headers
Charles Duffy | 1 Mar 2005 01:21
Favicon

Re: Re: Mac's for the devs / doc writers

On Mon, 2005-02-28 at 23:17 +0100, Martijn Lievaart wrote:
> I don't do paypal, so if anyone can come up with an easy way to get E25 
> to James, I'm in.

There are a number of alternatives listed at
[http://paypalsucks.com/options.shtml]. In particular, YowCow and PayZip
are well-recommended... presuming James finds them acceptable, would you
consider either?

-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
Permalink | Reply | 1 comment |
headers
Charles Duffy | 1 Mar 2005 07:18
Favicon

Re: Mac's for the devs / doc writers

On Mon, 28 Feb 2005 01:33:32 -0600, Terry L. Inzauro wrote:

> ok ok.  for the purpose of rebooting and such, you'll have root, 
> so..........

Speaking from experience, remote root isn't nearly good enough when doing
driver development without (1) a network power supply and (2) a serial
console running to a separate box. Otherwise, you're screwed when the
system hardlocks or you need to adjust some settings (or, in the case of
MacOS, reboot and hold down some special keys as the system comes back
online). Worse, when you're dealing with networking software, you can also
make a goof that screws the routing table... and whoops, no more remote
access!

Since (1) is expensive and (2) isn't something I think Macs support,
James's requirement of physical access to the hardware makes a great deal
of sense.

-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
Permalink | Reply | 1 comment |
headers
Claas Hilbrecht | 1 Mar 2005 09:06
Picon

different --verb settings for syslog and managment console would be nice

After playing some days with the managment console and trying to create a 
weg gui to help people to debug openvpn connection issues I think it would 
be nice to set different verb level to different log destinations. Running 
openvpn with verb 4 and logging to a syslog server is quite chatty but for 
debugging purposes verb 4 would be very nice. Maybe this is something for 
2.1.

--

-- 
 Claas Hilbrecht
 http://www.jucs-kramkiste.de

-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
Permalink | Reply | 0 comments |
headers
Leonard Isham | 1 Mar 2005 14:09
Picon

Re: Scalability?

On Tue, 1 Mar 2005 10:41:22 +0000 (UTC), Mario Gonzalez
<mario.gonzalez <at> teleca.no> wrote:
> Hi,
> 
> we are currently in the process of evaluating openvpn for use in one of our
> projects. The project would include the use of 10000+ clients. Openvpn docs
> state that it scales to 'hundreds or thousands of users', but what about further
> scalability? Does anyone have any experience with such a high number of clients?
> How would it impact the server-side? Is it possible to do?
> 

Scalability depends on load characteristics.  What is your average
user's expected bandwidth usage and where are the peaks?  10000 users
running telnet is different from 10000 users transferring gigabyte
files 8-10 hours a day.

--

-- 
Leonard Isham, CISSP
Ostendo non ostento.

-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
Permalink | Reply | 13 comments |
headers
Mario Gonzalez | 1 Mar 2005 14:53
Picon

Re: Scalability?

The application is more like telnet than gigabyte file transfers.
Something like 5k/hour/client. There are no serious peaks except for
restart scenarios, where all the clients are re-connecting.

What initially concerns us are the requirements for handling all the
certificates.

br
mario;

On Tue, 2005-03-01 at 08:09 -0500, Leonard Isham wrote:
> On Tue, 1 Mar 2005 10:41:22 +0000 (UTC), Mario Gonzalez
> <mario.gonzalez <at> teleca.no> wrote:
> > Hi,
> > 
> > we are currently in the process of evaluating openvpn for use in one of our
> > projects. The project would include the use of 10000+ clients. Openvpn docs
> > state that it scales to 'hundreds or thousands of users', but what about further
> > scalability? Does anyone have any experience with such a high number of clients?
> > How would it impact the server-side? Is it possible to do?
> > 
> 
> Scalability depends on load characteristics.  What is your average
> user's expected bandwidth usage and where are the peaks?  10000 users
> running telnet is different from 10000 users transferring gigabyte
> files 8-10 hours a day.
> 
> 

-------------------------------------------------------
(Continue reading)

Permalink | Reply | 12 comments |
headers
Michael Renner | 1 Mar 2005 18:59
Picon
Picon

2.0 client with 1.6 server?

