Changes between Version 4 and Version 5 of VORACLE
- Timestamp:
- 10/03/18 23:40:40 (6 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
VORACLE
v4 v5 35 35 == Mitigation == 36 36 37 The compression feature in OpenVPN is dynamic and by using the `--compress` or `--comp-lzo` options, the wire protocol used between the OpenVPN clients and server changes slightly, to encapsulate packets in what is referred to a ''compression frame''. This does not mean data this frame carries is always compressed, but it *might* be compressed, all depending on a flag in the frame header.37 The compression feature in OpenVPN is dynamic and by using the `--compress` or `--comp-lzo` options, the wire protocol used between the OpenVPN clients and server changes slightly, to encapsulate packets in what is referred to as a `compression frame`. This does not mean data this frame carries is always compressed, but it *might* be compressed, all depending on a flag in the frame header. 38 38 39 39 It is important to remember that `--comp-lzo` or `--compress` must be used on both the local and the remote side. If only one side uses any of these options, it will not be a functional VPN tunnel. Further, `--comp-lzo` and `--compress` have overlapping feature support, meaning that `--compress lzo` is identical to `--comp-lzo yes`or `--comp-lzo adaptive`.