delecti
My clients connect to a DNS name not an IP. this DNS name i modify on a webserver to point to a new IP address.
a Ping or Tracert will show the DNS switch has occured, but my current OpenVPN clients do not change to the new server..
why?
how are they still looking to the old IP?
Can i force them to switch?
*my purpose for doing this is so i can switch hosts on the fly should anything happen to the current running server.
delecti
changing the TTL on server had no effect. if i edit the config of a client to point to new IP, it connects right up.
How can i force all clients to lookup the DNS name? There has to be a way to do this..
delecti
Clients export OpenDNS.
The domain name they connnect to is handled by a webserver. the webserver side i can switch instantly.
The clients however dont want to update..
delecti
The DNS on the net is handled by a webserver & that TTL i reduced to 5minutes. It also takes effect immediately when the record is altered.
So the currently connected clients if you edit the config of openVPN show the DNS name associated with the Certs/keys. however it also shows the old IP. I can manually edit this IP & the client will connect right up to the new server.
How often does the OpenVPN client run a DNS lookup?
-right now it does not seem like it ever does. maybe if there were a way to set in the config a forced lookup once a day, or every hour.. that would work.
delecti
hrm... i tried shutting down the first server, which disconnects the clients thinking that would cause them to relookup the DNS.. but this did not happen.
however.. i ran that test before i had changed the TTL.. so i will test again now. That is exactly how i want it to work, and in my head it SHOULD work
delecti
Shutting down Server A did not make the clients lookup the DNS name & connect to Server B.
-i suppose i could try DDNS, but the effect may end up the same. If the clients don't look up DNS, they will not alter their destination IP..
*both IPs i use are static
delecti
Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.