Andymion
Each client gets an IP depending on CN records in its certificate. Thus each VPN client always has fixed IP.
Due to huge amount of clients and CPU performance degradation load balancing it required.
Which scenarion should I use?
Scenario 1: Two VPN nodes with random selection. In this case each node forwards client traffic without NAT (this is a requirement) into LAN. How reverse route (from LAN to VPN subnet) has to be maintained? It is unkown to which VPN node arbitrary client connects, but reverse packets should be routed to the right VPN node.
Scenario 2: Two OPENVPN daemons (on different ports) on the same host with random selection. The problem is that the routing table on VPN host gets two identical route records via different GW since route to virtual subnet (where clients reside) should exists via both TUN devices. It seems that I should use personal route for each connected client depending on how it has connected. net30 topology doesn't get a point.
