Jump to content
Not connected, Your IP:
Sign in to follow this  

TLS keydir direction usage

Recommended Posts

Good Day,

with newer versions of pfsense the option is there to set the option to:
direction 1
direction 0
use default direction.

going forward what does Staff suggest we set this option too?


Share this post

Link to post


key-direction 1 when you use TLS Auth key (i.e. you connect to entry-IP addresses 1 and 2).

Omit it when you use TLS Crypt (i.e. you connect to entry-IP addresses 3 and 4), because it's not pertaining to TLS Crypt.

For an explanation, look for secret file [direction]  and –key-direction in the manual https://openvpn.net/community-resources/reference-manual-for-openvpn-2-4/

If you run OpenVPN 2.4 or higher version, TLS Crypt is recommended because it encrypts the whole Control Channel, with the important side effect to make OpenVPN "fingerprint" not detectable by Deep Packet Inspection (some ISPs, when they detect OpenVPN "fingerprint", enforce traffic shaping).

Kind regards

Share this post

Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Security Check
    Play CAPTCHA Audio
    Refresh Image
Sign in to follow this  

  • Create New...