From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by lists.bufferbloat.net (Postfix) with ESMTPS id CB0CC3B2A4 for ; Thu, 19 Nov 2020 03:27:29 -0500 (EST) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id D38A6389B9; Thu, 19 Nov 2020 03:28:27 -0500 (EST) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id odayJdtL5XUP; Thu, 19 Nov 2020 03:28:27 -0500 (EST) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 5477C389AA; Thu, 19 Nov 2020 03:28:27 -0500 (EST) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 8C9333BF; Thu, 19 Nov 2020 03:27:28 -0500 (EST) From: Michael Richardson To: Matt Taggart cc: bloat@lists.bufferbloat.net In-Reply-To: <7331bef1-0780-6ff1-26ab-39026f3fffa8@lackof.org> References: <7331bef1-0780-6ff1-26ab-39026f3fffa8@lackof.org> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Subject: Re: [Bloat] configuration on an OpenVPN server X-BeenThere: bloat@lists.bufferbloat.net X-Mailman-Version: 2.1.20 Precedence: list List-Id: General list for discussing Bufferbloat List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Nov 2020 08:27:29 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Matt Taggart wrote: > I would like to configure SQM on an OpenVPN server and I am thinking = about > how to do this. I have already setup piece_of_cake on the upstream > connection(in this case 900Mbit down/250Mbit up). I think that by its= elf > should do a decent job of keeping things fair between all the VPN cli= ents: > they are assigned private IPs and triple-isolate should do the right > thing. But, on the clients it would be nice to autoconfigure what their slice of this is! To do this nicely, really, one needs some bandwidth estimators th= at can be placed on the outside of the encrypted packets. > I don't have much control of the VPN client hosts, but I could recomm= end > openvpn settings if there is anything that would help (can you turn o= n ecn > there, etc?) Communicating the estimates should ideally be part of the OpenVPN protocol. =2D- Michael Richardson . o O ( IPv6 I=C3=B8T consulti= ng ) Sandelman Software Works Inc, Ottawa and Worldwide --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl+2LHAACgkQgItw+93Q 3WVErAgAweFAN2p2yaJh3QGt/zTMWJ7yUyJIhtKIWO3irl9vvlJcPz70FBzGcqBQ W635EytLKitESQe3aGOhRhZ/AThwz65w50pzk+aHryw/F7uuqYDx/UoSVQ2f9PZN FWZCwOaviqy5466c2hfmz2RX5J0lgMEwH3c9yWTP78s+N2pB11ZUDQKsZmjDmK3A Y7U18JlfdIMmwa1LENqJfkY2RLQjh3EZ3eIOqh/vMWeEh4MA629VUCYMO3Q2vAMd +jBQ7R3tpCQG2PvorMtoJ7bSY0YGf4WNUsTdiRGq9XiiSiUiVsd+VHGW8/QHtvZO RE1xy6/2ohZPfyMgPPgiholJuOxN7A== =6vjj -----END PGP SIGNATURE----- --=-=-=--