Re: [Openvpn-users] OpenVPN architecture questions

2015-11-30 Thread Jan Just Keijser
Gert Doering wrote: > Hi, > > On Mon, Nov 30, 2015 at 09:54:32PM +1300, Jason Haar wrote: > >> eg, if there's no UDP error checking built into openvpn, then shouldn't >> DNS lookups (ie udp inside a udp openvpn tunnel) fail a lot? Or is the >> Internet generally so reliable that it doesn't matte

Re: [Openvpn-users] OpenVPN architecture questions

2015-11-30 Thread Steffan Karger
On Mon, Nov 30, 2015 at 9:54 AM, Jason Haar wrote: > On 29/11/15 22:56, Steffan Karger wrote: >> OpenVPN makes a distinction between control traffic (key/config >> exchange, etc) and data traffic (actual vpn network packets). For >> control packets, OpenVPN has a reliability layer that ACKs packe

Re: [Openvpn-users] OpenVPN architecture questions

2015-11-30 Thread Gert Doering
Hi, On Mon, Nov 30, 2015 at 09:54:32PM +1300, Jason Haar wrote: > eg, if there's no UDP error checking built into openvpn, then shouldn't > DNS lookups (ie udp inside a udp openvpn tunnel) fail a lot? Or is the > Internet generally so reliable that it doesn't matter? (eg 1% packet > loss on Intern

Re: [Openvpn-users] OpenVPN architecture questions

2015-11-30 Thread Jason Haar
On 29/11/15 22:56, Steffan Karger wrote: > OpenVPN makes a distinction between control traffic (key/config > exchange, etc) and data traffic (actual vpn network packets). For > control packets, OpenVPN has a reliability layer that ACKs packets, > retransmits, etc. For data packets, OpenVPN does n

Re: [Openvpn-users] OpenVPN architecture questions

2015-11-30 Thread Steffan Karger
Hi Leroy, On Mon, Nov 30, 2015 at 5:21 AM, Leroy Tennison wrote: > Thank you for your reply, I appreciate it (and the technical > distinctions concerning reliability). Do you have a pointer to a source > for additional information about what is retained in OpenVPN's "state"? > I don't mind doing

Re: [Openvpn-users] OpenVPN architecture questions

2015-11-29 Thread Leroy Tennison
Thank you for your reply, I appreciate it (and the technical distinctions concerning reliability). Do you have a pointer to a source for additional information about what is retained in OpenVPN's "state"? I don't mind doing the reading if I just knew where to look (even a well-labeled C struc

Re: [Openvpn-users] OpenVPN architecture questions

2015-11-29 Thread Steffan Karger
Hi, On Sun, Nov 29, 2015 at 6:26 AM, Leroy Tennison wrote: > If I'm correctly reading into how OpenVPN works the server is in some > sense stateful in that it has to remember the association of the > original source address of a client with the client's VPN address in > order to route a reply pac