Re: [Openvpn-devel] Openvpn is not working with hardware encryption enabled CPU.

2015-07-31 Thread Jan Just Keijser
Hi, On 31/07/15 09:10, Rahul Arora wrote: Hi I tried to run openssl with the commands provided by you.But my performance is decreasing when i use cryptodev. I tried with file of approx 100MB. *Without HW it takes 4secs only. * *with cryptodev it takes 3min 15 secs* Can you please provide

Re: [Openvpn-devel] Packet loss due to radius issues

2015-07-31 Thread David Sommerseth
On 31/07/15 01:37, Samuel Thibault wrote: > Hello, > > We've been having issues on our VPN server due to the way authentication > is done in openvpn. Basically, when a user would connect to the VPN > server, no trafic would pass for a couple of seconds, thus making > the VPN way less effective...

Re: [Openvpn-devel] Packet loss due to radius issues

2015-07-31 Thread Samuel Thibault
Илья Шипицин, le Fri 31 Jul 2015 14:54:02 +0500, a écrit : > it is too early to talk about central repository, currently I'm the > only user of that plugin But without a central repository where people would get to know about your version, then it's even more probable that you'll remain the only u

Re: [Openvpn-devel] Packet loss due to radius issues

2015-07-31 Thread Samuel Thibault
Samuel Thibault, le Fri 31 Jul 2015 11:32:06 +0200, a écrit : > # Allows the plugin to use auth control files if OpenVPN (>= 2.1 rc8) > provides them. > # default is false > # useauthcontrolfile=false > > Why is the default false?? And still... The main loop uses pthread_mutex_lock(context->

Re: [Openvpn-devel] Packet loss due to radius issues

2015-07-31 Thread Илья Шипицин
auth-user-pass-verify is not as powerfull as "so" plugin. my plugin is synchronous by nature. however, if your are familiar with c#, it might be easier to implement things like username manipulation, for instance, we used to transform usernames like 'domain\user' and 'user@domain' to just 'user'

Re: [Openvpn-devel] Packet loss due to radius issues

2015-07-31 Thread Samuel Thibault
Samuel Thibault, le Fri 31 Jul 2015 11:24:51 +0200, a écrit : > Lev Stipakov, le Fri 31 Jul 2015 11:19:15 +0300, a écrit : > > Do you use radius plugin from http://www.nongnu.org/radiusplugin/ ? I > > think the way OpenVPN delegates authentication to a plugin > > (OPENVPN_PLUGIN_AUTH_USER_PASS_VERI

Re: [Openvpn-devel] Packet loss due to radius issues

2015-07-31 Thread Samuel Thibault
Hello, Lev Stipakov, le Fri 31 Jul 2015 11:19:15 +0300, a écrit : > Do you use radius plugin from http://www.nongnu.org/radiusplugin/ ? I > think the way OpenVPN delegates authentication to a plugin > (OPENVPN_PLUGIN_AUTH_USER_PASS_VERIFY hook) is asynchronous, as well > as plugin implementation,

Re: [Openvpn-devel] Packet loss due to radius issues

2015-07-31 Thread Samuel Thibault
Илья Шипицин, le Fri 31 Jul 2015 14:09:51 +0500, a écrit : > I've rewritten radius thing with .net, my plugin performs queries to > multiple radius servers in parallel, I'm using it with Mono in > production for few months: > > https://github.com/skbkontur/openvpn-auth-radius > > I can help with

Re: [Openvpn-devel] Packet loss due to radius issues

2015-07-31 Thread Илья Шипицин
Hello, I've rewritten radius thing with .net, my plugin performs queries to multiple radius servers in parallel, I'm using it with Mono in production for few months: https://github.com/skbkontur/openvpn-auth-radius I can help with that plugin if you are interested 2015-07-31 4:37 GMT+05:00 Samu

Re: [Openvpn-devel] Packet loss due to radius issues

2015-07-31 Thread Lev Stipakov
Hello Samuel, Do you use radius plugin from http://www.nongnu.org/radiusplugin/ ? I think the way OpenVPN delegates authentication to a plugin (OPENVPN_PLUGIN_AUTH_USER_PASS_VERIFY hook) is asynchronous, as well as plugin implementation, i. e. OpenVPN does not wait for a response. Instead it perio

Re: [Openvpn-devel] Openvpn is not working with hardware encryption enabled CPU.

2015-07-31 Thread Rahul Arora
Hi I tried to run openssl with the commands provided by you.But my performance is decreasing when i use cryptodev. I tried with file of approx 100MB. *Without HW it takes 4secs only.* *with cryptodev it takes 3min 15 secs* Can you please provide some inputs to improve this? Thanks for the

Re: [Openvpn-devel] Does Openvpn really support cryptodev hardware accelerators

2015-07-31 Thread Jan Just Keijser
Hi, On 27/07/15 03:28, li yuqian wrote: Hi Jan, Thanks for your replay :) >>ah OK; I've grabbed a copy, built and installed it on 2 servers and ran some test: I get similar figures for 'openssl speed' but those numbers are artificial, i.e. they do not reflect true performance of the system.

Re: [Openvpn-devel] Openvpn is not working with hardware encryption enabled CPU.

2015-07-31 Thread Jan Just Keijser
Hi, On 30/07/15 19:04, Rahul Arora wrote: Hi Thanks for the reply. I am already using "--engine cryptodev" in the configuration file. I am using "aes-128-cbc" cipher algorithm and it is supported in my hardware as i am running "openssl speed test" using these ciphers only and in case of "o