Package: openvpn
Version: 2.4.0-6+deb9u2

OpenVPN client in common installations tries to keep connection for
infinite amount of time.  But on start OpenVPN can be killed by 90s
DefaultTimeoutStartSec parameter used by systemd.  What can happen if
electricity fails - you start server with openvpn, and after that power on
your router (which is for example in another end of the building).  Then
OpenVPN will be shutdown by systemd and there will be no tunnel betwenn
offices, because openvpn could not reach the remote server

Suggestion: Add TimeoutStartSec=0 (which is infinity) to
/lib/systemd/system/openvpn-client@.service or use other means to keep
openvpn in "retry-forever" mode.

Alexander.

Reply via email to