> I think TOS pass-through would be a nice optional feature to add to OpenVPN.
> I would be curious to know how this works for you, i.e. extracting the TOS
> from the TUN/TAP data and calling setsockopt before the encrypted packet gets
> written to the UDP port.
It does work.
Some results are
On Wed, 30 Oct 2002, James Yonan wrote:
>
> Some caveats that immediately come to mind:
>
> * Since OpenVPN does not assume a particular TUN encoding of IP traffic, this
> patch requires OpenVPN to assume an offset of the TOS bits.
Well if you end up looking at the ip header by using struct iphdr
Craig Knox said:
> Hi,
>
> > One of the problems I can see with this is that you give some information
> > away about the payload, mind you not much, but you are regardless.
>
> That is true - but for me its either give away TOS or have things become
> unresponsive.
>
> > I
> > guess if you r
Hi,
> One of the problems I can see with this is that you give some information
> away about the payload, mind you not much, but you are regardless.
That is true - but for me its either give away TOS or have things become
unresponsive.
> I
> guess if you really wanted to do this, one could modi
On 28 Oct 2002, Craig Knox wrote:
> Hi there,
>I use QoS routing and it works great except over openvpn/tun device.
>
>Correct me if I am wrong but I think this is because the packets are
> encapsulated within a UDP packet with no regard to what the original
> packets TOS field was, so onc
Craig,
No, right now OpenVPN (and I believe the Linux TUN driver as well) has no
special handling for QoS such as TOS pass through between different
encapsulation layers (though it's an interesting idea).
You could, of course, apply QoS rules to OpenVPN's UDP connection or make use
of OpenVPN'
Hi there,
I use QoS routing and it works great except over openvpn/tun device.
Correct me if I am wrong but I think this is because the packets are
encapsulated within a UDP packet with no regard to what the original
packets TOS field was, so once it reaches a "real" device it is just
treat
