Anyone tried tinc with TCP-BBR?

[Guus Sliepen]

On Sat, Sep 30, 2017 at 11:28:40AM +0800, Bright Zhao wrote:

> I understand the concern of uncertain for TCP-over-TCP by BBR, as the BBR is natively designed to optimize TCP, instead of TCP-over-TCP, but could you articulate a bit more about the beneficial of “sending host when there is a UDP tinc tunnel” in the middle”?

It is *ALWAYS* better to have tinc tunnel packets via UDP instead of
TCP. Regardless of which congestion algorithm is used, TCP-over-TCP is
bad for performance, due to interactions between the two TCP layers. UDP
has no congestion algorithm, so TCP-over-UDP has the same performance as
that TCP layer.

Note that tinc normally autodetects whether UDP is possible or not, and
if not it falls back to TCP, so you should never need to set TCPOnly.
It's mainly a relic from older versions of tinc that did not
automatically detect this. (Though, there are perhaps networks that give
more bandwidth to TCP traffic than UDP traffic, or do other weird things
to UDP traffic, that might benefit from manually forcing TCP.)

-- 
Met vriendelijke groet / with kind regards,
     Guus Sliepen <guus at tinc-vpn.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20171001/73c980ea/attachment.sig>