nils/gluon
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

gluon-web-mesh-vpn-fastd: clarify config of default crypto method (#1502)

Browse Source
This commit is contained in:
Ruben Barkow 2018-08-06 21:36:05 +02:00 committed by Andreas Ziegler
parent f6dee4386c
commit 2b16257896
2 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
docs/features/vpn.rst
View File

@ -32,8 +32,9 @@ increase throughput, although in practice the gain is minimal.
**Site configuration:** **Site configuration:**
1) Install ``gluon-web-mesh-vpn-fastd`` in ``site.mk`` 1) Add the feature ``web-mesh-vpn-fastd`` in ``site.mk``
2) Set ``mesh_vpn.fastd.configurable = true`` in ``site.conf`` 2) Set ``mesh_vpn.fastd.configurable = true`` in ``site.conf``
3) Optionally add ``null`` to the ``mesh_vpn.fastd.methods`` table if you want "Performance mode" as default (not recommended)
**Gateway configuration:** **Gateway configuration:**
@ -54,4 +55,3 @@ socket can be interrogated, after installing for example `socat`.
opkg update opkg update
opkg install socat opkg install socat
socat - UNIX-CONNECT:/var/run/fastd.mesh_vpn.socket socat - UNIX-CONNECT:/var/run/fastd.mesh_vpn.socket

3
package/gluon-web-mesh-vpn-fastd/luasrc/lib/gluon/config-mode/model/admin/mesh_vpn_fastd.lua
View File

@ -11,6 +11,7 @@ mode.template = "mesh-vpn-fastd"
local methods = uci:get('fastd', 'mesh_vpn', 'method') local methods = uci:get('fastd', 'mesh_vpn', 'method')
if util.contains(methods, 'null') then if util.contains(methods, 'null') then
-- performance mode will only be used as default, if it is present in site.mesh_vpn.fastd.methods
mode.default = 'performance' mode.default = 'performance'
else else
mode.default = 'security' mode.default = 'security'
@ -19,6 +20,8 @@ end
function mode:write(data) function mode:write(data)
local site = require 'gluon.site' local site = require 'gluon.site'
-- methods will be recreated and filled with the original values from site.mesh_vpn.fastd.methods
-- if performance mode was selected, and the method 'null' was not present in the original table, it will be added
local methods = {} local methods = {}
if data == 'performance' then if data == 'performance' then
table.insert(methods, 'null') table.insert(methods, 'null')