VPN. * Tincctl now connects via a UNIX socket to the tincd on platforms that support this. * The PriorityInheritance option now also works in switch mode. This is the fifth pre-release of the 1.1 branch of tinc. Tinc 1.1 is protocol compatible with 1.0.x, but will have large architectural changes and new features. Tinc 1.0.x will still be maintained. Please try out this new version, and let us know what you...