0015961: Add VTI support to allow QoS to work in a tunnel

View Issue Details [ Jump to Notes ]

[ Issue History ] [ Print ]

Project

Category

View Status

Date Submitted

Last Update

0015961

ClearOS

app-static-vpn-basic - Static VPN for Home

public

2017-08-02 13:02

2021-11-09 06:58

Reporter

NickH

Assigned To

Priority

normal

Severity

feature

Reproducibility

have not tried

Status

closed

Resolution

won't fix

Platform

OS Version

Product Version

7.3.1

Target Version

Fixed in Version

Summary

0015961: Add VTI support to allow QoS to work in a tunnel

Description

Libreswan from about v3.18 upwards allows the use of VTI interfaces so and route based tunnels. This allows interop with more devices, but, more importantly for ClearOS, it creates new interfaces for the tunnels and QoS can be applied to these interfaces. This then means you can guarantee bandwidth in a tunnel, say for VoIP.
It will require updating Libreswan from 3.15 to 3.18 or later (current is 3.20).
There is more information on the Libreswan Wiki at https://libreswan.org/wiki/Route-based_VPN_using_VTI, [^] comment 4 on this bug https://bugzilla.redhat.com/show_bug.cgi?id=1399883#c4 [^] and also on their mailing list.

At the moment the only way to achieve QoS in a net-net VPN is to use OpenVPN, but this is an entirely manual configuration.

Tags

No tags attached.

Attached Files

Relationships

Notes
(0016061) NickH (developer) 2021-11-09 06:58	VTI support is dead

Issue History
Date Modified	Username	Field	Change
2017-08-02 13:02	NickH	New Issue
2017-08-12 19:41	user2	Status	new => confirmed
2021-11-09 06:58	NickH	Note Added: 0016061
2021-11-09 06:58	NickH	Status	confirmed => closed
2021-11-09 06:58	NickH	Resolution	open => won't fix

ClearOS Bug Tracker