search for: send_udppacket

I've got more changes on my to-do list, but I want to ensure I'm making my changes against the right branch. * I'm working with trunk now. I don't think its TCP tunneling is as secure as the UDP tunneling. It looks like its IVs and HMACs are added and verified in send_udppacket and receive_udppacket. The TCP connection encrypts but doesn't have these anti-modification features. (Right?) * The 1.0-gnutls branch lets gnutls take care of encryption for the TCP connection. I'm confident this is secure. * The 2.0 branch appears to be all reorganized but not fun...

Dear Guus, while improving the PMTU Discovery algorithm, I found the following behavior in the method "send_udppacket": 1) The code checks, whether the data size is smaller than the MTU, thus if it fits into a single UDP packet. If not, you send the packet via TCP. 2) The data is compressed, changing its size. (Usually, making it smaller, but that's not always true.) 3) The compresse...

...TRAFFIC) logger(LOG_INFO, "Sending MTU probe length %d to %s = (%s)", len, n->name, n->hostname); + ifdebug(TRAFFIC) logger(LOG_INFO, "Sending MTU probe length %d to %s = (%s) from interval [%d - %d]", len, n->name, n->hostname, n->minmtu, = n->maxmtu); =20 send_udppacket(n, &packet); } @@ -147,24 +150,26 @@ event_add(n->mtuevent); } =20 -void mtu_probe_h(node_t *n, vpn_packet_t *packet, length_t len) { - ifdebug(TRAFFIC) logger(LOG_INFO, "Got MTU probe length %d from %s = (%s)", packet->len, n->name, n->hostname); +void mtu_probe_h(no...

I have looked into this and it would definitely be possible, NETunnelProvider. It was not looking like a simple port though, a lot of glue required to get it to a state Apple would approve. This had been on my list of projects to attempt if I could find the time and energy to commit to it. If you do port it I would be very interested! Regards, Ryan Mounce On 26 July 2017 at 20:54, Bright Zhao

--- doc/tinc.conf.5.in | 3 +++ src/linux/device.c | 7 +++++++ 2 files changed, 10 insertions(+), 0 deletions(-) diff --git a/doc/tinc.conf.5.in b/doc/tinc.conf.5.in index 2bfd5fe..01f7f81 100644 --- a/doc/tinc.conf.5.in +++ b/doc/tinc.conf.5.in @@ -255,6 +255,9 @@ a lookup if your DNS server is not responding. This does not affect resolving hostnames to IP addresses from the host