Re: [Openvpn-users] migrating from lzo to lz4

[Ralf H. <Ral...@ch...>]

* Jonathan K. Bullard <jkb...@gm...>:
> Hi,
> 
> On Thu, Nov 16, 2017 at 5:45 AM, Ralf Hildebrandt
> <Ral...@ch...> wrote:
> > * Jan Just Keijser <ja...@ni...>:
> >
> >> yes, pretty much: all clients that have 'comp-lzo' in the client config and
> >> that support LZ4 can be told to use LZ4 compression by adding
> >>   push "compress lz4"
> >> in the server config.
> >
> > I have a mix of Windows (openvpn 2.3 and 2.4)
> > and Mac (openvpn 2.3 only, I wonder why TunnelBlick shuns 2.4?) clients
> > out in the field.
> 
> Can you expand on that?

Of course:
# zcat -f /var/log/daemon.log* | awk '/IV_VER=/ {printf("%s ",$NF);next;} /IV_PLAT=/ {print $NF;}'  |sort | uniq -c  | sort -n |fgrep mac

      1 IV_VER=2.3.8 IV_PLAT=mac
      1 IV_VER=2.3_git_ec0c1dc IV_PLAT=mac
      1 IV_VER=2.5_git_974513e IV_PLAT=mac
      3 IV_VER=2.3.7 IV_PLAT=mac
      5 IV_VER=2.3.2 IV_PLAT=mac
      8 IV_VER=2.3_git_bae1ad7 IV_PLAT=mac
*     9 IV_VER=2.4_beta1 IV_PLAT=mac
*    14 IV_VER=2.4.1 IV_PLAT=mac
*    20 IV_VER=2.4.0 IV_PLAT=mac
     38 IV_VER=2.3_git_6a4edc7 IV_PLAT=mac
*    42 IV_VER=2.4.3 IV_PLAT=mac
     45 IV_VER=2.3.4 IV_PLAT=mac
*    64 IV_VER=2.4.2 IV_PLAT=mac
    144 IV_VER=2.3.16 IV_PLAT=mac
*   170 IV_VER=2.4.4 IV_PLAT=mac
    173 IV_VER=2.3.15 IV_PLAT=mac
    193 IV_VER=2.3.10 IV_PLAT=mac
    218 IV_VER=2.3.11 IV_PLAT=mac
    387 IV_VER=2.3.12 IV_PLAT=mac
    416 IV_VER=2.3.14 IV_PLAT=mac
    832 IV_VER=2.3.17 IV_PLAT=mac
    898 IV_VER=2.3.6 IV_PLAT=mac
   4853 IV_VER=2.3.18 IV_PLAT=mac

> Tunnelblick has included various versions of OpenVPN 2.4 (along with
> 2.3) for a long time, starting with a Tunnelblick release a year ago
> tomorrow that included OpenVPN 2.4.0_beta1. The current version
> (Tunnelblick 3.7.4a) includes OpenVPN 2.4.4 and OpenVPN 2.3.18.

But it seems that 2.3.x is the default, judging by the numbers of my
tech-agnostic users. I very much like tunneblick's update strategy;
there's nothing worse than the average windows user who tries to
connect using window10 and openvpn 2.3.4 :/
 
-- 
Ralf Hildebrandt                   Charite Universitätsmedizin Berlin
ral...@ch...        Campus Benjamin Franklin
https://www.charite.de             Hindenburgdamm 30, 12203 Berlin
Geschäftsbereich IT, Abt. Netzwerk fon: +49-30-450.570.155