So as best practice running tinc I should include it ? Regards Yazeed Fataar <yazeedfataar at hotmail.com> On Sun, Feb 14, 2016 at 1:08 PM, Guus Sliepen <guus at tinc-vpn.org> wrote:> On Sun, Feb 14, 2016 at 10:53:19AM +0300, Yazeed Fataar wrote: > > > Going through the options tinc has . Can someone explain exactly what the > > purpose is for -L option for the runtime command. > > > > So does this mean that tinc will run in RAM and will not be saved in swap > > (default) ? > > Yes, that's exactly what it does. > > -- > Met vriendelijke groet / with kind regards, > Guus Sliepen <guus at tinc-vpn.org> > > _______________________________________________ > tinc mailing list > tinc at tinc-vpn.org > http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc > >-------------- next part -------------- An HTML attachment was scrubbed... URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20160214/46a56923/attachment.html>
On Sun, Feb 14, 2016 at 01:12:11PM +0300, Yazeed Fataar wrote:> So as best practice running tinc I should include it ?I personally see little value in it. If you want to enable it, be sure to understand the implications of locking a process in RAM; you should have more RAM than the tincd process memory will ever use, and you should check that there are no resource limits that prevent tinc from allocating locked memory (check the mlock manpage, the limits.conf manpage and the bash manpage for the ulimit command). And of course, if you don't have any swap space enabled, you don't need the -L option. -- Met vriendelijke groet / with kind regards, Guus Sliepen <guus at tinc-vpn.org> -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: Digital signature URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20160214/d7c817f5/attachment.sig>
Thanks Guus , its clear for me now. Regards Yazeed Fataar <yazeedfataar at hotmail.com> On Sun, Feb 14, 2016 at 1:25 PM, Guus Sliepen <guus at tinc-vpn.org> wrote:> On Sun, Feb 14, 2016 at 01:12:11PM +0300, Yazeed Fataar wrote: > > > So as best practice running tinc I should include it ? > > I personally see little value in it. If you want to enable it, be sure > to understand the implications of locking a process in RAM; you should > have more RAM than the tincd process memory will ever use, and you > should check that there are no resource limits that prevent tinc from > allocating locked memory (check the mlock manpage, the limits.conf > manpage and the bash manpage for the ulimit command). > > And of course, if you don't have any swap space enabled, you don't need > the -L option. > > -- > Met vriendelijke groet / with kind regards, > Guus Sliepen <guus at tinc-vpn.org> > > _______________________________________________ > tinc mailing list > tinc at tinc-vpn.org > http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc > >-------------- next part -------------- An HTML attachment was scrubbed... URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20160214/7cd40450/attachment.html>