I agree with you, and think that the best approach would be to have a
daemon listening on one port which can then hand fork off a new process
onto a new port using a new tun/tap dev.
As for routing and bits, have you looked at bird?
Mark
James Yonan wrote:
Claas Hilbrecht <claas+maillinglists.openvpn@xxxxxxxxxxxxxxxxx> said:
configuration template, and a new OpenVPN process would be forked off,
running on a a separate dynamic port (allocated from a pool), and using a
separate tun/tap interface.
I'm not sure but isn't there a limit for the maximum tun/tap Devices
somewhere? If not I think this is the best method. If yes and the limit is
small (say 15-30 devices) I think the other method is more useful.
Depends on the OS. I believe Linux allows quite a few (256?). On the other
hand I doubt Windows could even approach that. Does anyone have practical
experience on these limits?
My plan is that the initial version of the forking daemon will follow the
current OpenVPN model of one process, port, and tun/tap dev for each tunnel,
but ease the configuration by automating the instantiation of tunnel processes
on a demand basis.
Eventually, if we need to implement tun/tap sharing between tunnels, we will
need a userspace routing/firewalling library. Fortunately, the tinc project
has already developed something along these lines, and I expect we will use it
if we need to cross that bridge.
James
-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help us help
YOU! Click Here: http://sourceforge.net/donate/
_______________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users
--
Mark Olliver
Thermeon Europe Ltd.
Email mpo@xxxxxxxxxxxxxxxxxx
Web www.thermeoneurope.com
Support 0906 515 0908
Int. Support +44 1293 864 341
Support Email support@xxxxxxxxxxxxxxxxxx
Sales +44 1293 864 334
Sales Email sales@xxxxxxxxxxxxxxxxxx
____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users
|