Meeting summary for 13 March 2024:
* *New: topic from an openvpn inc contributor to community (illia)*
/Would like to discuss about --inactive option that disconnects a
VPN when it is not sending/receiving more than the set seconds timeout./
/One part of it is that openvpn2 only counts outgoing packets and
openvpn3 counts incoming and outgoing. Which is correct?/
/Another part is type of packets to count - this is all not so clear./
/For now we counting any packets and ICMP spam from router resets
inactive timeout very often for openvpn3 so it disconnects later than 2/
/Current proposal: count also incoming packets for openvpn2 and do
not reset inactive timeout on ICMP packets for both ovpn3 and 2/
/There was argument made that "this is how it has been in openvpn2
forever and we had no complaints" but oddly the documentation claims
incoming and outgoing is counted./
/after looking into this a bit some screwiness was found with
tracking the data in openvpn2 that could use fixing, and illia will
work on it./
/and there is some voodoo happening in openvpn2 that skips inactive
reset packets and similar magic is missing in ovpn3, so illia will
work on that too./
* *New: breaking DCO changes, how to approach?*
/During the upstreaming process to the Linux kernel some alterations
had to be made./
/This made the updated implementation different enough from
ovpn-dco-v2 that OpenVPN 2.6 won't work with it anymore./
/The plan is to adjust OpenVPN 2.6 so it can support the ovpn-dco-v2
delivered as out-of-tree kernel module, and the in-tree new kernel
module./
/We can then update the out-of-tree kernel module to work in the new
way and have a graceful transition period./
/So when it goes upstream and is in the Linux kernel, or DCO is
installed out-of-tree, it will work the same./
/We can later decide on when to drop the support for ovpn-dco-v2 old
methods./
* *Updated: openvpn 2.6.10 release*
/There are some Windows related issues to be resolved in this release./
/Was planned for this week - pushed to begin next week./
* *Updated: website release process*
/Next week a website release is planned that will enable a new way
for updating Community Downloads page./
/The new way has a much faster release method separate from the rest
of the website's release schedule./
As always you're welcome to join at #openvpn-meeting on Libera IRC
network every Wednesday at 13:00 Central European Time.
Kind regards,
Johan Draaisma
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
