Hello, On 07/07/18 09:27, Kristian McColm wrote: > Hello List, > > As you may be aware, the Internet is running/has run out of IPv4 address > space. To that end, I am a part of a team at a national mobile network > operator who are working on deploying IPv6-only mode to our Android and > iPhone handsets, and deprecating the use of IPv4 on our netowrk. Since we > have begun migrations to IPv6-only mode, we have received a few complaints > from users of the OpenVPN Connect app on IOS stating that their VPN tunnels > are establishing but they are unable to pass and data inside the tunnel. > > We have been able to reproduce the issue using an OpenVPN server 2.4.6 on > Fedora Linux 26 and an iPhone running IOS 11.3.1 and version 1.2.0 build 0 > (iOS 64-bit). The VPN server is IPv4 only and using UDP transport. The IOS > device is on an IPv6-only network that provides DNS64/NAT64 for 6to4 > translation. The Android device is running Android 6.0.1 and OpenVPN Connect > version 3.0.5 (1816). Using the same client profile (.ovpn file) on both the > Android and and IOS clients, and the same cell network settings and VPN > server, we observe that the VPN tunnel is established OK on both devices, but > only the Android is able to pass data traffic inside the VPN tunnel. > > Is anyone aware of whether the developers of this application have any > experience testing the IOS version of the app on IOS devices on IPv6-only > networks, and moreover are the developers aware of and ensuring the app is > compliant with Apple standards for IPv6-only networks as documented here: > https://developer.apple.com/support/ipv6? > > As per our understanding, Apple are actively pursuing apps which are not > compliant with these standards, since IOS does not provide 464XLAT at the > current time and compliance with Apple's standard is the only way to ensure > compatibility with IPv6-only networks such as ours. > > If anyone who has any feedback or would like me to test anything or provide > any further assistance I would be glad to assist. >
I work for OpenVPN, Inc. and I have been responsible for pushing "OpenVPN Connect for iOS" forward from 1.1.1 to 1.2.9. First of all, thanks a lot for your feedback - we really appreciate when people try to improve software used by the community. I think I can safely say that until now the development and testing was not focused on IPv6 only networks. Therefore it is very possible that some cases do not work as expected. However, IPv6-only setups (both inside and outside the tunnel) are on our roadmap and we have already started working on it for what concerns OpenVPN2. OpenVPN3-core (the library at the core of OpenVPN Connect) should happily support IPv6-only transport networks, therefore I don't have an immediate answer to why this is not working for you. Would you mind opening a ticket on https://community.openvpn.net (you need to create an account) so that we can better track this issue and ask you to provide more details? Thanks! Regards, -- Antonio Quartulli
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
