From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 596271381F3 for ; Mon, 9 Sep 2013 18:39:57 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id D49BFE0BC5; Mon, 9 Sep 2013 18:39:47 +0000 (UTC) Received: from mail-we0-f181.google.com (mail-we0-f181.google.com [74.125.82.181]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id BD08BE0BB3 for ; Mon, 9 Sep 2013 18:39:46 +0000 (UTC) Received: by mail-we0-f181.google.com with SMTP id p61so4484294wes.26 for ; Mon, 09 Sep 2013 11:39:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:reply-to:to:subject:date:user-agent:references:in-reply-to :mime-version:content-type:content-transfer-encoding:message-id; bh=6wX0MPAU+SVFpzne/B25/+TP3Od7eLmT4Iv8jDudNk8=; b=FeN33T7HCp2A23gex9jBodOvU7BWtNY52MJAjrvlt8bteGfXiJSxMJTNQSiTyUig9M vByXOPwLhfov1KDsFlfuhIc6D+ktCm9WlG338rS7QDXcT34iWgkZj3I1hz55wDK3tN2Z /zjG2RsYB1C3XWg5nebMMmIPTgDFxWvcsNUtmTomM7yf7he5y0u2lb2rwp4twBCzzaDO 9c1TpA9MYH2QcQ9rYD1qjniamkoUS5ykNcplIXOhLZjoJrRi40TURcXyubdKw/UXVzBD sewy583QRV1HXmj83TYa5LO3ZMR34EhwuIR8gP85JQ4is2gc5rTnPuwLCqzZ+8fMP1Wf Gr5Q== X-Received: by 10.180.185.77 with SMTP id fa13mr9467560wic.58.1378751985428; Mon, 09 Sep 2013 11:39:45 -0700 (PDT) Received: from dell_xps.localnet (230.3.169.217.in-addr.arpa. [217.169.3.230]) by mx.google.com with ESMTPSA id jf2sm19771672wic.2.1969.12.31.16.00.00 (version=TLSv1.2 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 09 Sep 2013 11:39:44 -0700 (PDT) From: Mick To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] GRE link state detection Date: Mon, 9 Sep 2013 19:39:31 +0100 User-Agent: KMail/1.13.7 (Linux/3.10.7-gentoo; KDE/4.10.5; x86_64; ; ) References: <52289A13.6010403@thegeezer.net> <201309071923.39255.michaelkintzios@gmail.com> <522D9F1F.3070202@thegeezer.net> In-Reply-To: <522D9F1F.3070202@thegeezer.net> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart2692144.Budsn0qNNb"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <201309091939.33103.michaelkintzios@gmail.com> X-Archives-Salt: 7bbfe3c4-b50b-4276-a038-a66f49a21b65 X-Archives-Hash: 43b69fefde648039e48afd4b59a7dd82 --nextPart2692144.Budsn0qNNb Content-Type: Text/Plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable On Monday 09 Sep 2013 11:12:47 thegeezer wrote: > asking the same question on the bird mailing list, was recommended some > values to make bird down the GRE tunnels faster. > multiple tunnels are required due to the very unreliable internet, so > one tunnel goes over one dsl link, another goes over another. > DPD timeouts are 30seconds minimum, which is too long. > i'll keep you posted if the bird recommendations works better You can tune dpd_delay and dpd_retry in racoon.conf (if you are using ipsec- tools) or the equivalent in open/strongswan. I think strongswan sends=20 keepalives every 20 seconds or so and it can be increased if you prefer it = so. =2D-=20 Regards, Mick --nextPart2692144.Budsn0qNNb Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.20 (GNU/Linux) iQEcBAABAgAGBQJSLhXlAAoJELAdA+zwE4YedqgH/3Q9gz0M1mDDkt7mDeBjnuBK 1grygoxUOm9QDuAk5y16EgXjDYCxRmJ1QXdZDf03v4tKoq4iXuYbdCqON4SxLlfK vw27kwp3bL0Ox8/OQPw1KY+y/oKA6Rs4MGUdC3uOd5Plkw0xL0rMNcfcvI0Kw53U Bq8recBLwf9T/Q42Kz9X0RJuPFouvN2mP2fKBsDKfRywylCwcO2WrQTvwisX9APs Vs+aNliQkpKsD3ex7WGdtWxXnyTrGV4tUC4jFVJ/a5SZFs5To2RKKBEJsmylBAAc gTMhz0Jmw9wxCWgH3dgNsR2JqyhA6A++caIe4br0WCnfjCuzk6OopEpEWB6LSw8= =PEV9 -----END PGP SIGNATURE----- --nextPart2692144.Budsn0qNNb--