Olivier Sessink | 5 Jun 13:19 2012
Picon

Re: bufferbloat in the tunnel

On 05/17/2012 02:34 PM, Brian J. Murrell wrote:

> I then moved the ping into the VPN and saturated the uplink inside the
> VPN and was observing ping times on the order of 2000-3000ms or higher.
>  I then tried reducing the txqueuelen on the tun0 interface in steps
> down from 100 to 50 to 10 to 5 and eventually got down to a value of 1
> on an uplink of 512Kb/s while maintaining full upstream bandwidth.  At a
> txqueuelen of 1, pinging inside the tunnel was a nice respectable
> 20-30ms.  When I stepped it up to 2, it went to 100-200ms.  But clearly
> since 1 still achieves full bandwidth, that is the "ideal" value.

we did some testing on a server with ~ 100 concurrent connections, and
we need a txqueuelen of 250 otherwise we get a lot of packet loss (and
the "write UDPv4 []: No buffer space available" error). That server has
a lot more bandwidth (but we only use about 10Mbps).

So perhaps the default of 100 is too high for a 512Kbps uplink, it is
too low for a 10Mbps uplink.

Possibly the OpenVPN manual could add some useful defaults for different
situations? e.g. use txqueuelen 10 for a client on a consumer ADSL
connections, 100 for a 10Mbit upstream, use up to 250 for a larger site
with more bandwidth?

Olivier

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
(Continue reading)

shafeer dunes | 5 Jun 14:29 2012
Picon

stop emailing

i want to stop bulk in coming emails, please advise me.

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Openvpn-users mailing list
Openvpn-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users
Boggess, Rod | 5 Jun 14:47 2012

Re: stop emailing

https://lists.sourceforge.net/lists/listinfo/openvpn-users

 

Scroll to the bottom and click on the Unsubscribe or edit options button. Follow the instructions or post back any specific questions you have.

 

 

 

From: shafeer dunes [mailto:elichuzhiyil <at> gmail.com]
Sent: Tuesday, June 05, 2012 8:30 AM
To: Openvpn-users <at> lists.sourceforge.net
Subject: [Openvpn-users] stop emailing

 

i want to stop bulk in coming emails, please advise me.

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Openvpn-users mailing list
Openvpn-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users
Arne Schwabe | 5 Jun 18:24 2012

OpenVPN for Adnroid 4.0

Hi,

this is just a quick announce for people which have an Android 4.0
telephone that I have ported Openvpn to the VPNService API that allows
VPN on Android without rooting the telephone.

Source code is available under http://code.google.com/p/ics-openvpn/ and
the market link is
https://play.google.com/store/apps/details?id=de.blinkt.openvpn

Arne

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
Boggess, Rod | 5 Jun 18:51 2012

Re: OpenVPN for Adnroid 4.0


-----Original Message-----
Hi,

this is just a quick announce for people which have an Android 4.0
telephone that I have ported Openvpn to the VPNService API that allows
VPN on Android without rooting the telephone.

<Remainder elided>
:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:-:

Awe! This only works on ice cream sandwich? 

Well, even if I can't use this on my HTC 3VO, you still rock!

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
Arne Schwabe | 5 Jun 18:58 2012

Re: OpenVPN for Adnroid 4.0

Am 05.06.12 18:51, schrieb Boggess, Rod:
> Awe! This only works on ice cream sandwich? 
>
> Well, even if I can't use this on my HTC 3VO, you still rock!
Yes. The API that allows VPN without rooting the telephone is new in ICS.

Arne

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
Doug Lytle | 5 Jun 21:36 2012

Re: OpenVPN for Adnroid 4.0

>> VPNService API that allows VPN on Android without rooting the telephone.

Very cool!  I'm waiting for the Galaxy S III to come to Sprint, in the US.

Doug

--

-- 
Ben Franklin quote:

"Those who would give up Essential Liberty to purchase a little Temporary Safety, deserve neither Liberty
nor Safety."

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
Boggess, Rod | 6 Jun 15:38 2012

Thank you.

I just got a new computer today. It took me a couple hours to figure out how to get around Win7x64 signed drivers and UAC, but my VPN connection is up and running. I’m using the newest version of the OpenVPN GUI. The forum archives were invaluable in getting around these issues, and I just wanted to take a minute to thank everyone -- the developers for making VPN accessible, for staying up to date with all the hurdles newer security requirements impose on their designs, and for making the software as usable as it is. But also for taking the time to answer all these questions and keep them logged for future reference. And lastly for all the users out there that patiently wade through all these issues and help troubleshoot the problems, and share their experiences so that others who follow after can benefit from their experiences.

 

Thank you.

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Openvpn-users mailing list
Openvpn-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users
mattias | 6 Jun 17:14 2012
Picon

public ip

are it not possible to use public ip with openvpn?
i tryed tubt cant connect
remote addresses must bi distinct from ifconfig addresses

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
Boggess, Rod | 6 Jun 17:22 2012

Re: public ip


-----Original Message-----
From: mattias [mailto:mj <at> mjw.se] 
Sent: Wednesday, June 06, 2012 11:15 AM
To: Openvpn-users <at> lists.sourceforge.net
Subject: [Openvpn-users] public ip

are it not possible to use public ip with openvpn?
i tryed tubt cant connect
remote addresses must bi distinct from ifconfig addresses

------------------------------------------------------------------------
------

Short answer: Usually.

Longer answer: It depends. If you're OpenVPN subnet is using the same IP
addresses as the public subnet, you'll have collisions. It sounds like
this may be what you're experiencing.

Do you know what subnet you're using on the OpenVPN server? And can you
run ipconfig (windows) ifconfig (linux) and tell us what subnet (address
space) you're being assigned from the public hotspot?

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/

Gmane