On 12/03/2017 10:00 PM, Chris Laprise wrote: > On 12/03/2017 10:30 PM, Michael Siepmann wrote: >> On 12/02/2017 11:14 PM, Chris Laprise wrote: >>> Looking at openvpn entries in 'journalctl' can give you a better idea. >>> I've seen instances where openvpn versions starting with 2.4 have this >>> bad reaction to disconnection (which is what sleep/wake is in this >>> case); with openvpn 2.3 you could count on it to keep >>> going/re-connecting. But there may also be an issue with the way >>> Qubes/Xen are handling the virtual interfaces between VMs; the >>> symptoms remind me of basic networking problems many of us have >>> experienced with prior Qubes releases, where only VM restarts would >>> re-build inter-VM links correctly. >>> >>> But if there isn't a basic networking problem, moving to a >>> service-based config will be more robust and should keep openvpn >>> running. One way to do this is to have your rc.local script start >>> openvpn with systemd-run (and the right options), but I've already >>> created a project that uses a full systemd config to manage VPN >>> processes... >>> >>> https://github.com/tasket/Qubes-vpn-support >>> >>> Setup is much easier than the vpn doc, though it currently only works >>> with Qubes 3.2 which I'm guessing you're using. The usual 'systemctl >>> start/stop/status' commands give you control over the >>> qubes-vpn-handler.service that manages openvpn. >>> >> Thank you! So far this seems to be working fine, automatically >> reconnecting after resume. Any chance of getting this approach mentioned >> on https://www.qubes-os.org/doc/vpn ? > > Great! I think it could be linked in the revised doc once the Qubes > R4.0 issues are worked out. >
Recently the "LINK IS UP" notification has been staying visible until I manually close it. At first it wasn't doing that. Are you seeing that too? Could a recent update have caused this? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/a5af6b2d-3e0f-8bc7-d3a9-9b5c9a9a70cf%40TechDesignPsych.com. For more options, visit https://groups.google.com/d/optout.
signature.asc
Description: OpenPGP digital signature
