similar to: tinc vpn: adding dscp passthrough (priorityinherit), ecn, and fq_codel support

On Wed, Dec 3, 2014 at 4:02 AM, Guus Sliepen <guus at tinc-vpn.org> wrote: > On Wed, Dec 03, 2014 at 12:07:59AM -0800, Dave Taht wrote: > > [...] >> https://github.com/dtaht/tinc >> >> I successfully converted tinc to use sendmsg and recvmsg, acquire (at >> least on linux) the TTL/Hoplimit and IP_TOS/IPv6_TCLASS packet fields, > > Windows does not have

On Wed, Dec 3, 2014 at 6:17 AM, David P. Reed <dpreed at reed.com> wrote: > Tor needs this stuff very badly. Tor has many, many problematic behaviors relevant to congestion control in general. Let me paste a bit of private discussion I'd had on it in a second, but a very good paper that touched upon it all was: DefenestraTor: Throwing out Windows in Tor

On Wed, Dec 03, 2014 at 12:07:59AM -0800, Dave Taht wrote: [...] > https://github.com/dtaht/tinc > > I successfully converted tinc to use sendmsg and recvmsg, acquire (at > least on linux) the TTL/Hoplimit and IP_TOS/IPv6_TCLASS packet fields, Windows does not have sendmsg()/recvmsg(), but the BSDs support it. > as well as SO_TIMESTAMPNS, and use a higher resolution internal

I'm deploying a CentOS 7 box as a gateway and I'm trying to figure out how to set up traffic shaping. Historically I've used the Wondershaper script but apparently it's not deprecated in favor of superior queue management. I haven't yet found a packaged solution and I'm wondering what others do to configure this kind of thing. Apparently the new modules are available

On Mon, Jan 5, 2015 at 7:10 AM, Lance Fredrickson <lancethepants at gmail.com> wrote: > Just wanted to pop in and say I think 1.1pre11 is a really good release. > I have a couple nodes behind a work firewall (sonicwall) over which I have > no control. Previously nodes always fell back to TCP, and the connection > was unusable. Now it always connects over UDP and works like it

Hello, Dave Taht, on Wed 02 Dec 2015 13:21:56 +0100, wrote: > I'd made a start on the send direction here: > https://github.com/dtaht/tinc/commits/master > > Perhaps that will help. Well, converting a sendto call into a sendmsg call is not really "hard" :) What will be really hard is getting multiple packet receive/send over the tap/tun device, because support for it

With pleasure we announce the release of tinc version 1.1pre13. Here is a summary of the changes: * Fix BSD tun device support that was broken in 1.1pre12. * Speed up AutoConnect when there are many host config files present without an Address. Please note that although tinc 1.1pre13 is backwards compatible with tinc 1.0.x, it is NOT compatible with tinc 1.1pre1 through 1.1pre10. -- Met

With pleasure we announce the release of tinc version 1.1pre13. Here is a summary of the changes: * Fix BSD tun device support that was broken in 1.1pre12. * Speed up AutoConnect when there are many host config files present without an Address. Please note that although tinc 1.1pre13 is backwards compatible with tinc 1.0.x, it is NOT compatible with tinc 1.1pre1 through 1.1pre10. -- Met

Dave Taht, on Wed 02 Dec 2015 14:13:27 +0100, wrote: > More recently Tom Herbert was working on udp encapsulation methods in > the kernel "foo over udp" > > https://www.netdev01.org/docs/herbert-UDP-Encapsulation-Linux.pdf > > https://lwn.net/Articles/614348/ > > which preserve things important at high rates like GRO/GSO. Yes, FOU will probably get the highest

With pleasure we announce the release of tinc version 1.1pre11. Here is a summary of the changes: * Added a "network" command to list or switch networks. * Switched to Ed25519 keys and the ChaCha-Poly1305 cipher for the new protocol. * AutoConnect is now a boolean option, when enabled tinc always tries to keep at least three meta-connections open. * The new protocol now

With pleasure we announce the release of tinc version 1.1pre11. Here is a summary of the changes: * Added a "network" command to list or switch networks. * Switched to Ed25519 keys and the ChaCha-Poly1305 cipher for the new protocol. * AutoConnect is now a boolean option, when enabled tinc always tries to keep at least three meta-connections open. * The new protocol now

Dave T?ht Let's go make home routers and wifi faster! With better software! https://www.gofundme.com/savewifi On Wed, Dec 2, 2015 at 2:26 PM, Samuel Thibault <samuel.thibault at ens-lyon.org> wrote: > Dave Taht, on Wed 02 Dec 2015 14:13:27 +0100, wrote: >> More recently Tom Herbert was working on udp encapsulation methods in >> the kernel "foo over udp"

I came across this on the Fedora devel list. I added /etc/sysctl.d/51-bufferbloat.conf containing the suggested line and it installs the new codel qdisc as desired. There's probably more knobs that might be useful to tweak but this makes a good start. More reading on the bufferbloat site suggests that the later "cake" module will be even better, but it requires a newer kernel

Hello, Linux has a recvmmsg() system call which allows to achieve several recvfrom() at a time. The patch below makes tinc use it (patch against 1.1-pre11). Basically the patch turns the handle_incoming_vpn_data variables into arrays (of size 1 when recvmmsg is not available, and thus compiled the same as before), and makes the code index into the arrays. You may want to use interdiff -w

On 15/12/17 07:05, Kenneth Porter wrote: > I came across this on the Fedora devel list. I added > /etc/sysctl.d/51-bufferbloat.conf containing the suggested line and it > installs the new codel qdisc as desired. There's probably more knobs > that might be useful to tweak but this makes a good start. More reading > on the bufferbloat site suggests that the later "cake"

Dave Taht, on Wed 02 Dec 2015 14:41:35 +0100, wrote: > I guess my meta point is driven by my headaches. Getting per packet > processing to scale up past 100Mbit is hard without offloads even on > embedded hardware considered "high end". In my tests I was getting 800Mbps with common laptop Gb ethernet devices. > >> > At least for now we could commit the recvmmsg

On Wed, Dec 2, 2015 at 1:36 PM, Samuel Thibault <samuel.thibault at ens-lyon.org> wrote: > Hello, > > Dave Taht, on Wed 02 Dec 2015 13:21:56 +0100, wrote: >> I'd made a start on the send direction here: >> https://github.com/dtaht/tinc/commits/master >> >> Perhaps that will help. > > Well, converting a sendto call into a sendmsg call is not really

https://bugzilla.mindrot.org/show_bug.cgi?id=3161 Bug ID: 3161 Summary: ssh -J <public IPv6> <LL IPv6%scopeID> doesn't work as expected Product: Portable OpenSSH Version: 8.2p1 Hardware: 68k OS: Mac OS X Status: NEW Severity: enhancement Priority: P5

Hello Lars, Thanks for your feedback. Unfortunately I made an error in writing the network I expected to connect to. I meant 10.3.0.0/24 The one I wrote in fact was one network of the already established VPN. I have included full details of my relevant files below. Background: I am trying to set up a second VPN between two servers: gtdb and db2. Both servers are already part of separate

Em 10-09-2018 10:43, Rowland Penny via samba escreveu: > On Mon, 10 Sep 2018 09:56:46 -0400 > spiderslack via samba <samba at lists.samba.org> wrote: > >> Hi, all >> >> >> I trying setting domain samba with bind9-DLZ. I followed the tutorial >> https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller, >> but not