OpenVPN/openvpn

test environment: test --persist-tun with ping-timeout

开放

#948 创建于 2025年12月30日

 (1 条评论) (1 个反应) (6 位负责人)C (3,314 个派生)batch import
DCOenhancementfeaturehelp wanted

仓库指标

星标
 (13,839 个星标)
PR 合并指标
 (30 天内没有已合并 PR)

描述

So what we lack testing for is ping-timeout reconnects with DCO involved

  • --client side
  • connect
  • ping-timeout (30s) (triggerable via kill $CN on the server's management interface, or possibly via firewall rule in between - though timing is complicated if you want reconnect to succeed)
  • reconnect
  • ping-timeout again (30s)
  • eventually tls-renegotiate (300s)

and verify that pings through the tunnel are working all the time as one would expect this - fail while the server's instance is dead, but do not fail longer than 30-ish seconds.

Maybe also check the server's idea of "when did the client reconnect?" - which gives a good indication of "did ping-timeout actually work?".

The issue at hand is on FreeBSD, but I guess that having test coverage on Linux and Windows won't hurt either...

贡献者指南