How to define multiple proxies on client's configuration?

rdaraujo

Hello,

How can I define multiple http-proxy directives inline?

client
dev tun
proto tcp

<http-proxy-user-pass>
user
pass
</http-proxy-user-pass>

<connection>
remote host.com 443
http-proxy squid01 8080 auto
http-proxy-retry
</connection>

<connection>
remote host.com 443
http-proxy squid02 8080 auto
http-proxy-retry
</connection>

(...)

The configuration above gives me "[http-proxy] directive is not allowed inside [connection]".
That is weird since man page(1) explicitly shows an example.

Should I assume that OpenVPN Connect(2) doesn't support this kind of configuration?

(1) https://community.openvpn.net/openvpn/wiki/Openvpn23ManPage
(2) OpenVPN 1.0.5 build 177 (iOS 64-bit)

Traffic

Good question ...

Unfortunately, the manual you have quoted is for OpenVPN-CE not OpenVPN-Connect

If Connect states that:

rdaraujo wrotehttp-proxy] directive is not allowed inside [connection]

then I guess that is it.

Have you tried a config like so:

remote host.com 443
http-proxy squid01 8080 auto
http-proxy squid02 8080 auto
http-proxy-retry

perhaps Connect will be ok with that.

Or create another config file for the second proxy ..

rdaraujo

Thanks Traffic. I didn't realized that :roll:

Well, it accepts my configuration as you suggested.

remote host_vpn 443
http-proxy squid01 8080 auto
http-proxy squid02 8080 auto
http-proxy squid03 8080 auto
http-proxy-retry

But, I'm not sure OpenVPN is considering all proxy entries. Problably, it uses only the last one defined.

2015-08-04 07:08:08 ----- OpenVPN Start -----
OpenVPN core 3.0 ios arm64 64-bit
2015-08-04 07:08:08 UNUSED OPTIONS
5 [http-proxy] [squid01] [8080] [auto] 
6 [http-proxy] [squid02] [8080] [auto] 
8 [http-proxy-retry] 
9 [resolv-retry] [infinite] 
10 [nobind] 
11 [persist-key] 
12 [persist-tun] 
17 [verb] [5] 

2015-08-04 07:08:08 LZO-ASYM init swap=0 asym=0
2015-08-04 07:08:08 EVENT: RESOLVE
2015-08-04 07:08:08 Contacting host_proxy:8080 via HTTP Proxy
2015-08-04 07:08:08 EVENT: WAIT_PROXY
2015-08-04 07:08:08 SetTunnelSocket returned 1
2015-08-04 07:08:08 EVENT: WAIT
2015-08-04 07:08:08 TO PROXY: CONNECT host_vpn:443 HTTP/1.0
Host: host_vpn

Anyway, for now I'll create another config file following your suggestion.

Thanks.