connecting to dynamic dns

Nikos Mavrogiannopoulos nmav at gnutls.org
Sat Nov 29 06:26:22 PST 2014


On Sat, 2014-11-29 at 13:54 +0000, David Woodhouse wrote:
> On Sat, 2014-11-29 at 08:29 +0100, Nikos Mavrogiannopoulos wrote:
> > When connecting to an IP which is dynamic, it may often change and
> > require a reconnection. However, cstp_reconnect() will attempt to
> > connect to the cached IP and never fallback. The attached patch fixes
> > the issue for me, but what would be the best approach?
> > 1. Don't cache the IP at all
> 
> Hm, the problem with this is that you may now be using a DNS server *on*
> the VPN. So it's unlikely that the DNS lookup will succeed. And even if
> it *does* work because you still have a live DTLS connection, if you
> have schizoDNS you might find that the hostname either doesn't exist in
> the internal view or resolves to something different.

Well, at that point I don't have VPN. The CSTP reconnection occurs when
the TCP connection part of the VPN is closed. That can only occur if the
server is down, thus the UDP part is also off. Are there servers which
forcefully close the CSTP connection but expect the DTLS connection to
remain active?

regards,
Nikos





More information about the openconnect-devel mailing list