Re: [Openvpn-devel] understanding of tun and vpn

2013-06-04 Thread Davide Brini
On Tue, 4 Jun 2013 12:15:30 +0200, wen lui wrote: > let me explain my understanding on tun/tap >[snip] Sorry, but what does all this have to do with OpenVPN development? -- D.

[Openvpn-devel] understanding of tun and vpn

2013-06-04 Thread wen lui
let me explain my understanding on tun/tap tun device is related to a file descriptor fd : fd=open("/dev/net/tun",O_RDWR) when I write to this fd, write(fd, packet,..) tun device deliver this packet to kernel TCP/IP stack when kernel TCP/IP stack send a packet to tun device I can read from the f

Re: [Openvpn-devel] OpenVPN and NAT source Port change on firewall

2013-06-04 Thread Gert Doering
Hi, On Tue, Jun 04, 2013 at 08:19:21AM +0200, Gerhard Wiesinger wrote: > I've a usecase with OpenVPN and NAT with UDP where the commercial firewall > changes NAT binding. Keep alive is 30s, so short enough. Also float option > doesn't help because it accepts packets but doesn't do the source por

[Openvpn-devel] OpenVPN and NAT source Port change on firewall

2013-06-04 Thread Gerhard Wiesinger
Hi, I've a usecase with OpenVPN and NAT with UDP where the commercial firewall changes NAT binding. Keep alive is 30s, so short enough. Also float option doesn't help because it accepts packets but doesn't do the source port change. Details find below. This behaviour is reproduceable on differ

[Openvpn-devel] Adding support for AEAD cipher modes (AES-GCM, et al.)

2013-06-04 Thread Kenny Root
I wrote a patch to add AEAD cipher modes to OpenVPN. This is one of NIST's recommended modes and newer Intel chips supporting the AES-NI (with PCLMULQDQ) have excellent support for acceleration in this mode. I posted the initial version at https://community.openvpn.net/openvpn/ticket/301 and that t