Hi,
On Sat, Jun 14, 2014 at 03:29:09PM +0400, ValdikSS wrote:
> On 06/14/2014 03:24 PM, Gert Doering wrote:
> > It's not particularily helpful for understanding the issue at hand if you
> > keep bringing up *new* examples.
> >
> > But anyway: don't disable IPv6 if you are lucky enough to have a VPN
> > provider that can offer it to you. There's a reason why it is enabled
> > by default on about everything these days.
>
> I *am* a VPN provider. Some of my clients use "lite" windows versions
> (XP basically, hacked packs) with a lot of cut out, even IPv6 support,
> and they don't want to reinstall it.
Ah. Now we're talking.
> I have to set up 2 OpenVPN instances: UDP with IPv6 support and TCP without
> it. I don't see any way to get rid of it and I'd like to provide IPv6 on
> all protocols.> This is a real world example.
In a VPN provider environment, I think what I'd do today is to just offer
an IPv4+IPv6 service on UDP+TCP, and an IPv4-only service on a different
IP address, again UDP+TCP - because you don't know in advance what your
users are going to use, and there currently is no way this can be done
automatically.
Even if we add an option to the client "ignore ipv6", not all your clients
will deploy it right away.
Depending on the number of affected users (like, "5" and not "5000"), you
could as well set up a --client-config-dir file for these users that
does push-reset, and then sets up IPv4 manually and leaves off IPv6. Of
course this does not scale to "thousands" of users, but I've done it for
single problematic clients...
gert
--
USENET is *not* the non-clickable part of WWW!
//www.muc.de/~gert/
Gert Doering - Munich, Germany [email protected]
fax: +49-89-35655025 [email protected]
------------------------------------------------------------------------------
HPCC Systems Open Source Big Data Platform from LexisNexis Risk Solutions
Find What Matters Most in Your Big Data with HPCC Systems
Open Source. Fast. Scalable. Simple. Ideal for Dirty Data.
Leverages Graph Analysis for Fast Processing & Easy Data Exploration
http://p.sf.net/sfu/hpccsystems
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
