General list for discussing Bufferbloat
 help / color / mirror / Atom feed
* [Bloat] ECN on vpns?
@ 2014-07-01  5:24 Dave Taht
  0 siblings, 0 replies; only message in thread
From: Dave Taht @ 2014-07-01  5:24 UTC (permalink / raw)
  To: bloat

I presently don't have any ipsec based tunnels running (having
reverted to the much easier to setup openvpn), and we'd discussed what
the rfcs said about ecn a while back:

http://permalink.gmane.org/gmane.comp.embedded.cerowrt.devel/470

And I'd noted that encapsulation seemed to be working even further back:

https://lists.bufferbloat.net/pipermail/bloat/2011-June/000554.html

http://huchra.bufferbloat.net/~d/veryhappynetwork.png

but I haven't ever got around to checking what products, if any,
actually decapsulated ECT(1) correctly back into the original IP
header.

Does anyone know if linux + strongswan/libreswan and/or other forms of
vpn encapsulation (tinq, openvpn, commercial products), are doing the
right thing presently? I would figure openvpn can't (due to doing
compression)...

I see ecn negotiation is in the ikev2 standard...



-- 
Dave Täht

NSFW: https://w2.eff.org/Censorship/Internet_censorship_bills/russell_0296_indecent.article

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2014-07-01  5:24 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2014-07-01  5:24 [Bloat] ECN on vpns? Dave Taht

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox