Skip to content

Commit

Permalink
Change default of "topology" to "subnet"
Browse files Browse the repository at this point in the history
Change-Id: Iede3e7c028cbb715e28bc88c7e583f84dadc02c8
Signed-off-by: Frank Lichtenheld <[email protected]>
Acked-by: Arne Schwabe <[email protected]>
Message-Id: <[email protected]>
URL: https://www.mail-archive.com/[email protected]/msg27627.html
Signed-off-by: Gert Doering <[email protected]>
  • Loading branch information
flichtenheld authored and cron2 committed Apr 3, 2024
1 parent e2ff916 commit 32e6586
Show file tree
Hide file tree
Showing 3 changed files with 19 additions and 11 deletions.
9 changes: 9 additions & 0 deletions Changes.rst
Original file line number Diff line number Diff line change
Expand Up @@ -23,6 +23,15 @@ NTLMv1 authentication support for HTTP proxies has been removed.
``persist-key`` option has been enabled by default.
All the keys will be kept in memory across restart.

Default for ``--topology`` changed to ``subnet``
Previous releases used ``net30`` as default. This only affects
configs with ``--dev tun`` and only IPv4. Note that this
changes the semantics of ``--ifconfig``, so if you have manual
settings for that in your config but not set ``--topology``
your config might fail to parse with the new version. Just adding
``--topology net30`` to the config should fix the problem.
By default ``--topology`` is pushed from server to client.

Overview of changes in 2.6
==========================

Expand Down
19 changes: 9 additions & 10 deletions doc/man-sections/vpn-network-options.rst
Original file line number Diff line number Diff line change
Expand Up @@ -495,11 +495,17 @@ routing.

``mode`` can be one of:

:code:`subnet`
Use a subnet rather than a point-to-point topology by
configuring the tun interface with a local IP address and subnet mask,
similar to the topology used in ``--dev tap`` and ethernet bridging
mode. This mode allocates a single IP address per connecting client and
works on Windows as well. This is the default.

:code:`net30`
Use a point-to-point topology, by allocating one /30 subnet
per client. This is designed to allow point-to-point semantics when some
or all of the connecting clients might be Windows systems. This is the
default.
or all of the connecting clients might be Windows systems.

:code:`p2p`
Use a point-to-point topology where the remote endpoint of
Expand All @@ -508,15 +514,8 @@ routing.
connecting client. Only use when none of the connecting clients are
Windows systems.

:code:`subnet`
Use a subnet rather than a point-to-point topology by
configuring the tun interface with a local IP address and subnet mask,
similar to the topology used in ``--dev tap`` and ethernet bridging
mode. This mode allocates a single IP address per connecting client and
works on Windows as well.

*Note:* Using ``--topology subnet`` changes the interpretation of the
arguments of ``--ifconfig`` to mean "address netmask", no longer "local
arguments of ``--ifconfig`` to mean "address netmask", and not "local
remote".

--tun-mtu args
Expand Down
2 changes: 1 addition & 1 deletion src/openvpn/options.c
Original file line number Diff line number Diff line change
Expand Up @@ -796,7 +796,7 @@ init_options(struct options *o, const bool init_gc)
o->gc_owned = true;
}
o->mode = MODE_POINT_TO_POINT;
o->topology = TOP_NET30;
o->topology = TOP_SUBNET;
o->ce.proto = PROTO_UDP;
o->ce.af = AF_UNSPEC;
o->ce.bind_ipv6_only = false;
Expand Down

0 comments on commit 32e6586

Please sign in to comment.