-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
Sent with ProtonMail Secure Email.
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Monday, 5 April 2021 20:00, Gert Doering <g...@greenie.muc.de> wrote:
> Hi,
>
> On Mon, Apr 05, 2021 at 06:31:30PM +0000, tincantech wrote:
>
> > > compress migrate
> > > this will push whatever the client understands to disable compression
> > > (or nothing at all if the client has no compression in its config in
> > > the first place).
> > > Works with 2.2 and up clients (after the recent fixup patch).
> >
> > Will that be included in version 2.5.2 ?
>
> No. It's somewhat ugly and most setups can get along with a client-connect
> script that just sets
>
> comp-lzo no,
> push "comp-lzo no"
> or
> compress stub-v2
> push "compress stub-v2"
>
> depending on whether the client sends IV_COMP_STUBv2 or not.
>
> It will cause warnings about "I have comp-lzo in my client config but
> there is no comp-lzo in the server configs", so there is a bit of extra
> support effort (which "compress migrate" mitigates by rewriting OCC
> option strings) but if a user really looks at their logs and sees
> the warning, it can be easily explained ("we are migrating away from
> using compression by default").
>
I have tested this with 2.5.1 and 2.4.10 and it works well.
All that is required is to add --comp-lzo no and --push "comp-lzo no"
to the server config.
There are warnings about --link-mtu and --comp-lzo but the VPN is stable.
Thanks
R
-----BEGIN PGP SIGNATURE-----
Version: ProtonMail
wsBzBAEBCAAGBQJga34pACEJEE+XnPZrkLidFiEECbw9RGejjXJ5xVVVT5ec
9muQuJ0EQggAmdm6hJEbqN5FhXHHrhanCtmGkx2zeJHWbt/e/JKQmeHOSmWT
Ydjp4xtnNfNwgNIFk2yKr8JmaSzNamcWTcc4nSyUwWBqaHbqBv9S/ckNdLBV
VWR7RTzcCeu44ivRfNvReiwn/4xLaTwO8in5SKYreyU1nO7azGGtwFYxfFAo
dIANoNuFFFtRBwi/SAmCJbGFoc6XvdE+gBq5DEl52pIcN1qqGcxoa5mgdQdR
lakZ8IJLLKxvNzlQhg5yovumkTw0kTwmO+Lnxs1AwxgvFIdYky7DeGLU5E2K
9Ubzn/0KEqClDqN7naiu/7LJdmSUeLnMrUhoflYnXUprMSw2Q/uCag==
=IwPt
-----END PGP SIGNATURE-----
publickey - tincantech@protonmail.com - 0x09BC3D44.asc
Description: application/pgp-keys
publickey - tincantech@protonmail.com - 0x09BC3D44.asc.sig
Description: PGP signature
_______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
