]> git.ipfire.org Git - people/ummeegge/ipfire-2.x.git/commit
OpenVPN: Reorder ifconfig for N2N [Do not merge this] ovpn_n2n_ifconfig
authorErik Kapfer <ummeegge@ipfire.org>
Sat, 28 Mar 2020 09:25:58 +0000 (10:25 +0100)
committerErik Kapfer <ummeegge@ipfire.org>
Sat, 28 Mar 2020 09:25:58 +0000 (10:25 +0100)
commit1edbec992e1bbf77932ce6fcd147a3522020d1dd
treee1ecc5895d5eb15d85b87036899893f3be6f7685
parent0b1f09d581cb93f316e00f5983c27275ab681ff1
OpenVPN: Reorder ifconfig for N2N [Do not merge this]

N2N currently reserves a /24 subnet for each connection. This patch should spare network space
cause the P2P topology only needs a /30 subnet.

Open Questions:
- The firewalling of N2N needs to be adapted (and deeper checked in general) since openvpnctrl uses always a DROP for *.0/30 for OVPNBLOCK.
- An overlaping of different N2N subnets should be prevented.
- More testings needs to be done also with already existing connections.

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
html/cgi-bin/ovpnmain.cgi
langs/en/cgi-bin/en.pl