X-Git-Url: https://www.tinc-vpn.org/git/browse?p=tinc;a=blobdiff_plain;f=doc%2Ftinc.texi;h=fdcbf45cf2c75c2cba7884d74ce9e60c9cb97a96;hp=dea5a9b0c6fb305823d269e7f5ac64abf44e285c;hb=ee96ccabbbf0180d5631d3c22838456f28ee9c15;hpb=8caa1b9d750bb7467d1c3330780b05ac2bbf9883 diff --git a/doc/tinc.texi b/doc/tinc.texi index dea5a9b0..fdcbf45c 100644 --- a/doc/tinc.texi +++ b/doc/tinc.texi @@ -12,7 +12,7 @@ This is the info manual for tinc, a Virtual Private Network daemon. -Copyright 1998 Ivo Timmermans +Copyright 1998,199,2000 Ivo Timmermans Permission is granted to make and distribute verbatim copies of this manual provided the copyright notice and @@ -34,7 +34,7 @@ Copyright 1998 Ivo Timmermans @page @vskip 0pt plus 1filll -Copyright @copyright{} 1998 Ivo Timmermans +Copyright @copyright{} 1998,1999,2000 Ivo Timmermans Permission is granted to make and distribute verbatim copies of this manual provided the copyright notice and @@ -765,6 +765,13 @@ have two connections, we also have two protocols. The protocol used for the UDP data is the ``data-protocol,'' the other one is the ``meta-protocol.'' +The reason we don't use TCP for both protocols is that UDP is much +better for encapsulation, even while it is less reliable. The real +problem is that when TCP would be used to encapsulate a TCP stream +that's on the private network, for every packet sent there would be +three ACK's sent instead of just one. Furthermore, if there would be +a timeout, both TCP streams would sense the timeout, and both would +start resending packets. @c ================================================================== @node Security, , The Connection, Technical information