tinc - Sep 2010 - Regarding poor performance on DIR-300

1. Compress should be in your hosts file, not your config file.
2. Since its a low-end CPU on the router, try using Compression=10 or 11 
(fast/best lzo); I use 9 (max zlib) on my ASUS OpenWRT routers & ClearOS 
boxes.
3. If you're using Backfire OpenWRT, you should be able to use the 
version of tinc compiled in trunk 
http://downloads.openwrt.org/snapshots/trunk/

On 9/20/2010 5:22 PM, tinc-request at tinc-vpn.org
wrote:
> Send tinc mailing list submissions to
> 	tinc at tinc-vpn.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
> 	http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc
> or, via email, send a message with subject or body 'help' to
> 	tinc-request at tinc-vpn.org
>
> You can reach the person managing the list at
> 	tinc-owner at tinc-vpn.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of tinc digest..."
>
>
> Today's Topics:
>
>     1. Tinc performance on a Dir-300 (Clemens John)
>     2. Re: Tinc performance on a Dir-300 (Julian B?ume)
>     3. Re: Tinc performance on a Dir-300 (Donald Pearson)
>     4. Re: Tinc performance on a Dir-300 (Guus Sliepen)
>     5. Re: Tinc performance on a Dir-300 (Rob Townley)
>     6. ProcessPriority=high breaks tinc from starting (Rob Townley)
>     7. Re: ProcessPriority=high breaks tinc from starting (Guus Sliepen)
>     8. Re: Tinc performance on a Dir-300 (Guus Sliepen)
>
>
> _______________________________________________
> tinc mailing list
> tinc at tinc-vpn.org
> http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc


The information in this email is confidential and may be legally privileged. It
is intended solely for the addressee. Access to this email by anyone else is
unauthorized. If you are not the intended recipient, any disclosure, copying,
distribution or any action taken or omitted to be taken in reliance on it, is
prohibited and may be unlawful.
 
The contents of this email do not necessarily represent the views or policies of
E-Z Rent-A-Car or employees.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://www.tinc-vpn.org/pipermail/tinc/attachments/20100920/5b54cbc0/attachment.htm>

On Mon, Sep 20, 2010 at 06:05:52PM -0400, Michael Adams wrote:
>  1. Compress should be in your hosts file, not your config file.
Ah, I missed that. And also the Digest and Cipher options should go into the
host config files, otherwise tinc will still encrypt and authenticate packets.

-- 
Met vriendelijke groet / with kind regards,
     Guus Sliepen <guus at tinc-vpn.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL:
<http://www.tinc-vpn.org/pipermail/tinc/attachments/20100921/aabceb4c/attachment.pgp>

Am Dienstag 21 September 2010, 00:05:52 schrieb Michael
Adams:
>   1. Compress should be in your hosts file, not your config file.
> 2. Since its a low-end CPU on the router, try using Compression=10 or 11
> (fast/best lzo); I use 9 (max zlib) on my ASUS OpenWRT routers &
ClearOS
> boxes.
> 3. If you're using Backfire OpenWRT, you should be able to use the
> version of tinc compiled in trunk
> http://downloads.openwrt.org/snapshots/trunk/
Ohh I?m sorry. I didn?t told you that this options are in the hostfiles too :(
But I will try to get better performance with compression=10/11

--------
root at 00240117B755:~# cat /etc/tinc/batvpn/hosts/00240117B755 
Address = 91.97.17.141
Port = 666
Cipher = none
Compression = 0
Digest = none
-----BEGIN RSA PUBLIC KEY-----
---------

We use Tinc 1.0.13.

root at 00240117B755:~# tincd --version
tinc version 1.0.13 (built Jul 23 2010 21:08:01, protocol 17)

Is the performance of the trunk version better or why sould I use it?

Greetings
Clemens
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL:
<http://www.tinc-vpn.org/pipermail/tinc/attachments/20100921/b375a86e/attachment.pgp>