We've been running openvpn to connect to our cloud infrastructure for quite a while now. All of our virtual servers were using the same gateway previously (in the same "huddle"). We've recently expanded and we're starting to create new servers in a new "huddle" (connecting to a new gateway). We've adjusted the openvpn routes and firewall rules but we just cannot seem to connect to any of these new servers via openvpn. Here are the relevant bits of our server's conf file.
port 1194
proto udp
dev tun
persist-key
persist-tun
server 172.16.254.0 255.255.254.0
ifconfig-pool-persist ipp.txt
push "route 10.178.66.0 255.255.224.0"
push "route 10.180.0.0 255.255.128.0"
keepalive 10 120
comp-lzo
The 10.178.66.0 route is the old route (that still works just fine). The other route (10.180.0.0) is the new route that refuses to work. I can see from the iptables logs that requests are hitting the openvpn server's forward chain properly. We have also tried completely flushing the input/output chains on the openvpn server as well as the new servers.
I've run out of things to try. The routes are being sent properly to clients that connect etc... but it appears as though no requests are actually hitting the new servers. I'm sure there's something that I'm just missing.
