Jump to content
Not connected, Your IP: 3.235.60.144
iwih2gk

Clarify --- > data channel vs control channel

Recommended Posts

Because I am on Debian buster I can't fully access chacha20 encryption without upgrading OpenVpn from SID.  I don't want to do that since Bullseye is due out next month and then OpenVPN will be high enough to see chacha20 with Eddie on my desktops.  While I am waiting I was looking through the stats on my Eddie client.  I noticed that the VPN control channel is already using chacha20 but of course the VPN data channel is still on AES.

Can someone shed a little light here on exactly what those two channels do independently of each other?  Just trying learn something and this forum is the place to do it.

Share this post


Link to post

Shouldn't be a problem upgrading only openvpn from sid. Use the -t sid option. Unless it wants to upgrade glibc or something. As an alternative, use the official OpenVPN APT repo:
https://community.openvpn.net/openvpn/wiki/OpenvpnSoftwareRepos#DebianUbuntu:UsingOpenVPNaptrepositories

On the difference of Control and Data Channel maybe the channel structure descriptions can shed a liitle light on this:
https://build.openvpn.net/doxygen/network_protocol.html
.


» I am not an AirVPN team member. All opinions are my own and are not to be considered official. Only the AirVPN Staff account should be viewed as such.

» The forums is a place where you can ask questions to the community. You are not entitled to guaranteed answer times. Answer quality may vary, too. If you need professional support, please create tickets.

» If you're new, take some time to read LZ1's New User Guide to AirVPN. On questions, use the search function first. On errors, search for the error message instead.

» If you choose to create a new thread, keep in mind that we don't know your setup. Give info about it. Never forget the OpenVPN logs or, for Eddie, the support file (Logs > lifebelt icon).

» The community kindly asks you to not set up Tor exit relays when connected to AirVPN. Their IP addresses are subject to restrictions and these are relayed to all users of the affected servers.

 

» Furthermore, I propose that your paranoia is to be destroyed. If you overdo privacy, chances are you will be unique amond the mass again.

Share this post


Link to post

When I noticed that Debian moved Bullseye to "Full Freeze" I decided its close enough to stable for me.  I upgraded 3 systems to Bullseye and so far its running the best of any Debian I've ever run.  Been with Debian for a long time so that is a statement with merit for them on this version.  Still have my critical priority OS's running Buster while I "test drive" Bullseye on non-critical work for about another week.  By the way Eddie is running fine on Bullseye and with full NFT on my end.  Of course this resolved the chacha20 issue and now both channels are using it well!

Thank you for the link on the channel differences question.  That read helped me alot.

Share this post


Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
  • Security Check
    Play CAPTCHA Audio
    Refresh Image

×
×
  • Create New...