Re: [Openvpn-users] While reading the docs (--keepalive)

[Gert D. <ge...@gr...>]

Hi,

On Wed, Sep 04, 2024 at 02:26:37PM +0200, Ralf Hildebrandt via Openvpn-users wrote:
> What the rationale of having both client and server ping each other at
> the same interval, but then use ping-restart with different timeouts?

This is ancient stuff, so nobody around *knows*.

We do suspect that the intention is "if there is network trouble, the
client will always timeout the session first", which is also related to
"only the client had support for --explicit-exit-notify" (letting the
server know that it went away).  The part about "make the client notice
first" is backed by the manpage ;-) - the "--explicit-exit-notify"
reasoning is what we came up with as possible explanation.

Now, "+10" would have been perfectly sufficient for that, and we do
not know why the code does "*2" instead.

In doubt, just expand the macro yourself and configure what suits you -
there should not be any real adverse effect if the server timeouts
earlier.  The --explicit-exit-notify thing won't have an effect on
"the network broke" anyway.

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             ge...@gr...