balena-os / meta-balena

A collection of Yocto layers used to build balenaOS images
https://www.balena.io/os
966 stars 115 forks source link

IP clashes on `resin-vpn` interface #3354

Open alexgg opened 7 months ago

alexgg commented 7 months ago

The resin-vpn TUN device is automatically created by the openvpn client when the connection is established. It uses the IP range provided by the openvpn server. Whatever private IP range we choose will have the potential to cause conflicts with a local LAN configured in the same range.

One possibility we are discussing is to disable ARP on the resin-vpn interface. As the TUN device operates in layer 3, this should not affect the tunnel but would prevent IP clashes on the local network.

ip link set dev resin-vpn arp off