[Openvpn-devel] Summary of the community meeting (Wed, 3rd Jan 2018)

Hi, Here's the summary of the IRC meeting. Unfortunately I had forgotten to send the meeting invitation until it was already too late. --- COMMUNITY MEETING Place: #openvpn-meeting on irc.freenode.net Date: Wednesday 3rd Jan 2017 Time: 11:30 CET (10:30 UTC) Planned meeting topics for this meet

[Openvpn-devel] [PATCH] Check for more data in control channel

If control channel packets arrive quickly after each other, or out of order, there might be more data available than we can read in one tls_process() call. If that happened, and no further control channel packet arrived (e.g. because the last two packets arrived out-of-order), we would wait for 16

[Openvpn-devel] [PATCH] travis-ci: speedup osx build by enabling brew cache

1-2 minutes speedup by using brew cache, also ccache is no more disabled for osx build (even it does not speedup significantly, it simplifies the overall script) --- this is a "v2" of previously issued "enable ccache for osx and mingw builds" patch. I decided not to enable ccache for mingw builds

Re: [Openvpn-devel] [PATCH] travis-ci: speedup osx build by enabling brew cache

wait a bit, we might need to remove ccache (it became broken after travis-ci upgraded to clang-5) https://travis-ci.org/chipitsine/openvpn/jobs/325002858 2018-01-04 17:19 GMT+05:00 Ilya Shipitsin : > 1-2 minutes speedup by using brew cache, also ccache > is no more disabled for osx build (even

[Openvpn-devel] [PATCH v3] travis-ci: add brew cache, remove ccache

1-2 minutes speedup osx builds by using brew cache. Also, ccache was removed for a while (builds fail after travis-ci upgraded clang to version 5.0.0) --- v2: this is a "v2" of previously issued "enable ccache for osx and mingw builds" patch. I decided not to enable ccache for mingw builds as it do

Re: [Openvpn-devel] [PATCH v3] travis-ci: add brew cache, remove ccache

On 05/01/18 03:37, Ilya Shipitsin wrote: > 1-2 minutes speedup osx builds by using brew cache. > Also, ccache was removed for a while (builds fail > after travis-ci upgraded clang to version 5.0.0) > --- > v2: this is a "v2" of previously issued "enable ccache for osx and mingw > builds" > patch

[Openvpn-devel] OVPN vs IPSec performance as a transport

Hi, I have been testing OVPN 2.4.4 vs StrongSwan IPSec, to be used as transport, and I have found something that I think might be a performance issue.  I have 3 linux boxes, A, B, and C.  All interfaces are 1Gbps.  Each has an interface to the next one downstream: A - eth0=10.10.10.10/24 and eth1

Re: [Openvpn-devel] OVPN vs IPSec performance as a transport

I'm sure someone else, or a Google search will get you a more detailed run-down - but the gist of the "problem" is this; OpenVPN is run in user-space, not kernel space. IPSec runs in kernel space, and the difference is vastly diminished throughput. HTH -Greg On Jan 4, 2018 3:23 PM, "Tom Kunz"

Re: [Openvpn-devel] OVPN vs IPSec performance as a transport

That would explain it if it always worked that way. But I can get 400%+ wire speed from A to B with compressible data, and 102% with incompressible data.  If I do the same test from B to A or A to B, I get those results.  If I hop off of that to C, speed goes from >1Gbps to sub-200Mbps.  In either

Re: [Openvpn-devel] [PATCH v3] travis-ci: add brew cache, remove ccache

2018-01-05 3:23 GMT+05:00 Antonio Quartulli : > > > On 05/01/18 03:37, Ilya Shipitsin wrote: > > 1-2 minutes speedup osx builds by using brew cache. > > Also, ccache was removed for a while (builds fail > > after travis-ci upgraded clang to version 5.0.0) > > --- > > v2: this is a "v2" of previous

Re: [Openvpn-devel] OVPN vs IPSec performance as a transport

This does not answer your question, either, but there are more details on OpenVPN performance optimization here: Increasing the MTU helps as it reduces the number of user<->kernel-space switches. -- Samuli Seppänen Community Ma

Re: [Openvpn-devel] OVPN vs IPSec performance as a transport

Hi, > That would explain it if it always worked that way. > But I can get 400%+ wire speed from A to B with compressible data, and > 102% with incompressible data.  If I do the same test from B to A or A > to B, I get those results.  If I hop off of that to C, speed goes from >>1Gbps to sub-200Mbp

Re: [Openvpn-devel] OVPN vs IPSec performance as a transport

Hi, On 05/01/18 15:06, Simon Matter wrote: > Hi, > >> That would explain it if it always worked that way. >> But I can get 400%+ wire speed from A to B with compressible data, and >> 102% with incompressible data.  If I do the same test from B to A or A >> to B, I get those results.  If I hop off