OpenVPN/openvpn

test environment: test --persist-tun with ping-timeout

開放

#948 建立於 2025年12月30日

 (1 則留言) (1 個反應) (6 位負責人)C (3,314 個分叉)batch import
DCOenhancementfeaturehelp wanted

倉庫指標

星標
 (13,839 顆星)
PR 合併指標
 (30 天內沒有已合併 PR)

描述

So what we lack testing for is ping-timeout reconnects with DCO involved

  • --client side
  • connect
  • ping-timeout (30s) (triggerable via kill $CN on the server's management interface, or possibly via firewall rule in between - though timing is complicated if you want reconnect to succeed)
  • reconnect
  • ping-timeout again (30s)
  • eventually tls-renegotiate (300s)

and verify that pings through the tunnel are working all the time as one would expect this - fail while the server's instance is dead, but do not fail longer than 30-ish seconds.

Maybe also check the server's idea of "when did the client reconnect?" - which gives a good indication of "did ping-timeout actually work?".

The issue at hand is on FreeBSD, but I guess that having test coverage on Linux and Windows won't hurt either...

貢獻者指南