From 57ad4c1e4e1f9120625f7e07d2546b51d479363c Mon Sep 17 00:00:00 2001 From: varac Date: Wed, 18 Mar 2015 14:00:06 +0100 Subject: increased vpn fragment size, also min. req. client version --- hiera/chameleon.yaml | 3 ++- hiera/seahorse.yaml | 2 +- hiera/vpn1.yaml | 2 +- hiera/web1.yaml | 3 ++- 4 files changed, 6 insertions(+), 4 deletions(-) diff --git a/hiera/chameleon.yaml b/hiera/chameleon.yaml index 6899170..ebb658d 100644 --- a/hiera/chameleon.yaml +++ b/hiera/chameleon.yaml @@ -42,6 +42,7 @@ definition_files: "openvpn_configuration": { "auth": "SHA1", "cipher": "AES-128-CBC", + "fragment": 1400, "keepalive": "10 30", "tls-cipher": "DHE-RSA-AES128-SHA", "tun-ipv6": true @@ -763,7 +764,7 @@ webapp: unlimited_prefix: UNLIMITED client_version: max: ~ - min: "0.5" + min: "0.7" couchdb_webapp_user: password: enfhmsmcLc3Az3GF6TFKwRk99Iqjm2ew salt: 478bf7e8ca879a9711b279055f00153e diff --git a/hiera/seahorse.yaml b/hiera/seahorse.yaml index a3529ad..88975e8 100644 --- a/hiera/seahorse.yaml +++ b/hiera/seahorse.yaml @@ -37,7 +37,7 @@ openvpn: configuration: auth: SHA1 cipher: AES-128-CBC - fragment: 1500 + fragment: 1400 keepalive: "10 30" tls-cipher: DHE-RSA-AES128-SHA tun-ipv6: true diff --git a/hiera/vpn1.yaml b/hiera/vpn1.yaml index 1de3554..7a163b4 100644 --- a/hiera/vpn1.yaml +++ b/hiera/vpn1.yaml @@ -33,7 +33,7 @@ openvpn: configuration: auth: SHA1 cipher: AES-128-CBC - fragment: 1500 + fragment: 1400 keepalive: "10 30" tls-cipher: DHE-RSA-AES128-SHA tun-ipv6: true diff --git a/hiera/web1.yaml b/hiera/web1.yaml index a7a01c3..6f2992c 100644 --- a/hiera/web1.yaml +++ b/hiera/web1.yaml @@ -35,6 +35,7 @@ definition_files: "openvpn_configuration": { "auth": "SHA1", "cipher": "AES-128-CBC", + "fragment": 1400, "keepalive": "10 30", "tls-cipher": "DHE-RSA-AES128-SHA", "tun-ipv6": true @@ -288,7 +289,7 @@ webapp: unlimited_prefix: UNLIMITED client_version: max: ~ - min: "0.5" + min: "0.7" couchdb_webapp_user: password: pg9XGGdt4Dr3WcM9PYDqMmxxKHTpvsc9 salt: 7e8868f8c4775290fd37d2f520d13672 -- cgit v1.2.3