Hi, On Mon, Apr 05, 2021 at 02:51:23PM +0000, tincantech via Openvpn-users wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > Ref: https://forums.openvpn.net/viewtopic.php?f=4&t=32100 > > Regarding compression, it is unclear what the best options are. > > The server config above uses > {{{ > allow-compression no > compress > comp-lzo no > push "comp-lzo no" > }}}
If you have no compelling use-case for using compression, then just
leave out anything that starts with "compression" or "comp-lzo" from
your config.
"comp-lzo no" is - due to historic mishaps - not the same as
"no compression"
> However the manual states:
> --compress alg
> Note: the `stub` (or empty) option is NOT compatible with the older option
> --comp-lzo no.
>
> My guess would be that the server config above is indeed an error because it
> uses --compress
> and pushes --comp-lzo no.
It also sets "comp-lzo no", which overrides the previous "compress"
statement anyway.
> The server then randomly aborts with:
> vpn-ext kernel: [15774] pid 46022 (openvpn), jid 0, uid 65534: exited on
> signal 11
This is not good, and needs debugging. OpenVPN should never SIGSEGV.
This is likely unrelated to compression setting, though. One would
need a verb 4 log to see what leads to this.
> Assuming that the client is using some combination of compression options
> which cannot be changed,
> or more likely that it is too much trouble to change all the clients, is
> there a recommended setting to disable
> all compression from the server only ?
compress migrate
this will push whatever the client understands to disable compression
(or nothing at all if the client has no compression in its config in
the first place).
Works with 2.2 and up clients (after the recent fixup patch).
gert
--
"If was one thing all people took for granted, was conviction that if you
feed honest figures into a computer, honest figures come out. Never doubted
it myself till I met a computer with a sense of humor."
Robert A. Heinlein, The Moon is a Harsh Mistress
Gert Doering - Munich, Germany g...@greenie.muc.de
signature.asc
Description: PGP signature
_______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