Moin,

I want to start playing around with 2.0. My OpenVPN server is still version 
1.6. Do I have to expect problems to connect this server with a client 
running 2.0 (rc16)?

Thanks
--

-- 

|Michael Renner      E-mail: michael.renner <at> gmx.de  |
|D-72072 Tuebingen   Germany                        |
|Germany             Don't drink as root!      ESC:wq

-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
Permalink | Reply | 1 comment |
headers
/dev/rob0 | 1 Mar 2005 19:18
Picon
Favicon

Re: 2.0 client with 1.6 server?

On Tuesday 01 March 2005 11:59, Michael Renner wrote:
> I want to start playing around with 2.0. My OpenVPN server is still
> version 1.6.

[nitpick]
1.x is peer-to-peer only, so in context of openvpn the term "server" 
really isn't appropriate. Like a dialup ISP: it's a "server" in terms 
of the dialup service, but the connection itself is peer-to-peer. It 
just so happens that one peer typically provides a default gateway to 
the other.

That is a difficult concept which may or may not be useful, but there  
it is anyway.

> Do I have to expect problems to connect this server with 
> a client running 2.0 (rc16)?

The specific settings are documented: http://openvpn.net/faq.html  
(about one fifth of the way down the page.) I have several 1.x-to-2.0 
tunnels in place.
--

-- 
    mail to this address is discarded unless "/dev/rob0"
    or "not-spam" is in Subject: header

-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
(Continue reading)

Permalink | Reply | 0 comments |
headers
Charles Duffy | 1 Mar 2005 19:35
Favicon

Re: Scalability?

On Tue, 01 Mar 2005 14:53:20 +0100, Mario Gonzalez wrote:

> What initially concerns us are the requirements for handling all the
> certificates.

Hmm. Can you be a bit more specific about your concerns? Running a CA is a
very scriptable process.

-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
Permalink | Reply | 10 comments |
headers
Andreas Iwanowski | 1 Mar 2005 19:55

RE: 2.0 client with 1.6 server?

No, just make sure your MRU/MTU settings, as well as the other link option settings on client and server
match (ping, ping-restrart, etc)

-andy 

-----Original Message-----
From: Michael Renner [mailto:michael.renner <at> gmx.de] 
Sent: Tuesday, March 01, 2005 1:00 PM
To: openvpn-users <at> lists.sourceforge.net
Subject: [Openvpn-users] 2.0 client with 1.6 server?

Moin,

I want to start playing around with 2.0. My OpenVPN server is still version 
1.6. Do I have to expect problems to connect this server with a client 
running 2.0 (rc16)?

Thanks
--

-- 

|Michael Renner      E-mail: michael.renner <at> gmx.de  |
|D-72072 Tuebingen   Germany                        |
|Germany             Don't drink as root!      ESC:wq

-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
(Continue reading)

Permalink | Reply | 0 comments |
headers
Andreas Iwanowski | 1 Mar 2005 20:23

TUN/TAP doesn't get an IP address

Hello List,

I have some trouble with OpenVPN 2.0rc6 on a Windows 2003 SBS server, SP1.

Occasionally (once or twice a week), after the connection with the peer is re-established,
the TAP device fails to obtain the IP address set by OpenVPN.
The log file says the following:

---------------
Fri Feb 25 15:18:34 2005 us=173685 NOTE: FlushIpNetTable failed on interface
[2] {5A4DE833-7293-4544-98EF-3CE949D78158} (status=1413) : Invalid index.
---------------
followd by a _lot_ of these:
---------------
Fri Feb 25 15:18:53 2005 us=687643 TEST ROUTES: 0/0 succeeded len=1 ret=0
a=0 u/d=down
Fri Feb 25 15:18:53 2005 us=687764 Route: Waiting for TUN/TAP interface to
come up...
---------------

Of course, since the TAP adapter does not receive an IP address, the route addition after that consequently fails.

Thank you for your help in advance.

Sincerely,
   Andreas Iwanowski

-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
(Continue reading)

Permalink | Reply | 1 comment |

Gmane