Feature request: Push static routes to client
#391 aperta il 30 nov 2017
Metriche repository
- Star
- (12.602 stelle)
- Metriche merge PR
- (Merge medio 5h 9m) (1 PR mergiata in 30 g)
Descrizione
I'm currently using OpenVPN to encrypt all employee traffic to our network. It has the ability to "push" routes to the clients. This makes it so I don't have to steal the default gateway and deal with all employee traffic. This also let's me use private IPs for employees. DMCA notices about employee's torrenting is a thing.....
I can do this with DHCP and SoftEther with a large caveat. DHCP has severe limitations on option sizes. You also have to deal with windows which uses a different option. If an option is bigger than 255 bytes problems occur. There is an RFC(rfc3396) to handle this but it's pretty much unimplemented everywhere. This limits the number of networks I can push to the clients.
I have over 100 networks that are already aggregated to the largest prefix possible. Without the VPN client itself setting static routes I'm stuck.
The main issue with implementing this is the different route commands on platforms. However, it's gotten pretty standard at least on each supported OS. Windows is easy and I'm pretty sure an API call, Linux is pretty much the ip command and all that you should support, and I'm sure Apple has been using the same intuitive thing forever.