User Tools

Site Tools


public:standard_communication_relay_node

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revisionBoth sides next revision
public:standard_communication_relay_node [2017/10/13 17:33] – [squid] fangfufupublic:standard_communication_relay_node [2017/10/13 17:34] – [openvpn] fangfufu
Line 9: Line 9:
 Tinc stands for "There Is No Cabal". It is a VPN software that supports mesh topology. Nodes can be configured to communicate with each other. This is different to the star topology of OpenVPN. You can also configure certain nodes to relay traffic between nodes that cannot directly communicate with each other. My existing tinc network runs on tun. I can't remember why I decided that running it on tun mode is a good idea. In hindsight, I should have run it in tap mode.  Tinc stands for "There Is No Cabal". It is a VPN software that supports mesh topology. Nodes can be configured to communicate with each other. This is different to the star topology of OpenVPN. You can also configure certain nodes to relay traffic between nodes that cannot directly communicate with each other. My existing tinc network runs on tun. I can't remember why I decided that running it on tun mode is a good idea. In hindsight, I should have run it in tap mode. 
 ==== openvpn ==== ==== openvpn ====
-I configure my OpenVPN on static key mode. In this mode, I think it doesn't negotiate cipher encryption cipher using plaintext. This helps me to evade the firewall. I run my OpenVPN in tap mode, so I can bridge the virtual adapter to my router, and create a hotspot that tunnels all traffic. +I configure my OpenVPN on static key mode. In this mode, I think it doesn't negotiate cipher encryption cipher using plaintext. This helps me to evade the firewall. I run my OpenVPN in tap mode, so I can bridge the virtual adapter to my router, and create a hotspot that tunnels all traffic. I also run my OpenVPN over TCP, so it works with kcptun
 ==== squid ==== ==== squid ====
 I use squid for creating an application level load balancing proxy. It supports weighted round robin for load balancing. The weight is done by ping time to upstream proxy.  I use squid for creating an application level load balancing proxy. It supports weighted round robin for load balancing. The weight is done by ping time to upstream proxy.