Discussion:
[Openvpn-users] kill seems to kill all clients - timeout issue?
Jason Haar
2017-05-01 00:51:20 UTC
Permalink
Hi there

I've noticed that if(via the management interface) I kill a client, *all*
clients on the same tun interface are killed!

ie

-----
nc 127.0.0.1 port
status
(shows 'n' clients, including their remote IP:port)
kill remote-IP:port
SUCCESS: 1 client(s) at address remote-IP:port killed
-----

result: 'n' clients disconnect instead of 1

I noticed it took >30sec before the "SUCCESS" comes back. Doing a strace
showed my "client-disconnect" was doing some fiddling that took most of
that time. I removed it and immediately solved the problem: only one client
was disconnected as expected

So I've solved it - but would like to figure out why it happened, as we do
a lot via the scripts options and frankly I can imagine even myself adding
some slow code to it accidentally again later :-)

So is there some kind of suicide call happening if the kill takes too long?
Or does "client-disconnect" block all clients until it completes - that
would explain everything? (because clients have "ping-restart 20")

Thanks
--
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +1 408 481 8171
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
Loading...