From: jack seth <bird_112@hotmail.com>
To: "netfilter@vger.kernel.org" <netfilter@vger.kernel.org>
Subject: Is my connection timing out here?
Date: Wed, 11 Mar 2015 12:46:33 -0500 [thread overview]
Message-ID: <SNT152-W63AE5FC6C5440BC174F5A8BF190@phx.gbl> (raw)
I am trying to out my Openvpn config using DH parameters 16384 size keys (I know I know but it is testing :)). I am using my working config except for substituting my large keys. My config works with a 8192 sized DH but not with 16384. I am getting a 'inactivity timeout' from the server after about 3 minutes during the TLS handshake. I have read it will take longer to negotiate with these large keys. Based on other replies I have gotten I suspect that it is the linux/iptables connection that is timing out and not OpenVPN.
I have tried changing this command to a higher timeout number but it doesn't help. sudo sysctl -w net.netfilter.nf_conntrack_udp_timeout_stream=???
How can I track down what is happening here?
next reply other threads:[~2015-03-11 17:46 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-03-11 17:46 jack seth [this message]
2015-03-19 14:42 ` Is my connection timing out here? jack seth
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=SNT152-W63AE5FC6C5440BC174F5A8BF190@phx.gbl \
--to=bird_112@hotmail.com \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.