From: James Y. <ja...@op...> - 2015-01-07 00:26:03
|
I've updated the OpenVPN protocol extension doc with additional details, now that more of these features have been implemented in OpenVPN 3. If you are implementing any of these features in OpenVPN 2.x, please review so we can ensure that OpenVPN 2.x and 3 are on the same page with respect to protocol extensions. Changes: 1. Added specific details on DATA_V2/peer-id/float support. 2. For AEAD mode, emphasized that the leading 8 bytes (4 bytes for DATA_V2/peer-id and 4 for packet ID) is all included in the AD. 3. Added specific details on protocol negotiation where the client indicates protocol extension availability with IV_x parameters in the peer info string, and the server responds by pushing directives to the client to enable the feature. 4. Added "TCP nonlinear mode" section, a new protocol extension that is needed by multithreaded TCP servers. James |