ANSWERED Custom TLS re-keying intervals in OPVN client

[gabariala 1]

I'd like to refine the re-keying using OpenVPN manual configurations; what are the custom directives necessary to accomplish this? Can frequent re-keying break or interfere with downloads/uploads?

[Staff 9972]

Hello!

 

Check the directive:

reneg-sec n

 

where n is in seconds

 

in the OpenVPN manual: https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage

 

OpenVPN uses the previous key as long as the new key is not fully re-negotiated. Such "smart overlapping time window" ensures no communications break. Just make sure to not set extremely low values, because a re-keying adds anyway a moderate overhead in bytes, in computation power and you probably don't want that your side is willing to ask for a re-keying immediately after the previous one is over.

 

Kind regards

[gabariala 1]

Thank you staff! Awesome advice. And if we are to apply this in Eddie, under Eddie settings, I'm assuming we simply use "custom directives" with the same inputs? Thanks.

[gabariala 1]

Via Staff:

 

"Hello!

We would recommend that you set reneg-sec time at least to 600 seconds (10 minutes). It should be enough even for the most paranoid vision.

Kind regards
AirVPN Support Team"