Hi to all, i have got the following configuration on client: client dev tun proto udp sndbuf 0 rcvbuf 0 remote xxx.xxx.xxx.xxx 1194 resolv-retry infinite nobind persist-key persist-tun remote-cert-tls server comp-lzo verb 3 and i want to add to the configuration a second choice remote option (like yyy.yyy.yyy.yyy) in case the primary server fails (like an high availability server). How can i accomplish that?

Either state a second, third, fourth, etc. "remote x.x.x.x 1194" or use "inline" connection profiles, : https://community.openvpn.net/openvpn/wiki/Openvpn23ManPage

Openvpn cluster

shakisha

Hi to all,

i have got the following configuration on client:

client
dev tun
proto udp
sndbuf 0
rcvbuf 0
remote xxx.xxx.xxx.xxx 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
comp-lzo
verb 3
<ca>

and i want to add to the configuration a second choice remote option (like yyy.yyy.yyy.yyy) in case the primary server fails (like an high availability server).

How can i accomplish that?

Pippin

Either state a second, third, fourth, etc. "remote x.x.x.x 1194"
or use "inline" connection profiles, <connection> </connection>:
https://community.openvpn.net/openvpn/wiki/Openvpn23ManPage

Traffic

I recommend you contact the server admin .. everything else is just guess work ..

shakisha

Pippin wroteEither state a second, third, fourth, etc. "remote x.x.x.x 1194"
or use "inline" connection profiles, <connection> </connection>:
https://community.openvpn.net/openvpn/wiki/Openvpn23ManPage

Thanks for your answer, but how the priority will be managed? (i assume, the firstone and after the secondone).

In this scenario, if the firstone goes "DOWN" all the clients will connect to secondone, but how to deal if firstone again up and someclients connecting to firstone and others to second one?

Should be the configuration files totally synced between that two machines, right?

shakisha

shakisha wrote
Pippin wroteEither state a second, third, fourth, etc. "remote x.x.x.x 1194"
or use "inline" connection profiles, <connection> </connection>:
https://community.openvpn.net/openvpn/wiki/Openvpn23ManPage
Thanks for your answer, but how the priority will be managed? (i assume, the firstone and after the secondone).
UPDATE: YES, i confirm it as documentation "The OpenVPN client will try to connect to a server at host:port in the order specified by the list of --remote options"

In this scenario, if the firstone goes "DOWN" all the clients will connect to secondone, but how to deal if firstone again up and someclients connecting to firstone and others to second one?

Should be the configuration files totally synced between that two machines, right?