search for: wireguard

Hello everybody, I saw Guus already had contact with Jason over email. What do you guys tinc of wireguards, are there advantages? Jason seems to have a good grip of what he is talking about. https://fosdem.org/2017/schedule/event/wireguard/attachments/slides/1675/export/events/attachments/wireguard/slides/1675/wireguard_slides.pdf https://fosdem.org/2017/schedule/event/wireguard/ Kind regards, Jel...

On 5 February 2017 at 05:36, Jelle de Jong <jelledejong at powercraft.nl> wrote: > What do you guys tinc of wireguards, are there advantages? Jason seems to > have a good grip of what he is talking about. Well if it's kernel only, that rules out anything not Linux, at lest at the moment. I know that may have a big share, but I find that limit. I understand it being in the kernel is attractive because it...

Hi Jared, I've seen the same while testing on digital ocean, I think it's the context switching that happens when sending a packet. I've done some testing with wireguard and that has a lot better performance but it's still changing quite a lot and only does a subset of what tinc does so probably not a stable solution. Martin On Wed, 17 May 2017 at 18:05 Jared Ledvina <jared at techsmix.net> wrote: > Hi, > > Terribly sorry about the duplicated...

...nsport class v2.0-870. > scsi host0: Virtio SCSI HBA > st: Version 20160209, fixed bufsize 32768, s/g segs 256 > Rounding down aligned max_sectors from 4294967295 to 4294967288 > db_root: cannot open: /etc/target > slram: not enough parameters. > ftl_cs: FTL header not found. > wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. > wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld <Jason at zx2c4.com>. All Rights Reserved. > eql: Equalizer2002: Simon Janes (simon at ncm.com) and David S. Miller (davem at redhat.com) > MACsec IEEE 802.1AE >...

Solution is really simple. Since this server is dual-homed ( 2 nic's ), i suggest setup advanced routing tables. The short version of howto setup. edit /etc/iproute2/rt_tables and Add : 10 OfficeLan 20 InternetWan Lookup the routing tables: ip route show table OfficeLan ip route show table InternetWan The default gateway's is to the internet. ( change ethX to you network interface

...e administrator secrets from a configuration file, I?d prefer a prompt during initial startup (probably at the expense that only a second start may detach) * What are the pros and cons of using a static IP for the container vs. port forwarding? * VPN in the container or on host? Actually I?d go for wireguard rather than OpenVPN.. * How to include more bind configuration e.g. for an additional DNS zone? Or require that on a different DNS server? * What about sysvol? * Ntpd - https://marc.info/?l=samba <https://marc.info/?l=samba&m=154695462230809&w=2> &m=154695462230809&w=2 ? * Ho...

...What are the pros and cons of using a static IP for the container > vs. port forwarding? Kerberos and AD are very sensitive to DNS issues; you're going to go insane without static IPs. AD also needs a *lot* of ports open to work. > * VPN in the container or on host? Actually I?d go for wireguard > rather than OpenVPN.. Whatever works better with your network setup, there's nothing preventing openvpn/wireguard from running on the same instance as samba. > * How to include more bind configuration e.g. for an additional DNS > zone? Or require that on a different DNS server? Gi...

Hello, I need to build a VPN, and I am not sure if tinc is the right tool to use. I am more familiar with OpenVPN. I have a few boxes at home, behind a router with a dynamic IP address. Those boxes host some services, like web sites, for instance. I have a server hosted online, with a few IPv4 and IPv6 addresses. All addresses being static, of course. I am planning to use tinc on Debian, to

...call chain done on every UDP packet). Very interesting that you're able to see around 90% of a Gig line on bare metal. Were you ever able to make any further progress on adjusting Tinc based on the investigation in https://github.com/gsliepen/tinc/issues/110 ? Martin - Yeah, I was looking into Wireguard too. However, we're pretty embeded with Tinc right now (as we've been running it for a few years now) so, I'd love to be able to adjust our existing setup not get such a perf hit. - Jared On Wed, May 17, 2017, at 10:26 AM, Niklas Hambüchen wrote: > I once filed this issue and did...

Hey all, So I do some development based on openssh and I'm trying to think of some new projects that might extend the functionality, feature set, user workflow, performance, etc of ssh. So open ended question: Do any of you have a wish list of things you'd like to see in ssh? Mostly I'm just curious to see what the larger community is thinking of rather than being driven

Hello everybody, First a big thanks for tinc-vpn I am still using it next to wireguard and openvpn. I am having a setup where the tinc debian appliance is at 100% cpu load doing about 7.5MB/s. Compression = 9 PMTU = 1400 PMTUDiscovery = yes Cipher = aes-128-cbc How can I pick a cipher that is the fasted for my CPU and don't create a CPU bottleneck at 100%. Kind regards, J...

...--- drivers/md/dm-integrity.c | 6 ++-- drivers/misc/ibmvmc.c | 6 ++-- .../hisilicon/hns3/hns3pf/hclge_mbx.c | 2 +- .../net/ethernet/intel/ixgbe/ixgbe_ipsec.c | 6 ++-- drivers/net/ppp/ppp_mppe.c | 6 ++-- drivers/net/wireguard/noise.c | 4 +-- drivers/net/wireguard/peer.c | 2 +- drivers/net/wireless/intel/iwlwifi/pcie/rx.c | 2 +- .../net/wireless/intel/iwlwifi/pcie/tx-gen2.c | 6 ++-- drivers/net/wireless/intel/iwlwifi/pcie/tx.c | 6 ++-- drivers/net/wireless/intersil/orinoco/wex...

