Re: [Openvpn-devel] route/iroute handling on FreeBSD

2022-10-17 Thread Kristof Provost
On 12 Oct 2022, at 16:38, Gert Doering wrote: > people have alreadycomplained at me that I write so long e-mails today, > so I can write more... > > On Wed, Oct 12, 2022 at 08:39:31AM +0200, Gert Doering wrote: >> Factor 1: single-peer (client or p2p) vs. multi-peer >> >> single-peer -> DCO has

Re: [Openvpn-devel] route/iroute handling on FreeBSD

2022-10-12 Thread Kristof Provost
Hi Gert, I’m still travelling today (and am due for my 5G chip update tomorrow), so it’ll be another day or two before I can look at this in any detail, but at first glance this looks sane. Best regards, Kristof On 12 Oct 2022, at 15:38, Gert Doering wrote: > Hi, > > people have

Re: [Openvpn-devel] route/iroute handling on FreeBSD

2022-10-12 Thread Gert Doering
Hi, people have alreadycomplained at me that I write so long e-mails today, so I can write more... On Wed, Oct 12, 2022 at 08:39:31AM +0200, Gert Doering wrote: > Factor 1: single-peer (client or p2p) vs. multi-peer > > single-peer -> DCO has only 1 peer, all packets that go into the >

Re: [Openvpn-devel] route/iroute handling on FreeBSD

2022-10-12 Thread Gert Doering
Hi, On Tue, Oct 11, 2022 at 09:11:25PM +0200, Gert Doering wrote: > OTOH, in "not peer2peer mode", we only support topology subnet anyway, > so maybe it should autoconfigure that, depending on the mode OpenVPN > requests (p2p mode -> IFF_POINTOPOINT, p2mp mode -> IFF_BROADCAST), > so we don't

Re: [Openvpn-devel] route/iroute handling on FreeBSD

2022-10-11 Thread Gert Doering
Hi, On Fri, Oct 07, 2022 at 11:56:52AM +0200, Gert Doering wrote: > I'll dig into the POINTTOPOINT issue... configure a real MULTIPOINT > interface for --topology subnet (which is something I've always avoided > so far, because "we know the other stuff works") This is... an interesting problem.

Re: [Openvpn-devel] route/iroute handling on FreeBSD

2022-10-07 Thread Kristof Provost
Hi Gert, On 6 Oct 2022, at 16:39, Gert Doering wrote: > FreeBSD DCO has the open issue of "iroute with the same netmask as > route, so we want metric/weight/... to differenciate" > I’ll try to dig into that, but it’ll be late next week at the earliest. Best regards, Kristof

Re: [Openvpn-devel] route/iroute handling on FreeBSD

2022-10-07 Thread Gert Doering
Hi, On Fri, Oct 07, 2022 at 10:47:08AM +0100, Kristof Provost wrote: > On 6 Oct 2022, at 16:39, Gert Doering wrote: > > FreeBSD DCO has the open issue of "iroute with the same netmask as > > route, so we want metric/weight/... to differenciate" > I???ll try to dig into that, but it???ll be late

Re: [Openvpn-devel] route/iroute handling on FreeBSD

2022-10-06 Thread Gert Doering
Hi, FreeBSD DCO has the open issue of "iroute with the same netmask as route, so we want metric/weight/... to differenciate" On Mon, Aug 22, 2022 at 02:55:09PM +0200, Kristof Provost wrote: > But: > > $ sudo route add 172.16.2.0/24 10.0.2.1 > add net 172.16.2.0: gateway 10.0.2.1 >

Re: [Openvpn-devel] route/iroute handling on FreeBSD

2022-08-22 Thread Kristof Provost
On 22 Aug 2022, at 20:16, Gert Doering wrote: > On Mon, Aug 22, 2022 at 02:55:09PM +0200, Kristof Provost wrote: >>> Now, back to FreeBSD. >>> >>> - our code does not try to set metrics on FreeBSD >>> - my reading of route(8) does not show me anything in that direction >>> (metric,

Re: [Openvpn-devel] route/iroute handling on FreeBSD

2022-08-22 Thread Gert Doering
Hi, On Mon, Aug 22, 2022 at 02:55:09PM +0200, Kristof Provost wrote: > > Now, back to FreeBSD. > > > > - our code does not try to set metrics on FreeBSD > > - my reading of route(8) does not show me anything in that direction > > (metric, preference, administrative distance, ...) > > -

Re: [Openvpn-devel] route/iroute handling on FreeBSD

2022-08-22 Thread Kristof Provost
On 20 Aug 2022, at 16:33, Gert Doering wrote: - iroute installation works for the easy cases (--route in server.conf, --iroute with a more-specific of that in ccd/). It does not work for the nasty cases (--route and --iroute with same netbits). I will send a followup e-mail with

Re: [Openvpn-devel] route/iroute handling on FreeBSD

2022-08-20 Thread Gert Doering
Hi, so, as promised, more details on the route/iroute issues I saw... with a new Subject: line, to keep the threads halfway orderly. On Sat, Aug 20, 2022 at 04:01:02PM +0200, Gert Doering wrote: > - route *deletion* does not work for IPv4 host routes, because of >"other code stupidity" -