Re: why not check the data-plane liveness?

2020-03-06 Thread Fufu Fang
The meta-protocol runs on TCP. If UDP is down, it will fallback to TCP only. It does say " Since version 1.0.10, tinc will automatically fall back to TCP if direct communication via UDP is not possible." in the link below: https://www.tinc-vpn.org/documentation/Solving-problems.html FF On Tue,

How does tinc handle "unknown cipher"?

2020-03-06 Thread Fufu Fang
Hi, So my Debian machines are all using the follow cipher + digest: Cipher = chacha20-poly1305 Digest = blake2b512 However my OpenWRT router does not have chacha20-poly1305 and blake2b512 in its SSL library, so it uses the following: Cipher = aes-128-cbc Digest = sha512 I am a bit surprised th