Menu
▾
▴
Re: [Openvpn-devel] [Openvpn-users] Does --multihome work in latest OpenVPN release?
|
From: Arthur T. <ar...@ps...> - 2010-07-20 20:08:43
|
On Tuesday 20 July 2010 01:25:47 David Sommerseth wrote: > On 19/07/10 22:32, Arthur Titeica wrote: > > On Sunday 02 May 2010 02:34:47 Peter Rabbitson wrote: > >> David Sommerseth wrote: > >>> On 01/05/10 21:39, Peter Rabbitson wrote: > >>>> Peter Rabbitson wrote: > >>>>> Peter Rabbitson wrote: > >>>>>> Samuli Seppänen wrote: > >>>>>>> Hi, > >>>>>>> > >>>>>>> Is someone successfully using the --multihome option on latest > >>>>>>> OpenVPN release? Or is this bug report still valid: > >>>>>>> > >>>>>>> <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=562099> > >>>>>> > >>>>>> I am sorry I dropped the ball on testing that one. Will test the > >>>>>> coming night EST, and update. > >>>>> > >>>>> Looking more at the *debian* changelog, I see that there was a 3rd > >>>>> party ipv6 patch, which *could* have caused these problems. However > >>>>> it is not very easy for me to compile a "clean" openvpn on the > >>>>> multihomed server. Please let me know if this can be diagnosed in > >>>>> any other way, if not - I will find a way to test with vanilla > >>>>> openvpn. > >>>> > >>>> And unfortunately I was right (proven with the help of [1]) :( > >>>> > >>>> openvpn_2.1~rc20-1_i386.deb works > >>>> openvpn_2.1~rc20-2_i386.deb does not > >>>> > >>>> The only code-change between the two is: > >>>> * patches/jjo-ipv6-support.patch: Added ipv6 support. (Closes: > >>>> #307846) > >>>> > >>>> Patch from JuanJo Ciarlante. > >>>> > >>>> So this got to be the culprit. Attaching a -U10 diff between the > >>>> sources of both debian packages (not too long): > >>>> > >>>> [1] http://snapshot.debian.org/package/openvpn/ > >>> > >>> Thank you very much, Peter, for tracking this one down! One question > >>> though. Do you have configuration files and a "how to test it" > >>> description available which you could share with us? That would help > >>> others to test it out as well - and it might help JJO to follow this > >>> one further. > > > > Hello, > > I'm using the latest git > > (git://openvpn.git.sourceforge.net/gitroot/openvpn/openvpn-testing.git) > > and multihome doesn't seems to work as far as I've tested. > > > > I have 2 links balanced with something like > > > > # ip route show > > ... > > default > > > > nexthop via x.x.x.x dev eth2 weight 2 > > nexthop via y.y.y.y dev ppp5 weight 1 > > > > and openvpn somehow fails with or without multihome. > > > > I'm not a programmer but I'dd gladly help with anything else (making > > tests, patches or even providing a test multihomed openvpn server). > > (moving over to the developers mailing list) > > Thank you for your testing! If you put together some configuration > files for client and server and a clear description of how to test this, > that would save a lot of time for us when digging into the code. > > If your config files makes use of certificates, please make your test > environment work by using the keys in the source tree, located in the > sample-keys/ directory. > > Please try to make the config files for us as close to your setup as > possible. This will really help us get closer to understand what > exactly happens. > > I have opened a bug ticket on this issue, to not forget this issue. It > can be tracked here: > <https://community.openvpn.net/openvpn/ticket/28> > > Please report back with configuration files and a description of how to > prepare an environment for reproducing this behaviour. > > Hello, I've managed to setup a test dual-homed server with the following configs: server: http://psw.ro/tmp/test-server.conf client: http://psw.ro/tmp/test-client.conf With verb 6 on the client after successfully connecting thru one of the links - connecting thru the second link hangs for a period of ~10 minutes with the following log: client-log1: http://psw.ro/tmp/client-log1.log If needed I'll try to find some time to better describe my network setup. Thanks. -- Arthur Titeica PharmEc Software Constanta |