diff options
author | Arne Schwabe <arne@rfc2549.org> | 2014-01-03 16:02:48 +0100 |
---|---|---|
committer | Arne Schwabe <arne@rfc2549.org> | 2014-01-03 16:02:48 +0100 |
commit | 4f244609f3cf32ae2ab17069f0e267eb59f05f04 (patch) | |
tree | a0aefd5342678cbb7d7e6a0a77c8ea5acc194596 /openvpn/README.IPv6 | |
parent | 9e0e3572c2133f2396d27ced5ddb265b6e604b58 (diff) |
Update build script to include revision, update openvpn code, remove openssl compat (disables export ciphers)
Diffstat (limited to 'openvpn/README.IPv6')
-rw-r--r-- | openvpn/README.IPv6 | 29 |
1 files changed, 10 insertions, 19 deletions
diff --git a/openvpn/README.IPv6 b/openvpn/README.IPv6 index 56c97abb..3d8fbeb2 100644 --- a/openvpn/README.IPv6 +++ b/openvpn/README.IPv6 @@ -35,31 +35,22 @@ over an IPv6 network ("OpenVPN over IPv6"). The code in 2.3.0 supersedes the IPv6 transport patches from JuanJo Ciarlante, formerly located at http://github.com/jjo/openvpn-ipv6 +Android 2.4.0 includes a big overhaul of the IPv6 transport patches +originally implemented for the Android client (ics-openvpn) -Use the following options to select IPv6 transport: +IPv4/IPv6 transport is automatically is selected when resolving addresses. +Use a 6 or 4 suffix to force IPv6/IPv4: --proto udp6 + --proto tcp4 --proto tcp6-client - --proto tcp6-server + --proto tcp4-server --proto tcp6 --client / --proto tcp6 --server -On systems that permit IPv4 connections on IPv6 sockets (Linux by -default, FreeBSD and NetBSD if you turn off the "v6only" sysctl by -running "sysctl -w net.inet6.ip6.v6only=0"), an OpenVPN server can +On systems that allow IPv4 connections on IPv6 sockets +(all systems supporting IPV6_V6ONLY setsockopt), an OpenVPN server can handle IPv4 connections on the IPv6 socket as well, making it a true -dual-stacked server. +dual-stacked server. Use bind ipv6only to disable this behaviour. On other systems, as of 2.3.0, you need to run separate server instances -for IPv4 and IPv6. - -The client side code is not really "dual-stacked" yet, as it does not -automatically try both address families when connecting to a dual-stacked -server. For now, you can achieve this with <connection> stanzas in your -openvpn config: - - <connection> - remote my.dual.stack.server 1194 udp6 - </connection> - <connection> - remote my.dual.stack.server 1194 udp - </connection> +for IPv4 and IPv6.
\ No newline at end of file |