ADCH++ vs LUADCH performance test.

[Derek]

Hmm, from my own tests DC++, AirDC, Apex all connect to all clients. Including old ones like gl or strong and weird ones like flylink. Basically you got 2 choices. Connect and download from all (insecure) or connect and download from secure connections only. This is up to you. Once i setup strict hub connections this wont be an option. All legacy clients would be out of the hub. Asd i said - russians dont hasve strict rules on what they share and download - so they dont care. Other countries are strict but are almost non existant on dc.

[Delion]

Connect and download from all (insecure) or connect and download from secure connections only.

It may be 'secured' with TLS 1.0 and – secure connection may be asked from DC client with 'TLS forced' option. No connection will happen.

Remember, majority of DC clients have TLS enabled (not disabled!) by default. They have TLS allowed, not stricly asked. But! Next DC++ release will force TLS 1.2+ only. AirDC++ dropped TLS 1.0 shortly. FlylinkDC++ builds pre-21972 have TLS forbidden by default (althrought they can run TLS 1.2). Post-21975 builds dropped TLS 1.0 already and forcing 1.2+ by default.

The fact is you can't predict what connection will be successful without TLS, and what client will require TLS version you do not have. What I can tell you for sure is that modern TLS will be enabled by default in every DC client.

...

Hm. The possible solution may be to set strict TLS 1.2, not TLS 1.3 mode. It will filter garbage clients, but most Flylinks (you paid for) will be able to enter.

Think about it.

[Admin]

Not to be a smart ass here but its not up to me to control what clients versions users have. I simply cant. So im leaving hub as it is, both options are valid adc and adcs tls3. It doesn matter to me if i cant connect to a user that is on gl++ here. I will just search for alternative sources to download some file if needed. And once im on latest dc++ i have no issues using tls 1.3 - i strongly recommend using updated clients which i belive is in hubs motd - but cant force it. Why should i.
Also lets not limit too much in settings. Even on best days (sundays) 2200 is nothing to handle for noosibirsk adc hub.
CPU and ram are basically idle at that number. So dont worry about search flood etc. It doesnt matter.

[Delion]

I see.

It doesn matter to me if i cant connect to a user

So you should never ban users because of 'unable to connect'.

[Admin]

True. I removed all can't connect band long time ago.

[Delion]

In the meantime I did the express TLS test on Novosib (:

DC++ 0.868 was used.

385 total filelists requested.

328 OK
57 failed.

So 17% of users are just garbage...

In fact, you got exactly the same problem as Rolex with his NMDCs.
Incompatibility :(

[Admin]

Test again without tls restrictions in dcpp settings.

[Delion]

Test again without tls restrictions

Why the hell should I disable TLS for the only place it will work – on ADCs hub? Is your hub TLS protected? Yes. So wtf?

First, I wanna have my downloads protected. Same as you and probably everyone involved.
Second, TLS enabled by default is already in the DC++ code and every modern DC client.

[Admin]

Well u can do strict tls hub losing all old clients or do a hub that allows all. Aa i pointed out user can setup client to stay secure or not. I'm not gonna block unsecured connections for now. Absolutely no point in doing so.