Re: [Openvpn-devel] Is --ifconfig-ipv6-noexec planned ?

2016-08-17 Thread debbie10t
Hi On 17/08/16 21:56, Gert Doering wrote: > Hi, > > (copying openvpn-devel back in, as Selva has a surprising explanation > for this) > > On Wed, Aug 17, 2016 at 04:40:05PM -0400, Selva Nair wrote: >> If the problem is on windows I believe this may be related to >> ifconfig_noexec being >> reset

Re: [Openvpn-devel] Is --ifconfig-ipv6-noexec planned ?

2016-08-17 Thread Gert Doering
Hi, (copying openvpn-devel back in, as Selva has a surprising explanation for this) On Wed, Aug 17, 2016 at 04:40:05PM -0400, Selva Nair wrote: > If the problem is on windows I believe this may be related to > ifconfig_noexec being > reset on windows to ip_win32_type = manual, or some such. Then

Re: [Openvpn-devel] Is --ifconfig-ipv6-noexec planned ?

2016-08-17 Thread Gert Doering
Hi, On Wed, Aug 17, 2016 at 12:54:20PM +0100, debbie10t wrote: > So I re-state my original question in a more appropriate way: > >_Why_ does --ifconfig-noexec *not* effect IPv6 ? It *does*. The only place in OpenVPN where this flag is checked is in init.c: Windows and Android: /* do

[Openvpn-devel] AES-GCM & gigabit networks

2016-08-17 Thread Jan Just Keijser
hi all, just wanted to share some results with you: AES-GCM has a *very* nice impact on openvpn's performance over gigabit networks. I'm now capable of saturating a gigabit ethernet link with full AES-256-GCM encryption (Linux on both ends). Raw iperf results: - ethernet: 935 Mbps - plaintext

Re: [Openvpn-devel] testing challenge-response

2016-08-17 Thread Selva Nair
Hi JJK, On Wed, Aug 17, 2016 at 8:08 AM, Jan Just Keijser wrote: > Hi Selva, > > Selva Nair wrote: > >> Hi, >> >> As discussed in the IRC meeting, here is a client config that connects to >> a test server I run for static and dynamic challenge. Just run it as >> >> sudo openvpn --config cr-clien

Re: [Openvpn-devel] testing challenge-response

2016-08-17 Thread Jan Just Keijser
Hi Selva, Selva Nair wrote: > Hi, > > As discussed in the IRC meeting, here is a client config that connects > to a test server I run for static and dynamic challenge. Just run it as > > sudo openvpn --config cr-client.conf > > Respond with some arbitrary strings at the username, password and >

Re: [Openvpn-devel] Is --ifconfig-ipv6-noexec planned ?

2016-08-17 Thread debbie10t
On 08/08/16 15:27, debbie10t wrote: > > > On 08/08/16 13:20, Gert Doering wrote: >> Hi, >> >> On Mon, Aug 08, 2016 at 01:05:06PM +0100, debbie10t wrote: >>> --ifconfig-ipv6-noexec >>> >>> not sure if this would be a 'feature request/wish list' item >>> or if it has just been over looked. >>> >>>