Port-share 443 disables UDP?

jockebq

Hi,

I have my OpenVPN AS setup to TCP port 443 and UDP port 1194, using Multi-daemon mode.
And in Advanced VPN Settings under Server Config Directives I added this:
proto tcp-server
port-share 127.0.0.1 443

And now my other NGinx web server which uses port 443 works too with NGinx Reverse Proxy.

But, the big problem is that now it only connects to my VPN via TCP, not UDP at all, it wont connect if I try to force it to only use UDP.

What is wrong? If I remove these settings and change the TCP port to 1194 everything works as expected, I am connected to UDP automatically.

I really want the option to use TCP 443 when I need it without breaking my other websites.

Thank you!

The Johan

You're adding a configuration override that limits the server to TCP, and you're wondering why UDP now doesn't work? Well, that would be why.

Why would you ever put that parameter in anyways? By default Access Server does TCP and UDP, and if you want to change ports, or use only TCP or only UDP, you can do so in the Server Network Settings page.

I suggest you either run your website on another server, or another port, or that you run the Access Server on another port.

jockebq

novaflash wrote You're adding a configuration override that limits the server to TCP, and you're wondering why UDP now doesn't work? Well, that would be why.

Why would you ever put that parameter in anyways? By default Access Server does TCP and UDP, and if you want to change ports, or use only TCP or only UDP, you can do so in the Server Network Settings page.

I suggest you either run your website on another server, or another port, or that you run the Access Server on another port.

Okey, that explains it. But isn't it possible to add another line which activated multi-daemon and still let's me port-share?
I have no way of running my website on another server or port. I want to be able to reach the VPN through 443 when it is not possible to use UDP 1194. And my website must be accessible through 443 for SSL to work.
That is when I found the port share function, which seems to work fine, except my config "proto tcp-server port-share 127.0.0.1 443" only allows TCP. Isn't it possible to add udp to this?
I did try:

proto udp
proto tcp-server
port-share 127.0.0.1 443

and

proto udp
port-share 127.0.0.1 1194
proto tcp-server
port-share 127.0.0.1 443

Same result as before, only TCP works.

The Johan

Please stop adding those overrides. You're f---ing up your server with those.

Access Server is not designed to co-exist on the same port with another web server. Technically it can still be done and you can find out how to do it on the page below, but you should just go to server network settings and change the port of the Access Server so it doesn't work on the same port as your webserver, or you should move your webserver to another port, or you should move your webserver to a completely different IP or server.

https://docs.openvpn.net/command-line/managing-settings-for-the-web-services-from-the-command-line/#Change_the_web_service_forwarding_settings