Better handling of multiple connection profiles

Suggestions/comments/criticisms are welcome here

cudiaco

Posts: 11
Joined: Tue Dec 06, 2011 2:01 am

Post by cudiaco » Sun Jul 09, 2017 1:20 pm
OpenVPN provides connection profiles, allowing for a single .ovpn to contain multiple endpoints:

(From the 2.4 man page)
Code: Select all
 Here is an example of connection profile usage:

client
dev tun

<connection>
remote 198.19.34.56 1194 udp
</connection>

<connection>
remote 198.19.34.56 443 tcp
</connection>

<connection>
remote 198.19.34.56 443 tcp
http-proxy 192.168.0.8 8080
</connection>

<connection>
remote 198.19.36.99 443 tcp
http-proxy 192.168.0.8 8080
</connection>

persist-key
persist-tun
pkcs12 client.p12
remote-cert-tls server
verb 3
Based on my observation, importing such a profile into Viscosity duplicates them into separate connections that must be chosen manually.

Case in point, the Streisand script generates a suite of OpenVPN profiles, one of which is a `combined` profile that groups together the various OpenVPN access points it provides, making it easy to use a single configuration that would stand a better chance of establishing a connection in a more restrictive network environment (i.e try udp 8757, then try tcp 636, then finally try tcp 443).

While Viscosity does import the profiles correctly and they all do work, it does make it slightly more cumbersome to use in such a situation, and for those people who may be less tech oriented may face some degree of difficulty.

In any case, thank you for your time!

James

User avatar
Posts: 2312
Joined: Thu Sep 04, 2008 9:27 pm

Post by James » Mon Jul 10, 2017 11:26 am
Hi cudiaco,

Thanks for the feedback, we'll take it on board.

Viscosity actually already supports trying multiple servers/ports/protocols for a single connection by listing multiple servers in the Remote Server Address field by separating them, for example:
Code: Select all
198.19.34.56:1194:udp, 198.19.34.56, 198.19.34.56:443:tcp, 198.19.36.99:443:tcp
This however does not allow other settings to be mixed in, such as the http-proxy setting in this instance.

Cheers,
James
Web: https://www.sparklabs.com
Support: https://www.sparklabs.com/support
Twitter: https://twitter.com/sparklabs

cudiaco

Posts: 11
Joined: Tue Dec 06, 2011 2:01 am

Post by cudiaco » Tue Jul 11, 2017 11:16 am
Thank you for your consideration James!
3 posts Page 1 of 1