Files
fedora-infra_ansible/roles/openvpn/server/files/server.conf
Patrick Uiterwijk b1db3bafd8 Disable persist-tun for openvpn
This should solve the issue where RHEL7 machines that get a network
hiccup need an OpenVPN restart to restore their routes.

The code is broken in the current upstream OpenVPN release, such that
it does tear down some of the routes during a ping-restart (when the
connection is dropped due to network hiccups), but the reconnection
code does not restore the routes.
I am working on an upstream patch to fix this, but in the meantime
disabling persist-tun will make sure that OpenVPN does the entire
initialization upon reconnection, which makes sure that all routes
are created.

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2015-10-21 18:26:32 +00:00

25 lines
269 B
Plaintext

dev tun
server 192.168.0.0 255.255.0.0
comp-lzo
ping-timer-rem
persist-key
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
crl-verify crl.pem
keepalive 10 120
client-config-dir ccd
status /var/log/openvpn-status.log 10
status-version 2
client-to-client