Hi, budy. i have read source code, somewhere i could not understand. ^_^.

why does not the raw packet sent by client need modified ?
for example, changing source ip etc.

Is the non-modify raw packet sent to tun0 directly always routed back correctly ?

Is it just Yet Another VPN or something special? I see it gaining stars on Github, but don't see what is the point from cursory glance over the README.

The repository description (now just "Simple VPN") should mention the distinguishing characteristic of the project, also there should be some comparison with other competiting project in README.

Hi, it is alway say 'accept tcp [::]:9001: i/o timeout', it may be need to check the error type

i try to give solution like below:

              if err != nil {
			if !s.isShuttingDown {
				if !err.(net.Error).Timeout() {
					log.Infof("Listener err: %s", err.Error())
				}
			}
		} else {
			s.handleClient(conn)
		}

Try to run the subnet client run on the windows.
I have installed golang and git on windows.
with the following command:
set GOPATH=C:\Users\37406
go get -u github.com/twitchyliquid64/subnet

there goes the error message:

github.com/twitchyliquid64/subnet/subnet

src\github.com\twitchyliquid64\subnet\subnet\client.go:111:12: undefined: SetDevIP
src\github.com\twitchyliquid64\subnet\subnet\client.go:118:29: undefined: GetNetGateway
src\github.com\twitchyliquid64\subnet\subnet\client.go:126:13: undefined: AddRoute
src\github.com\twitchyliquid64\subnet\subnet\client.go:143:10: undefined: SetDefaultGateway
src\github.com\twitchyliquid64\subnet\subnet\client.go:150:9: undefined: SetInterfaceStatus
src\github.com\twitchyliquid64\subnet\subnet\reverser.go:48:8: undefined: DelRoute
src\github.com\twitchyliquid64\subnet\subnet\server.go:79:11: undefined: SetDevIP

Did i miss something or the subnet client does not design to run on windows?

Cheers on a neat package, and one that has made it to hackernews :)

Your project structure is fighting the Go ecosystem. You should modify the structure so that you are not checking in src. This makes your package non go get-able.

The contents of your subnet directory should become the contents of your root project available at github.com/twitchyliquid64/subnet and then (with your README still in the project root), change it from:

git clone https://github.com/twitchyliquid64/subnet
cd subnet
export GOPATH=`pwd`
go build -o subnet *.go

to

go get github.com/twitchyliquid64/subnet

go get does two things, first, it pulls the files down into the user's GOPATH, and, second, it runs go install in that directory. This should make your binary available on their system without them altering their GOPATH. Folks should not have to alter their GOPATH to work with your package :)

This will automatically pull in the required dependencies. If you are worried that the wrong version of the dependencies would be pulled in, then you need to vendor them. To vendor your dependencies, after you have moved https://github.com/twitchyliquid64/subnet/tree/master/src/subnet to https://github.com/twitchyliquid64/subnet, then you can run the soon-to-be-official vendoring tool dep (https://github.com/golang/dep) or any other vendoring tool (govend, govendor, glide, ...). This will ensure that the expected versions of dependencies are used when the binary is installed.

Cheers!

hi.
after i run: sudo subnet -gw 182.168.69.1 -network 182.168.69.4/24 -cert client.certPEM -key client.keyPEM -ca ca.certPEM server-ip

it shows:
2018/02/27 16:50:53 Created iface utun1
2018/02/27 16:50:54 Remote presented certificate 8947204077936876025 with time bounds (2018-02-27 06:47:34 +0000 UTC-2018-08-27 05:47:34 +0000 UTC). Verification error for certificate:
2018/02/27 16:50:54 IP of utun1 set to 182.168.69.4, localNetMask 255.255.255.0
2018/02/27 16:50:54 Default gateway is 192.168.1.1 on en0
2018/02/27 16:50:54 Traffic to my-vps-ip now routed via 192.168.1.1 on en0)

there is such words above: "Verification error for certificate: "

in china, then i open firefox,sometimes i can't visit some blogspot.com sites.
why?it's bcoz "Verification error for certificate: "?
how to fix it?tks

I've looked at code to find source of "Fix throughput issues - 5% of normal connection speed. Latency is good though." and found next issues:

1. using gob encoder for transferring packed is big overhead - it's possible just to send uint16 for size and then just []byte of packet - in case of gob encode you have each time allocated new memory + processing (the same for decoding) (if you really need to pack it to some structure and so on on you can choose cheaper encoding, look at https://github.com/alecthomas/go_serialization_benchmarks)
2. using channels is very expensive in this case: you need to allocate memory for each packet + internal it's mutex lock/unlock - if you'll use pre-allocated buffer it's no additional memory operations + just write to stream - on client this may be just on thread, on server cheaper solution will be to use mutex - lock before write, write and unlock
3. in case if you really want to use channels you can use unbuffered ones - you'll still has linux kernel network buffers, but if your application is unable to process so much packets as you're receiving it's better to drop them on kernel level, so connection will slow-down but no additional packet lost created (maybe I'm not right, but from experience this way is better - creating one more buffer is additional cpu usage)

Looks like your code allows proper split vpn setups where certain trafficway gets forced over VPN and other does not.

This is something I need at home for home automation aspects.
I am able to build golang based iOS and android apps with a GUI and so think it might not be too hard to build a VPN client for mobiles that supports split also.

Then certain traffic on your phone will be forced to go over the VPN and other just standard network.

It feels lame how a user can't do this splitting .

Wandering if this is a good idea. I would be open to collaborating with others on this. I can get the mobile code base going with golang code integration.

Hi,
I am following the guide to accessing a LAN from a client; running this command: sudo go/bin/subnet -gw 192.168.69.1 -network 192.168.69.4/24 -cert Downloads/client.certPEM -key Downloads/client.keyPEM -ca Downloads/ca.certPEM my.server.ip does not report any error, however while it is running I can't ping any domains, however I can access them via IP alone.

I am on Gentoo Linux with openrc and using Go version 1.8.3 amd64. This issue does not seem to happen on the server. What can I do to get my DNS working again while I use subnet?

Hello,
I'm getting an error when getting subnet :

> go get -u github.com/twitchyliquid64/subnet
# github.com/twitchyliquid64/subnet/subnet/conn
src/github.com/twitchyliquid64/subnet/subnet/conn/tls.go:68: unknown tls.Config field 'VerifyPeerCertificate' in struct literal

Found this but I don't have a clue how to fix it myself
strukturag/spreed-webrtc#278