redirect-gateway w/o bypass-dhcp cause problems in practice?

[reidpr]

Hi,

I'm looking to deploy an OpenVPN with redirect-gateway to protect traffic over untrusted networks (e.g., open WiFi in coffee shops). The redirect-gateway documentation warns that since it re-routes all traffic, the local DHCP servers will become inaccessible. bypass-dhcp solves this, but the clients are all Macs, and bypass-dhcp isn't supported on that OS.

Question: Does this DHCP issue cause significant problems in practice? Or is it something that happens but is fairly rare?

Since the clients will be on arbitrary networks, manually adding routes to the relevant DHCP servers isn't feasible.

Any thoughts?

Much appreciated,

Reid

[krzee]

iirc it is more commonly an issue on bridged setups, which is not needed when redirect-gateway is the purpose for the vpn