Hi,

On Thu, Sep 17, 2020 at 01:54:39PM +0500, Vladislav Grishenko wrote:
> Thank you a lot,

Not needed :-)

> That "fix for real" is about persist_remote_ip option as far as I
> understand, not directly related to this fatal assert fix.

Well, the whole preresolve / connection entry "complex" is old and
has been extended and updated a few times, and your SVR patch also
builds on top of that.  At some point, refactoring is needed...

(We have some other thing to consider which is even more intrusive - 
when we reconnect to a different IP address, and that new IP address
is currently routed into the tunnel, we need to set up new /32 host
routes before moving to a new server can work... openvpn3, as I
understand, sets up "all host routes!" right at the start, but that
might or might not be the best solution either)

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             g...@greenie.muc.de

Attachment: signature.asc
Description: PGP signature

_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to