Hi, On Mon, Oct 29, 2018 at 05:40:04PM +0100, Jan Just Keijser wrote: > So, the '32' is easily explained. However, the rest of the MTU > calculation baffles me.
Part of this is "peer-id" (+3 bytes) and "the theoretical maximum
crypto + hmac overhead" which 2.3 calculates "for the cipher chosen"
and 2.4 needs to calculale for the worst-case cipher+auth, since it does
not know what the server will push.
In other words, you do not want to know :-) - and the whole "match
configured client/server tun-mtu/link-mtu OCC thingie" is a real nuisance.
gert
--
"If was one thing all people took for granted, was conviction that if you
feed honest figures into a computer, honest figures come out. Never doubted
it myself till I met a computer with a sense of humor."
Robert A. Heinlein, The Moon is a Harsh Mistress
Gert Doering - Munich, Germany [email protected]
signature.asc
Description: PGP signature
_______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
