Hi,

On Tue, Aug 05, 2014 at 12:00:53PM +1200, Jason Haar wrote:
> On 05/08/14 08:36, Gert Doering wrote:
> > "Nobody did the code yet".
> >
> > This is a complex problem.  You need a programmer that understands 
> > parallel processes or threads, network, security, and is willing to 
> > spend quite a bit of personal time on it - implementation, code review,
> > testing.
> I think it can be hacked into place (with the right choice of OS of course)
> 
> I've effectively "multi-processor"-ed openvpn by running multiple copies
> on different ports, and then using iptables to round-robin new
> connections onto those backend services. 

Yes, this can be done (and this is what OpenVPN AS does "under the hood",
with slightly more magic regarding the distribution of incoming connections).

It will scale better than just one OpenVPN process, but is still not ideal
from a load distribution perspective, and - as you point out - needs help 
from a client-connect script to get IP address assignment right.

gert
-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             g...@greenie.muc.de
fax: +49-89-35655025                        g...@net.informatik.tu-muenchen.de

Attachment: pgpxpYLBL5s61.pgp
Description: PGP signature

------------------------------------------------------------------------------
Infragistics Professional
Build stunning WinForms apps today!
Reboot your WinForms applications with our WinForms controls. 
Build a bridge from your legacy apps to the future.
http://pubads.g.doubleclick.net/gampad/clk?id=153845071&iu=/4140/ostg.clktrk
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to