similar to: Letting linux be the router, allowing dynamic routes, suggestion

No, this would in fact operate as a routing mode instead of bridging. TAP would be used as a means to push routing to where it belongs, the linux/bsd/... kernel. Consider the challenge of having completely dynamic routing between vpn peers. In one minute I might have 10000 routes towards one specific peer, and hour latter I might have NONE. And I need to diferentiate each peer at the kernel

I see what you want me to do. But it does incur an extra MAC layer header to each VPN packet, more fragmentation. And broadcasts leak to all peers. It sure saves you from doing any improvements, but there are side effects that are undesirable to many customers. This is specially a problem if I want two VPN connections between two sites using redundant connections, we get an instant L2 loop. With

On Tue, May 12, 2015 at 04:27:10PM -0300, Marcelo Pacheco wrote: > Consider the challenge of having completely dynamic routing between vpn > peers. In one minute I might have 10000 routes towards one specific peer, > and hour latter I might have NONE. And I need to diferentiate each peer at > the kernel routing layer. > And no, it can't be a pure bridge, it has to be L3

On 12 May 2015 at 05:13, Marcelo Pacheco <marcelo at m2j.com.br> wrote: > The solution to all of those challenges is to have the VPN software not be > the router, but rather just dump incoming packets to the kernel and route > outgoing packets with the kernel in charge. I think you can already do this in tinc by using the Forwarding = kernel option:

On Tue, May 12, 2015 at 01:13:58AM -0300, Marcelo Pacheco wrote: [...] > Instead of creating a heap of tun devices, there's a more logical solution. > Create a TAP device, and emulate ARP on the VPN software. > The many peers would form a virtual ethernet device, where each tunnel has > a separate virtual MAC address. You mean like using tinc in switch mode?

On Tue, May 12, 2015 at 05:21:49PM -0300, Marcelo Pacheco wrote: > I see what you want me to do. But it does incur an extra MAC layer header > to each VPN packet, This is a quite small overhead. > more fragmentation. This doesn't imply more fragmentation. Tinc already does path MTU discovery, calculating the optimum packet size for tunneled packets, and uses various techniques to

Has anyone been able to sucessfully use 2-4 X101P clones with Asterisk on a single system ? I'm using one Encore MD 3200 modem sucessfully, alongside a TDM400P (3 FXS, 1 FXO) and would like to be able to use up to 4 X101P on a single system. In most cases I'll have 2 or 3 instead. I understand all the issues with interrupt sharing and PC motherboard quality. Just need to know if any

i have a box with 2 real interfaces and one more virtual eth0 - to the internet (193.... eth1 - to the local net (192.168..) tun0 - to another ISP the routing is: all the free/local classes i send them directly on eth0, the rest of the internet i send throw tun0 the admin from tun0 wants me to snat all the packets with my end of the ip-tun0-interface and i snat all the trafic that go to

I've been having random problems when I make long distance calls using either VoicePulse or Nufone. Sometimes the calls go through clear, and other calls (or even just part of a call) the person on the other end just hears garbled voice, or really broken up voice. Sometimes it lasts for only a few seconds, but other times it goes on for a few minutes until I give up on the call. At

Would anybody have any numbers on how large a box would be required to convert 100 or 200 SIP calls to IAX2, without transcoding, echo cancel, .. Or a setup with individual IAX2 calls coming on one side, and trunking being used to 1 or more remote boxes on the other side, to improve bandwidth usage ? It doesn't matter if you don't have a test done for exactly 100 or 200 calls, I'm

In a replicated cluster, the client writes to all replicas at the same time. This is likely while you are only getting half the speed for writes as its going to two servers and therefore maxing your gigabit network. That is, unless I am misunderstanding how you are measuring the 60MB/s write speed. I don't have any advice on the other bits...sorry. Todd -----Original Message----- From:

Hi, After reading the tutorial at http://wiki.centos.org/HowTos/Install_On_Partitionable_RAID1 I have the following question: What should I put instead of splashimage=(hd0,0)/grub/splash.xpm.gz and root (hd0,0) on /etc/grub.conf? Should I leave those lines untouched? If so, how would grub know where to boot from if /dev/sda fails? Or I would need to swap the drives in order to boot

Hi I use to leave my PC turned on for a long time, but ultimately I've found it blocked. The mouse just don't work and the keyboard leds are blinking and there is no HD activity. I'd like to know which log should I check, to find the problem or what should I do. I u need more details, please just make know how to give'em. -- ________________________ Dago Pacheco Encargado de

An embedded and charset-unspecified text was scrubbed... Name: n?o dispon?vel URL: <https://stat.ethz.ch/pipermail/r-help/attachments/20101110/9e098a24/attachment.pl>

Hello Samba experts, Please read all email because i'm desperate!!!!! I have problem on joining to LAN-s using Samba. Finally i got a solution to "see" booth workgroups on "Entire Network", but i'm having problem with stations located in LAN2. From any station located in LAN1, I can see LAN2 workgroup and the browse list with stations located in LAN2, but when

Hi there, I have a x100p card in an asterisk box. Does anyone know if it's possible to do a hook flash / recall on an active zap channel? On what I'm trying to do... >From an ordinary analogue pstn telephone I can call someone, press recall, call someone else, press recall 3 & presto we're on a three way chat, with me only using one line - using the telephone company's

Hi.. I'm using centos 4 over a x64 PC and i want to use flash.... what do i must to do? Thanks -- ________________________ Dago Pacheco Encargado de Inform?tica Maetranza Makimet Ltda.

Hi..... I just bought a External HD with USB/FireWire interfaces. I was trying to connect it by firewire and nothing happened, but it's connected by USB, there is no problem. This is the "fdisk - l" output when i connect it by USB Disco /dev/sdc: 160.0 GB, 160041885696 bytes 255 cabezas, 63 sectores/pista, 19457 cilindros Unidades = cilindros de 16065 * 512 = 8225280 bytes

Hello, I want to link several * boxes together. Some of them are dedicated as "user" servers (SIP and IAX clients connect to them) and some are used as PRI servers (where the PRIs are hooked onto). I think TDMoE is the only channel type where you can group different Interfaces into a single group. E.g. for using Dial(ZAP/g1/12345), I think you cannot group different IAX accounts

I was looking for performance comparisons. I just found this link (http://blog.inoi.fi/2010/10/migrating-from-xapian-to-elasticsearch.html <http://blog.inoi.fi/2010/10/migrating-from-xapian-to-elasticsearch.html>). This was write on 2010. Could someone comment it ? Is There some truth in what he said? I hate java, and didn?t want to back to java search engines...