...aes-128-cbc, I can get 90% of gigabit line speed over tinc. On 17/05/17 19:17, Martin Eskdale Moen wrote: > Hi Jared, > I've seen the same while testing on digital ocean, I think it's the > context switching that happens when sending a packet. > I've done some testing with wireguard and that has a lot better > performance but it's still changing quite a lot and only does a subset > of what tinc does so probably not a stable solution.

Hi Andrê, So by nodes I assume you mean the "boxes". I would suggest each "box" gets it's own tinc node(with a static ip) and then on the server it should be a matter of pointing at the ip address of the appropriate box tinc ip address. I've done this myself with WireGuard and it works great. On Mon, Nov 25, 2019 at 7:14 AM André Rodier <andre at rodier.me> wrote: > Hello, > > I need to build a VPN, and I am not sure if tinc is the right tool to > use. I am more familiar with OpenVPN. > > I have a few boxes at home, behind a router with a dy...

...--- drivers/md/dm-integrity.c | 6 ++-- drivers/misc/ibmvmc.c | 6 ++-- .../hisilicon/hns3/hns3pf/hclge_mbx.c | 2 +- .../net/ethernet/intel/ixgbe/ixgbe_ipsec.c | 6 ++-- drivers/net/ppp/ppp_mppe.c | 6 ++-- drivers/net/wireguard/noise.c | 4 +-- drivers/net/wireguard/peer.c | 2 +- drivers/net/wireless/intel/iwlwifi/pcie/rx.c | 2 +- .../net/wireless/intel/iwlwifi/pcie/tx-gen2.c | 6 ++-- drivers/net/wireless/intel/iwlwifi/pcie/tx.c | 6 ++-- drivers/net/wireless/intersil/orinoco/wex...

...--- drivers/md/dm-integrity.c | 6 ++-- drivers/misc/ibmvmc.c | 6 ++-- .../hisilicon/hns3/hns3pf/hclge_mbx.c | 2 +- .../net/ethernet/intel/ixgbe/ixgbe_ipsec.c | 6 ++-- drivers/net/ppp/ppp_mppe.c | 6 ++-- drivers/net/wireguard/noise.c | 4 +-- drivers/net/wireguard/peer.c | 2 +- drivers/net/wireless/intel/iwlwifi/pcie/rx.c | 2 +- .../net/wireless/intel/iwlwifi/pcie/tx-gen2.c | 6 ++-- drivers/net/wireless/intel/iwlwifi/pcie/tx.c | 6 ++-- drivers/net/wireless/intersil/orinoco/wex...

...--- drivers/md/dm-integrity.c | 6 ++-- drivers/misc/ibmvmc.c | 6 ++-- .../hisilicon/hns3/hns3pf/hclge_mbx.c | 2 +- .../net/ethernet/intel/ixgbe/ixgbe_ipsec.c | 6 ++-- drivers/net/ppp/ppp_mppe.c | 6 ++-- drivers/net/wireguard/noise.c | 4 +-- drivers/net/wireguard/peer.c | 2 +- drivers/net/wireless/intel/iwlwifi/pcie/rx.c | 2 +- .../net/wireless/intel/iwlwifi/pcie/tx-gen2.c | 6 ++-- drivers/net/wireless/intel/iwlwifi/pcie/tx.c | 6 ++-- drivers/net/wireless/intersil/orinoco/wex...

On Sun, 2020-06-21 at 16:47 -0400, mailist wrote: > On 2020-06-21 15:33, Chuck Campbell wrote: > > I'm running Centos 7.8.2003, with firewalld. > > > > I was getting huge numbers of ssh attempts per day from a few specific > > ip blocks. > > If you can control the ssh clients, switch your port number to a > non-standard > port. Pick one in

...--- drivers/md/dm-integrity.c | 6 ++-- drivers/misc/ibmvmc.c | 6 ++-- .../hisilicon/hns3/hns3pf/hclge_mbx.c | 2 +- .../net/ethernet/intel/ixgbe/ixgbe_ipsec.c | 6 ++-- drivers/net/ppp/ppp_mppe.c | 6 ++-- drivers/net/wireguard/noise.c | 4 +-- drivers/net/wireguard/peer.c | 2 +- drivers/net/wireless/intel/iwlwifi/pcie/rx.c | 2 +- .../net/wireless/intel/iwlwifi/pcie/tx-gen2.c | 6 ++-- drivers/net/wireless/intel/iwlwifi/pcie/tx.c | 6 ++-- drivers/net/wireless/intersil/orinoco/wex...

...--- drivers/md/dm-integrity.c | 6 ++-- drivers/misc/ibmvmc.c | 6 ++-- .../hisilicon/hns3/hns3pf/hclge_mbx.c | 2 +- .../net/ethernet/intel/ixgbe/ixgbe_ipsec.c | 6 ++-- drivers/net/ppp/ppp_mppe.c | 6 ++-- drivers/net/wireguard/noise.c | 4 +-- drivers/net/wireguard/peer.c | 2 +- drivers/net/wireless/intel/iwlwifi/pcie/rx.c | 2 +- .../net/wireless/intel/iwlwifi/pcie/tx-gen2.c | 6 ++-- drivers/net/wireless/intel/iwlwifi/pcie/tx.c | 6 ++-- drivers/net/wireless/intersil/orinoco/wex...