I have a DNS entry associated with the 2 IPs of our openVPN servers.
Code: Select all
$ host vpn.XXXXXX
vpn.XXXXXXX has address XXXXXXX.11
vpn.XXXXXXX has address XXXXXXX.12
Code: Select all
remote vpn.xxxxxxx 443 udp
resolv-retry 3
server-poll-timeout 5
...
Code: Select all
RESOLVE: NOTE: vpn.xxxxxxx resolves to 2 addresses
But, if one server is unreachable and a client tries to connect to its IP, it fails but the client keep trying this IP it doesn't try the other IP associated with the name.
Any idea why the openVPN client doesn't try the XXXXX.11 associated with the DNS entry?Dec 13 16:44:46 2011 us=31000 RESOLVE: NOTE: vpn.xxxxxxx resolves to 2 addresses
....
Tue Dec 13 16:44:46 2011 us=31000 UDPv4 link remote: XXXXXXXX.12:443
Tue Dec 13 16:44:51 2011 us=593000 Server poll timeout, restarting
Tue Dec 13 16:44:51 2011 us=593000 TCP/UDP: Closing socket
Tue Dec 13 16:44:51 2011 us=609000 SIGUSR1[soft,server_poll] received, process restarting
....
Tue Dec 13 16:44:51 2011 us=640000 RESOLVE: NOTE: vpn.XXXXXXX resolves to 2 addresses
....
Tue Dec 13 16:44:51 2011 us=656000 UDPv4 link remote: XXXXXX.12:443
Tue Dec 13 16:44:56 2011 us=484000 Server poll timeout, restarting
Tue Dec 13 16:44:56 2011 us=484000 TCP/UDP: Closing socket
Tue Dec 13 16:44:56 2011 us=484000 SIGUSR1[soft,server_poll] received, process restarting
...
and so on with XXXXXX.12...
Is it due to local DNS cache ? Doesn't openVPN manage the DNS entry itself ?