> Yes, by extranet, I meant VPN. And as you can see, we already have > distcc working on the sparcs. (Thanks Per Oyvind! :)
Mhh, do you think that distcc could work on a vpn ? isn't there some issues about the bandwidth ? > BTW, What are our options for building the VPN? IP-IP, IP-GRE (easy > to configure, but unencrypted) and IPSec (freeswan), thou I have no > idea about the latter ;) I suggest using openvpn ( http://openvpn.sourceforge.net/ ), and I think it has several advantages over ipsec. It is a userland software, which mean there is no need for a kernel patch it order to upgrade or to set up a new host. It is based on openssl, which allow the use of certificat, and a wide range of cryptographic algorithms. IpSec can do it too, I think. It work by using udp, which is easier to control on a firewall , and provides good performance when a tcp connection is made. It is robust, a host can be disconnected without any problem or need to reload any service. It also work when a host change his ip address. Is is portable on all unices, and of course, is free software. -- Michaël Scherer
