Infrastructure/ansible
5
0
Fork 0
Code Issues Pull requests 3 Projects Releases Packages Wiki Activity Actions

Disable persist-tun for openvpn

Browse source 
This should solve the issue where RHEL7 machines that get a network
hiccup need an OpenVPN restart to restore their routes.

The code is broken in the current upstream OpenVPN release, such that
it does tear down some of the routes during a ping-restart (when the
connection is dropped due to network hiccups), but the reconnection
code does not restore the routes.
I am working on an upstream patch to fix this, but in the meantime
disabling persist-tun will make sure that OpenVPN does the entire
initialization upon reconnection, which makes sure that all routes
are created.

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2015-10-21 18:26:32 +00:00
parent e1edce6717
commit b1db3bafd8
3 changed files with 0 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

1
files/openvpn/client.conf
View file

@ -13,7 +13,6 @@ resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt

1
roles/openvpn/client/files/client.conf
View file

@ -13,7 +13,6 @@ resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt

1
roles/openvpn/server/files/server.conf
View file

@ -6,7 +6,6 @@ comp-lzo
ping-timer-rem
persist-tun
persist-key
ca ca.crt