Page MenuHomeVyOS Platform

OpenVPN: do not stop/start service on configuration change
Closed, ResolvedPublicFEATURE REQUEST

Description

Implement support for systemd reload of the OpenVPN service to not drop connections during reconfiguration.

Details

Version
1.4-rolling-202111120317 && 1.3.0-epa3
Is it a breaking change?
Perfectly compatible

Event Timeline

c-po changed the task status from Open to In progress.
c-po claimed this task.
c-po triaged this task as Normal priority.
c-po edited a custom field.
c-po changed Version from - to 1.4-rolling-202111120317 && 1.3.0-epa3.
c-po changed Is it a breaking change? from Unspecified (possibly destroys the router) to Perfectly compatible.
c-po changed Issue type from Unspecified (please specify) to improvement.
Nov 15 21:23:22 LR1 systemd[1]: Reloading OpenVPN connection to vtun1.
Nov 15 21:23:22 LR1 openvpn-vtun1[13941]: event_wait : Interrupted system call (code=4)
Nov 15 21:23:22 LR1 openvpn-vtun1[13941]: Closing TUN/TAP interface
Nov 15 21:23:22 LR1 openvpn-vtun1[13941]: net_addr_ptp_v4_del: 10.255.1.1 dev vtun1
Nov 15 21:23:22 LR1 systemd[1]: Reloaded OpenVPN connection to vtun1.
Nov 15 21:23:22 LR1 openvpn-vtun1[13941]: SIGHUP[hard,] received, process restarting
Nov 15 21:23:22 LR1 openvpn-vtun1[13941]: Cipher negotiation is disabled since neither P2MP client nor server mode is enabled
Nov 15 21:23:22 LR1 openvpn-vtun1[13941]: WARNING: file '/run/openvpn/vtun1_shared.key' is group or others accessible
Nov 15 21:23:22 LR1 openvpn-vtun1[13941]: OpenVPN 2.5.1 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2021
Nov 15 21:23:22 LR1 openvpn-vtun1[13941]: library versions: OpenSSL 1.1.1k  25 Mar 2021, LZO 2.10
Nov 15 21:23:22 LR1 openvpn-vtun1[13941]: Restart pause, 5 second(s)
c-po moved this task from Backlog to Finished on the VyOS 1.3 Equuleus (1.3.0) board.