Broadcast-Storm

2010-03-16 Thread Markus Dangl
Hi, I've got a small tinc network (switched) set up and it usually works fine. But sometimes i get echos from my own broadcasts and sometimes this even leads to a broadcast storm (two nodes forwarding the broadcasts in circle, thus flooding the whole network with copies of the same packet). I'm c

Re: Broadcast-Storm

2010-03-16 Thread Donald Pearson
Let me be the first to encourage you. filtering would be an outstanding feature. On 3/16/10, Markus Dangl wrote: > Hi, > > I've got a small tinc network (switched) set up and it usually works > fine. But sometimes i get echos from my own broadcasts and sometimes > this even leads to a broadcast

Re: Broadcast-Storm

2010-03-16 Thread Erik Logtenberg
Personally, I don't think it is a wise plan to try and build packet filtering in tinc. Packet filtering is a complex task, which is quite different from the VPN-task that tinc is designed for. There already are great implementations for packet filtering available, so you'd be re-inventing the wheel

Re: Broadcast-Storm

2010-03-16 Thread Markus Dangl
Erik Logtenberg schrieb: > Personally, I don't think it is a wise plan to try and build packet > filtering in tinc. Packet filtering is a complex task, which is quite > different from the VPN-task that tinc is designed for. There already are > great implementations for packet filtering available, s

Re: Broadcast-Storm

2010-03-16 Thread Sich
Le 16/03/2010 17:32, Markus Dangl a écrit : Hi, I've got a small tinc network (switched) set up and it usually works fine. But sometimes i get echos from my own broadcasts and sometimes this even leads to a broadcast storm (two nodes forwarding the broadcasts in circle, thus flooding the whole n

Re: Broadcast-Storm

2010-03-16 Thread Markus Dangl
> Hello, > > Have you tried to use Spanning Tree Protocol ? Perhaps this could help. > And for filtering you should watch on ebtables for linux station... > > Sich I use STP on all linux bridges. But tinc acts as a bridge itself (in switching mode) and i don't know yet how broadcasts are handled

Re: Broadcast-Storm

2010-03-16 Thread Ivo Smits
Are you sure it's tinc looping the packets? Couldn't it be one of your clients who have a loop in their network? A filter in tinc would probably not even help against this. I don't think it would be a good idea in general. A filter in tinc is likely to result in unexpected behaviour, as it is

Re: Broadcast-Storm

2010-03-16 Thread Markus Dangl
Ivo Smits schrieb: > Are you sure it's tinc looping the packets? Couldn't it be one of your > clients who have a loop in their network? I'm not really sure. How can i find out? I can "wireshark" my tinc interface, but it doesn't really tell me who is causing the problem. > A filter in tinc would

tinc throughput on alix machines

2010-03-16 Thread michael-dev
Hi, I've setup a wlan ap using a an alix 2d2 (AMD Geode LX 500 Mhz + AES Offload) and am now trying to encapsulate the wlan traffic into a vpn (tap bridge). Though even when disabling crypto and digest (there is a crypto engine onboard can be setup to handle tinc encryption), the best throughput

Re: tinc throughput on alix machines

2010-03-16 Thread Mike Bentzen
If you've turned on compression and set it high, it will have a big impact. You might want to play with the compression settings. High compression uses up more CPU and will be slower. You could try turning compression off, but will probably result in more bandwidth being used. But you might see a