Hello List, As you may be aware, the Internet is running/has run out of IPv4 address space. To that end, I am a part of a team at a national mobile network operator who are working on deploying IPv6-only mode to our Android and iPhone handsets, and deprecating the use of IPv4 on our netowrk. Since we have begun migrations to IPv6-only mode, we have received a few complaints from users of the OpenVPN Connect app on IOS stating that their VPN tunnels are establishing but they are unable to pass and data inside the tunnel.
We have been able to reproduce the issue using an OpenVPN server 2.4.6 on Fedora Linux 26 and an iPhone running IOS 11.3.1 and version 1.2.0 build 0 (iOS 64-bit). The VPN server is IPv4 only and using UDP transport. The IOS device is on an IPv6-only network that provides DNS64/NAT64 for 6to4 translation. The Android device is running Android 6.0.1 and OpenVPN Connect version 3.0.5 (1816). Using the same client profile (.ovpn file) on both the Android and and IOS clients, and the same cell network settings and VPN server, we observe that the VPN tunnel is established OK on both devices, but only the Android is able to pass data traffic inside the VPN tunnel. Is anyone aware of whether the developers of this application have any experience testing the IOS version of the app on IOS devices on IPv6-only networks, and moreover are the developers aware of and ensuring the app is compliant with Apple standards for IPv6-only networks as documented here: https://developer.apple.com/support/ipv6? As per our understanding, Apple are actively pursuing apps which are not compliant with these standards, since IOS does not provide 464XLAT at the current time and compliance with Apple's standard is the only way to ensure compatibility with IPv6-only networks such as ours. If anyone who has any feedback or would like me to test anything or provide any further assistance I would be glad to assist. Regards KM ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
