[Openvpn-users] VPN without encryption and auth

2017-08-02 Thread Abi Askushi
Hi All, I am considering to setup OpenVPN without encryption and packet authorization, as a way to lower the VPN overhead, by using the following directives: cipher none auth none Apart from having the tunneled traffic on the clear, since now it will not be encrypted, what other implications

Re: [Openvpn-users] OpenVPN compression ratio

2017-07-21 Thread Abi Askushi
Thank you Selva. I confirm I can read those values from client side. On Fri, Jul 21, 2017 at 4:01 AM, Selva Nair <selva.n...@gmail.com> wrote: > Hi, > > On Thu, Jul 20, 2017 at 5:51 PM, Abi Askushi <rightkickt...@gmail.com> > wrote: > >> Hi Selva, >> >

Re: [Openvpn-users] OpenVPN compression ratio

2017-07-21 Thread Abi Askushi
reported at the compression stats are so different from TUN/TAP values? Don't they refer to the same payload traffic of VPN? Thanx, Abi On Fri, Jul 21, 2017 at 10:02 AM, Abi Askushi <rightkickt...@gmail.com> wrote: > Thank you Selva. I confirm I can read those values from client side. >

[Openvpn-users] OpenVPN compression ratio

2017-07-20 Thread Abi Askushi
Hi all, Do you know of any way that one could calculate the OpenVPN compression ration for a specific amount of traffic? Except from wireshark/tshark measurements that one may attempt, is it any other way that one could query this statistic perhaps from the openvpn service? Thanx, Abi

Re: [Openvpn-users] OpenVPN compression ratio

2017-07-20 Thread Abi Askushi
OpenVPN 2.2. Is this a feature provided from later VPN versions? Thanx, Abi On Fri, Jul 21, 2017 at 12:41 AM, Selva Nair <selva.n...@gmail.com> wrote: > Hi, > > On Thu, Jul 20, 2017 at 5:04 PM, Abi Askushi <rightkickt...@gmail.com> > wrote: > >> Hi all, >

Re: [Openvpn-users] VPN without encryption and auth

2017-08-06 Thread Abi Askushi
I would suggest to keep auth enabled, while having cipher none, to avoid DoS attacks. On Aug 6, 2017 11:35, "Yevgeny Kosarzhevsky" wrote: > > > On 2 August 2017 at 20:37, David Sommerseth topphemmelig.net> wrote: > >> >> Configuring OpenVPN without

Re: [Openvpn-users] HA between two server on different sites.

2017-08-06 Thread Abi Askushi
There are several ways that pass to my mind though it depends from the exact requirements which would be the best approach: 1. Simple failover with multiple remote servers on the client side config. You can even put weights here. 2. Have the servers on a cloud provider that provides virtual ip

[Openvpn-users] OpenVPN with LZ4

2017-08-24 Thread Abi Askushi
Hi All, I have compiled that latest openvpn 2.4.3, as below: apt-get install libpam0g-dev liblzo2-dev liblz4-dev ./configure --build=x86_64-linux-gnu --prefix=/usr --sysconfdir=/etc OPENSSL_LIBS="-L/usr/local/ssl/lib -lssl -lcrypto" OPENSSL_CFLAGS="-I/usr/local/ssl/include" --disable-debug

Re: [Openvpn-users] OpenVPN with LZ4

2017-08-25 Thread Abi Askushi
ile is sufficient to deploy this new update without installing any other packages. Thanx, Abi On Thu, Aug 24, 2017 at 10:08 PM, Gert Doering <g...@greenie.muc.de> wrote: > Hi, > > this is a question better suited for openvpn-devel, really... > > On Thu, Aug 24, 2017 at 08:12:13