Opened 4 years ago

Last modified 3 weeks ago

#1084 new Feature Wish

net_gateway is only working for IPv4

Reported by: belette2B Owned by: Gert Döring
Priority: major Milestone: release 2.7
Component: IPv6 Version: OpenVPN git master branch (Community Ed)
Severity: Not set (select this one, unless your'e a OpenVPN developer) Keywords: net_gateway ipv6


Related to conversation on #openvpn with ordex, net_gateway is not converting to IPv6 gateway when used in 'route-ipv6 A:A:A:A/64 net_gateway'

This is not a bug but a feature request.

Usecase: using stunnel on top of OpenVPN, I have to add the OpenVPN IPv6/64 to the client side for maintening the stunnel and not passsing the stunel into OpenVPN as this break it.

Change History (6)

comment:1 Changed 4 years ago by Gert Döring

not sure I understand the use case? you point openvpn to "localhost", which is stunneled $elsewhere, and thus the built-in "detect gateway, install /128 bypass route" isn't working?

I can see the need for this in special circumstances, but would like to understand things better.

comment:2 Changed 4 years ago by Antonio Quartulli

I agree that the use case is not clear (it wasn't mentioned on IRC).

However, I am not sure how the "detect gateway, install /128 bypass route" would help. The bypass route is installed for the server IP, which in this case is localhost. Am I wrong?

If I understood this properly, he wants to exclude the remote endpoint of the stunnel from being tunneled over the VPN itself.

comment:3 Changed 3 years ago by mike_SF

The use case is *identical* for IPv6 than it is for IPv4 -- changing protocol does not change anything.
In general this directive is used to have a selected number of IP addresses (both IPv4 and IPv6) that are not routed through the VPN but whose traffic goes out the network interface.
This is to improve speed to endpoints that we know don't need encryption and to reduce overall VPN traffic and infrastructure costs.

comment:4 Changed 3 years ago by tct


This also looks like a duplicate:
#1161 (maybe related)

comment:5 Changed 2 years ago by Gert Döring

Component: Generic / unclassifiedIPv6
Milestone: release 2.6
Owner: set to Gert Döring
Version: OpenVPN 2.1.4 (Community Ed)OpenVPN git master branch (Community Ed)

comment:6 Changed 3 weeks ago by Gert Döring

Milestone: release 2.6release 2.7

Did not proceed the way it should have in the 2.6 timeframe - but we still want this, so bumping the milestone to 2.7

Note: See TracTickets for help on using tickets.