[prev in list] [next in list] [prev in thread] [next in thread]
List: openvpn-users
Subject: Re: [Openvpn-users] graceful client disconnect
From: Aleksandar Ivanisevic <aleksandar () ivanisevic ! de>
Date: 2020-06-01 14:54:09
Message-ID: 83785975-B9B9-44BB-A992-F1531A274FDA () ivanisevic ! de
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
> On 29. May 2020, at 10:47, Aleksandar Ivanisevic <aleksandar@ivanisevic.de> wrote:
>
>
>
> > Thanks, Almost perfect! ;) Now, is there a way to send RESTART control message \
> > only to the specific client, or at least decide in runtime what the n parameter \
> > will be, as I don't know in advance whether the server will be restarted to \
> > rebalance the clients or to change the configuration.
> > client-kill CID RESTART
> >
> > from management interface will do that. RESTART is the default, another option \
> > being HALT. Where CID is the actual cid of the client. I am not sure whether this \
> > can be used to force move the client to the next remote.
>
> Sadly, it can't , even if on the server explicit-exit-notify is set to 2 and client \
> has connect-retry 1, it always reconnects to the same peer IP.
After some digging through the source I have found it is actually possible to send \
the same command as the restarting server sends
the correct syntax is comma delimited, no spaces
client-kill id RESTART,[N]
[N] is for next server [P] is to purge saved passwords or [NP] for both
For some reason Viscosity client for Mac does not honour the N flag, although it \
claims to run 2.4.9. Is anyone aware of an option that makes the client ignore this \
flag on restart or is this a Viscosity specific "feature"?. I've tried reproducing \
with the command line client from homebrew, but that one works correctly.
[Attachment #5 (unknown)]
<html><head><meta http-equiv="Content-Type" content="text/html; \
charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; \
line-break: after-white-space;" class=""><br class=""><div><br class=""><blockquote \
type="cite" class=""><div class="">On 29. May 2020, at 10:47, Aleksandar Ivanisevic \
<<a href="mailto:aleksandar@ivanisevic.de" \
class="">aleksandar@ivanisevic.de</a>> wrote:</div><br \
class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" \
content="text/html; charset=utf-8" class=""><div style="word-wrap: break-word; \
-webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div \
class=""><br class=""><blockquote type="cite" class=""><div dir="ltr" class=""><div \
class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px \
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div \
style="overflow-wrap: break-word;" class=""><div class=""> <div class="">Thanks, \
Almost perfect! ;) Now, is there a way to send RESTART control message only to the \
specific client, or at least decide in runtime what the n parameter will be, as I \
don't know in advance whether the server will be restarted to rebalance the clients \
or to change the configuration.</div></div></div></blockquote><div class=""><br \
class=""></div><div class="">client-kill CID RESTART</div><div class=""><br \
class=""></div><div class="">from management interface will do that. RESTART is the \
default, another option being HALT. Where CID is the actual cid of the client. I am \
not sure whether this can be used to force move the client to the next \
remote.</div></div></div> </blockquote><br class=""></div><div class="">Sadly, it \
can't , even if on the server explicit-exit-notify is set to 2 and client has \
connect-retry 1, it always reconnects to the same peer \
IP.</div></div></div></blockquote><br class=""></div><div>After some digging through \
the source I have found it is actually possible to send the same command as the \
restarting server sends</div><div><br class=""></div><span class="">the correct \
syntax is comma delimited, no spaces<br class=""><br class="">client-kill id \
RESTART,[N]<br class=""></span><span class=""><br class=""></span><div>[N] is for \
next server [P] is to purge saved passwords or [NP] for both</div><div><br \
class=""></div><div>For some reason Viscosity client for Mac does not honour the N \
flag, although it claims to run 2.4.9. Is anyone aware of an option that makes the \
client ignore this flag on restart or is this a Viscosity specific "feature"?. I've \
tried reproducing with the command line client from homebrew, but that one works \
correctly.</div><div><br class=""></div><div><br class=""></div></body></html>
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic