Re: why not check the data-plane liveness?

2020-03-06 Thread Fufu Fang
The meta-protocol runs on TCP. If UDP is down, it will fallback to TCP only. It does say " Since version 1.0.10, tinc will automatically fall back to TCP if direct communication via UDP is not possible." in the link below: https://www.tinc-vpn.org/documentation/Solving-problems.html FF On Tue,

How does tinc handle "unknown cipher"?

2020-03-06 Thread Fufu Fang
Hi, So my Debian machines are all using the follow cipher + digest: Cipher = chacha20-poly1305 Digest = blake2b512 However my OpenWRT router does not have chacha20-poly1305 and blake2b512 in its SSL library, so it uses the following: Cipher = aes-128-cbc Digest = sha512 I am a bit surprised th

Re: how to pick cipher for AES-NI enabled AMD GX-412TC SOC tincd at 100% CPU

2020-04-04 Thread Fufu Fang
I basically end up using the same cipher suite as Wireguard, it works quite well on my Atom N2800, which does not have AES-NI. It is now 3 times as fast. Cipher = chacha20-poly1305 Digest = blake2b512 On Sat, 2020-04-04 at 20:02 +0200, Jelle de Jong wrote: > Hello everybody, > > First a big tha