Re: [Openvpn-devel] Supporting "route-gateway dhcp" on non-Windows

2010-03-08 Thread Stefan Monnier
>> I think if the user just starts the dhcp client on an interface >> independently from the moment the interface goes up (or down), this >> is simply a misconfiguration. > I'm not sure I understand. Are you saying that manually starting > a dhcp client means that the system is mis-configured bec

Re: [Openvpn-devel] Supporting "route-gateway dhcp" on non-Windows

2010-03-08 Thread Karl O. Pinc
On 03/08/2010 03:26:11 PM, Stefan Monnier wrote: > > In either case we'd be looking at an openvpn configuration > > directive (or 2) that takes a command to run once > > the link comes up (and down). If that was in place then > > any of A, B, C, or D, or your choice of using an ifup/ifdown > > scr

Re: [Openvpn-devel] Supporting "route-gateway dhcp" on non-Windows

2010-03-08 Thread Stefan Monnier
> In either case we'd be looking at an openvpn configuration > directive (or 2) that takes a command to run once > the link comes up (and down). If that was in place then > any of A, B, C, or D, or your choice of using an ifup/ifdown > script would all work. BTW, there are generic tools to run/st

Re: [Openvpn-devel] Supporting "route-gateway dhcp" on non-Windows

2010-03-08 Thread Karl O. Pinc
On 03/08/2010 02:26:13 PM, Peter Stuge wrote: > Karl O. Pinc wrote: > > > I know of at least four DHCP clients and I avoid dhclient as much > as > > > possible. It would be a tremendous mistake to tie OpenVPN to any > one > > > DHCP client IMO. > > > > Only D is tied to dhclient. A, B, and C, wor

Re: [Openvpn-devel] Supporting "route-gateway dhcp" on non-Windows

2010-03-08 Thread Peter Stuge
Karl O. Pinc wrote: > > I know of at least four DHCP clients and I avoid dhclient as much as > > possible. It would be a tremendous mistake to tie OpenVPN to any one > > DHCP client IMO. > > Only D is tied to dhclient. A, B, and C, work fine with any dhcp > client daemon. (Or A does anyway, B an

Re: [Openvpn-devel] Supporting "route-gateway dhcp" on non-Windows

2010-03-08 Thread Karl O. Pinc
On 03/08/2010 10:50:48 AM, Peter Stuge wrote: > Karl O. Pinc wrote: > > > I'm hoping that we can make "route-gateway dhcp" work on Unix > > > platforms as well. I'm thinking there are two possible ways we > > > could do this: > > Network interface configuration is highly distribution specific. >

Re: [Openvpn-devel] Supporting "route-gateway dhcp" on non-Windows

2010-03-08 Thread Gert Doering
Hi, looking at the multitude of DHCP clients available for unix, the completely different handling of DHCP on MacOS, and the issues that most unix clients seem to have with "DHCP active on two different interfaces (ethX and tapY), and both trying to set a default gateway", ... On Mon, Mar 08, 201

Re: [Openvpn-devel] Supporting "route-gateway dhcp" on non-Windows

2010-03-08 Thread Peter Stuge
Karl O. Pinc wrote: > > I'm hoping that we can make "route-gateway dhcp" work on Unix > > platforms as well. I'm thinking there are two possible ways we > > could do this: Network interface configuration is highly distribution specific. > A) dhclient > > B) dhclient.conf > > C) dhclient > >

Re: [Openvpn-devel] Linux tun/tap performance issues

2010-03-08 Thread Karl O. Pinc
On 03/08/2010 10:40:10 AM, Peter Stuge wrote: > James Yonan wrote: > > all of the CPU-intensive cryptographic operations are being done in > > user space. > > Could some kind of crypto acceleration of OpenSSL be in play? Particularly in combination with context switching overhead going back and f

Re: [Openvpn-devel] Linux tun/tap performance issues

2010-03-08 Thread Peter Stuge
James Yonan wrote: > all of the CPU-intensive cryptographic operations are being done in > user space. Could some kind of crypto acceleration of OpenSSL be in play? //Peter

Re: [Openvpn-devel] Supporting "route-gateway dhcp" on non-Windows

2010-03-08 Thread Karl O. Pinc
On 03/08/2010 09:21:35 AM, James Yonan wrote: > OpenVPN 2.1 has a relatively recent feature that allows a TAP-based > OpenVPN session to be established where the client gets its IP > address > > assignment and other attributes from the server-side DHCP server. > I'm hoping that we can make "rou

Re: [Openvpn-devel] [PATCH] IPv6 support for TUN/TAP driver on windows

2010-03-08 Thread Gert Doering
Hi, On Mon, Mar 08, 2010 at 09:00:14AM -0700, James Yonan wrote: > >I have not yet figured out that part. I did my debugging with Wireshark > >("see what packets move back and forth and stare at the packet details"). > > While Windows doesn't support "printf" in device drivers, the TAP driver >

Re: [Openvpn-devel] [PATCH] IPv6 support for TUN/TAP driver on windows

2010-03-08 Thread James Yonan
- how does one debug Windows drivers? Is there a printf() as in Linux that goes to console / syslog? I have not yet figured out that part. I did my debugging with Wireshark ("see what packets move back and forth and stare at the packet details"). While Windows doesn't support "printf" in

Re: [Openvpn-devel] [PATCH] IPv6 support for TUN/TAP driver on windows

2010-03-08 Thread Karl O. Pinc
On 03/08/2010 09:16:33 AM, Samuli Seppänen wrote: > > > What needs to happen next? > > > > - it whould be highly appreciated if Samuli could get OpenVPN Tech > >to provide Windows binaries for the "openvpn-testing" tree, so > that > >we can get decent testing by the windows user base >

[Openvpn-devel] Linux tun/tap performance issues

2010-03-08 Thread James Yonan
I believe this has been discussed before, but I noticed recently that a Linux-based OpenVPN client (Linux 2.6.24, OpenVPN 2.1.1) spends a lot more CPU time in kernel space than in user space. This is surprising, given the fact that all of the CPU-intensive cryptographic operations are being do

[Openvpn-devel] Supporting "route-gateway dhcp" on non-Windows

2010-03-08 Thread James Yonan
OpenVPN 2.1 has a relatively recent feature that allows a TAP-based OpenVPN session to be established where the client gets its IP address assignment and other attributes from the server-side DHCP server. The feature is enabled by the "route-gateway dhcp" directive on the client. It's a pretty

Re: [Openvpn-devel] [PATCH] IPv6 support for TUN/TAP driver on windows

2010-03-08 Thread Samuli Seppänen
> What needs to happen next? > > - it whould be highly appreciated if Samuli could get OpenVPN Tech >to provide Windows binaries for the "openvpn-testing" tree, so that >we can get decent testing by the windows user base > I'm on it. If this issue is not clear by Thursday, we should

[Openvpn-devel] Encrypted / Unecrypted Tunnel

2010-03-08 Thread French, Daren
Has anyone ever setup two tunnels between two locations, where one tunnel was encrypted and the other is not encrypted? There is a patent registered by a company called Fatpipe which is alleging that no one before 2005 has ever done this, we are looking for prior art to invalidate this patent.