OpenVPN/openvpn

test environment: test --persist-tun with ping-timeout

Open

#948 aperta il 30 dic 2025

Vedi su GitHub
 (1 commento) (1 reazione) (6 assegnatari)C (3314 fork)batch import
DCOenhancementfeaturehelp wanted

Metriche repository

Star
 (13.839 star)
Metriche merge PR
 (Nessuna PR mergiata in 30 g)

Descrizione

So what we lack testing for is ping-timeout reconnects with DCO involved

  • --client side
  • connect
  • ping-timeout (30s) (triggerable via kill $CN on the server's management interface, or possibly via firewall rule in between - though timing is complicated if you want reconnect to succeed)
  • reconnect
  • ping-timeout again (30s)
  • eventually tls-renegotiate (300s)

and verify that pings through the tunnel are working all the time as one would expect this - fail while the server's instance is dead, but do not fail longer than 30-ish seconds.

Maybe also check the server's idea of "when did the client reconnect?" - which gives a good indication of "did ping-timeout actually work?".

The issue at hand is on FreeBSD, but I guess that having test coverage on Linux and Windows won't hurt either...

Guida contributor