search

Project-Faster / qpep

A working version of qpep standalone go client/server, designed to accelerate high-latency connections, like those provided by geostationary satellites.
https://docs.projectfaster.org
Other
3 stars 1 forks source link

QPEP and VPN do not work when both are enabled - MUST HAVE #17

Closed mfoxworthy closed 1 year ago

mfoxworthy commented 2 years ago

When I start the VPN and then start qpep, I can't send or receive any data. They do work independently. I am using Cisco AnyConnect. I have not tried any others but looking at VpnHood should show us how to make WinDivert work with qpep and VPNs.

https://github.com/vpnhood/VpnHood

I'd like to get the other minor issues resolved before we tackle this one.

parvit commented 1 year ago

With this change i believe it is possible now to use VPNs in conjunction with QPEP.

The change involves a basic principle, which is that qpep while it still redirects every packet in the system (bar loopback), it will now reinject unchanged the ones that do not belong to interfaces that handle the default route (0.0.0.0).

Independent setup

In this setup:

In this case all packets from the VPN interface are captured and transparently reinjected, they can continue their route as if never intercepted and also the QPep redirection continues to work undisturbed. It does not allow the traffic of the vpn to be accelerated, nor the local addresses accelerated traffic be routed through the vpn. The advantage of this mode is that it works nearly completely automatically as the interfaces are discovered by the client autonomously.

Combined setup

If the VPN does have the ability to push the default gateway to the client when connected (also manual setup could be arranged probably), than it is possible to route accelerated traffic through the VPN. The limitation is that the listening and gateway for QPep are to be set to addresses inside the VPN and have to be set manually in the configuration.

Configurations tested

VPN used: OpenVPN 2.5.7.0 + Windows GUI 11.29.0.0 setup: Comnbined and Independent, UDP and TCP TUN / TAP, UDP/TCP TAP with push of default gateway server-side -> client-side Attached to the post the configurations and certificates used openvpn_configs.zip

Please test and give feedback.

bizzbyster commented 1 year ago

@mfoxworthy @parvit is this working? Should I expect it to work with my Cisco VPN? Let me know if you want me to try it out.

parvit commented 1 year ago

hi unfortunately it does not work on cisco at the moment, i'll send you a private message with the details.

Il Ven 18 Nov 2022, 19:52 bizzbyster @.***> ha scritto:

@mfoxworthy https://github.com/mfoxworthy @parvit https://github.com/parvit is this working? Should I expect it to work with my Cisco VPN? Let me know if you want me to try it out.

— Reply to this email directly, view it on GitHub https://github.com/Project-Faster/qpep/issues/17#issuecomment-1320408196, or unsubscribe https://github.com/notifications/unsubscribe-auth/AWGJD4DB2XDTBEF3VERGGU3WI7F55ANCNFSM55XGEOOQ . You are receiving this because you were mentioned.Message ID: @.***>

bizzbyster commented 1 year ago

ok thanks