tinc - Mar 2017 - Timeout during authentication - connection timeout not configurable?

Hi there,

We use tincd over VSAT connections, and if the contract has been reduced to a
bare minimum -and- the ship is moving, latency reaches 2 - 5 seconds (yes,
seconds). Generally this is not a problem if you are patient (and most smart
phones are), but tincd is slightly too fast in deciding that it is not going to
work. We also use the tinc connection to check whether any traffic is possible.

Is there an option somewhere to set the connection timeout? I've already set
the ping timeout to 15s and I would like to set the connect timeout to 15s as
well.

From the ssh documentation:

    ConnectTimeout
            Specifies the timeout (in seconds) used when connecting to the SSH
server, instead of using the default system TCP timeout.  This value is used
only when the target is down or really unreachable, not when it refuses the
connection.

So, if you need pointers as to how to implement this cross-platform, there you
go :-)

Nick Hibma
nick at van-laarhoven.org

-- Open Source: We stand on the shoulders of giants.



-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://www.tinc-vpn.org/pipermail/tinc/attachments/20170329/7f9bf733/attachment.html>

On Wed, Mar 29, 2017 at 10:14:30AM +0200, Nick Hibma wrote:
> We use tincd over VSAT connections, and if the contract has been reduced to
a bare minimum -and- the ship is moving, latency reaches 2 - 5 seconds (yes,
seconds). Generally this is not a problem if you are patient (and most smart
phones are), but tincd is slightly too fast in deciding that it is not going to
work. We also use the tinc connection to check whether any traffic is possible.
> 
> Is there an option somewhere to set the connection timeout? I've
already set the ping timeout to 15s and I would like to set the connect timeout
to 15s as well.
The connection timeout is always the same as PingTimeout in tinc.

-- 
Met vriendelijke groet / with kind regards,
     Guus Sliepen <guus at tinc-vpn.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL:
<http://www.tinc-vpn.org/pipermail/tinc/attachments/20170329/06ee3f31/attachment.sig>

>> We use tincd over VSAT connections, and if the contract has been
reduced to a bare minimum -and- the ship is moving, latency reaches 2 - 5
seconds (yes, seconds). Generally this is not a problem if you are patient (and
most smart phones are), but tincd is slightly too fast in deciding that it is
not going to work. We also use the tinc connection to check whether any traffic
is possible.
>> 
>> Is there an option somewhere to set the connection timeout? I've
already set the ping timeout to 15s and I would like to set the connect timeout
to 15s as well.
> 
> The connection timeout is always the same as PingTimeout in tinc.
I remember it being faster than that, but in that case I must be mistaken. I had
a look around at how to set that timeout and noticed people use a select()
construct to do it, not a simple socket setting. So I guess your comment make
sense then.

Well, I'll check again and get back to you if I can figure out what actually
goes wrong.

Nick
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 873 bytes
Desc: Message signed with OpenPGP
URL:
<http://www.tinc-vpn.org/pipermail/tinc/attachments/20170329/5c8961ee/attachment.sig>