Re: bufferbloat in the tunnel

On 05/17/2012 02:34 PM, Brian J. Murrell wrote:

> I then moved the ping into the VPN and saturated the uplink inside the
> VPN and was observing ping times on the order of 2000-3000ms or higher.
>  I then tried reducing the txqueuelen on the tun0 interface in steps
> down from 100 to 50 to 10 to 5 and eventually got down to a value of 1
> on an uplink of 512Kb/s while maintaining full upstream bandwidth.  At a
> txqueuelen of 1, pinging inside the tunnel was a nice respectable
> 20-30ms.  When I stepped it up to 2, it went to 100-200ms.  But clearly
> since 1 still achieves full bandwidth, that is the "ideal" value.

we did some testing on a server with ~ 100 concurrent connections, and
we need a txqueuelen of 250 otherwise we get a lot of packet loss (and
the "write UDPv4 []: No buffer space available" error). That server has
a lot more bandwidth (but we only use about 10Mbps).

So perhaps the default of 100 is too high for a 512Kbps uplink, it is
too low for a 10Mbps uplink.

Possibly the OpenVPN manual could add some useful defaults for different
situations? e.g. use txqueuelen 10 for a client on a consumer ADSL
connections, 100 for a 10Mbit upstream, use up to 250 for a larger site
with more bandwidth?

Olivier

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 

stop emailing

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/

_______________________________________________
Openvpn-users mailing list
Openvpn-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Re: stop emailing

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/

_______________________________________________
Openvpn-users mailing list
Openvpn-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

OpenVPN for Adnroid 4.0

Hi,

this is just a quick announce for people which have an Android 4.0
telephone that I have ported Openvpn to the VPNService API that allows
VPN on Android without rooting the telephone.

Source code is available under http://code.google.com/p/ics-openvpn/ and
the market link is
https://play.google.com/store/apps/details?id=de.blinkt.openvpn

Arne

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/

Re: OpenVPN for Adnroid 4.0

-----Original Message-----
Hi,

this is just a quick announce for people which have an Android 4.0
telephone that I have ported Openvpn to the VPNService API that allows
VPN on Android without rooting the telephone.

<Remainder elided>
:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:

Awe! This only works on ice cream sandwich? 

Well, even if I can't use this on my HTC 3VO, you still rock!

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/

Re: OpenVPN for Adnroid 4.0

Am 05.06.12 18:51, schrieb Boggess, Rod:
> Awe! This only works on ice cream sandwich? 
>
> Well, even if I can't use this on my HTC 3VO, you still rock!
Yes. The API that allows VPN without rooting the telephone is new in ICS.

Arne

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/

Re: OpenVPN for Adnroid 4.0

>> VPNService API that allows VPN on Android without rooting the telephone.

Very cool!  I'm waiting for the Galaxy S III to come to Sprint, in the US.

Doug

--

-- 
Ben Franklin quote:

"Those who would give up Essential Liberty to purchase a little Temporary Safety, deserve neither Liberty
nor Safety."

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/

Thank you.

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/

_______________________________________________
Openvpn-users mailing list
Openvpn-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

public ip

are it not possible to use public ip with openvpn?
i tryed tubt cant connect
remote addresses must bi distinct from ifconfig addresses

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/

Re: public ip

-----Original Message-----
From: mattias [mailto:mj <at> mjw.se] 
Sent: Wednesday, June 06, 2012 11:15 AM
To: Openvpn-users <at> lists.sourceforge.net
Subject: [Openvpn-users] public ip

are it not possible to use public ip with openvpn?
i tryed tubt cant connect
remote addresses must bi distinct from ifconfig addresses

------------------------------------------------------------------------
------

Short answer: Usually.

Longer answer: It depends. If you're OpenVPN subnet is using the same IP
addresses as the public subnet, you'll have collisions. It sounds like
this may be what you're experiencing.

Do you know what subnet you're using on the OpenVPN server? And can you
run ipconfig (windows) ifconfig (linux) and tell us what subnet (address
space) you're being assigned from the public hotspot?

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/