Hi, On Sat, Jul 07, 2018 at 01:27:23AM +0000, Kristian McColm wrote: > Is anyone aware of whether the developers of this application > have any experience testing the IOS version of the app on IOS devices > on IPv6-only networks, and moreover are the developers aware of and > ensuring the app is compliant with Apple standards for IPv6-only > networks as documented here: https://developer.apple.com/support/ipv6?
Part of OpenVPN's test cycle has been ("for ages") to connect over IPv6-
transport, and then put IPv4+IPv6 into the tunnel.
From OpenVPN's point of view, an IPv6-only network is no different
from "we have IPv4 and IPv6 available but only *use* IPv6 transport" -
same outside address family, routing, etc.
Now, on iOS (and Android) you have the magic VPN API which has a life
on its own - so I wouldn't be surprised if something in iOS says
"oh, this is an IPv6-only environment, so you cannot have IPv4 inside
the tunnel either!".
Is IPv6 inside the tunnel working? Or "nothing at all"?
> As per our understanding, Apple are actively pursuing apps which
> are not compliant with these standards, since IOS does not provide
> 464XLAT at the current time and compliance with Apple's standard
> is the only way to ensure compatibility with IPv6-only networks
> such as ours.
Since OpenVPN is connecting just fine, the "do not put numeric addresses
into API calls", "do not hardwire IPv4 anywhere", "use proper dual-stack
DNS requests" etc. stuff is all good :-) - if the VPN api acts up, this
is something we need to fix together with Apple...
As Antonio said: there should not be anything inside OpenVPN that
should be causing this, but it might be a bug.
I can't test IPv6-only mobile, though, as my iPad doesn't have 3G/LTE
(and even if it had, T-Mobile DE only offers IPv4v6 PDPs, not IPv6-only).
Does this manifest itself as well if you use a v6-only wifi? This is
easier to set up and test.
gert
--
"If was one thing all people took for granted, was conviction that if you
feed honest figures into a computer, honest figures come out. Never doubted
it myself till I met a computer with a sense of humor."
Robert A. Heinlein, The Moon is a Harsh Mistress
Gert Doering - Munich, Germany g...@greenie.muc.de
signature.asc
Description: PGP signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
