On 12/03/2017 10:30 PM, Michael Siepmann wrote:
On 12/02/2017 11:14 PM, Chris Laprise wrote:
Looking at openvpn entries in 'journalctl' can give you a better idea.
I've seen instances where openvpn versions starting with 2.4 have this
bad reaction to disconnection (which is what sleep/wake is in this
case); with openvpn 2.3 you could count on it to keep
going/re-connecting. But there may also be an issue with the way
Qubes/Xen are handling the virtual interfaces between VMs; the
symptoms remind me of basic networking problems many of us have
experienced with prior Qubes releases, where only VM restarts would
re-build inter-VM links correctly.
But if there isn't a basic networking problem, moving to a
service-based config will be more robust and should keep openvpn
running. One way to do this is to have your rc.local script start
openvpn with systemd-run (and the right options), but I've already
created a project that uses a full systemd config to manage VPN
processes...
https://github.com/tasket/Qubes-vpn-support
Setup is much easier than the vpn doc, though it currently only works
with Qubes 3.2 which I'm guessing you're using. The usual 'systemctl
start/stop/status' commands give you control over the
qubes-vpn-handler.service that manages openvpn.
Thank you! So far this seems to be working fine, automatically
reconnecting after resume. Any chance of getting this approach mentioned
on https://www.qubes-os.org/doc/vpn ?
Great! I think it could be linked in the revised doc once the Qubes R4.0
issues are worked out.
--
Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/6458cc1c-227b-482b-10a3-0037fad9ae2c%40posteo.net.
For more options, visit https://groups.google.com/d/optout.
