8
6
Fork
You've already forked windows
1

Feature-Request: Setting (Registry?) to disable the discovery feature for restricted networks #266

Closed
opened 2025年05月24日 01:24:59 +02:00 by Lukas-UAUX · 6 comments

Hi,

we have some clients in restricted networks that can reach our eduVPN server but not the internet. When starting the eduVPN client it tries to reach the discovery servers. This can either result in a long wait before the client becomes usable - or the client becomes unresponsive entirely.

So disabling the discovery feature (so that one always must enter the url manually) would probably the easiest fix - or you could try fixing the online check to accommodate clients that have network connection but can not reach certain locations.

Hi, we have some clients in restricted networks that can reach our eduVPN server but not the internet. When starting the eduVPN client it tries to reach the discovery servers. This can either result in a long wait before the client becomes usable - or the client becomes unresponsive entirely. So disabling the discovery feature (so that one always must enter the url manually) would probably the easiest fix - or you could try fixing the online check to accommodate clients that have network connection but can not reach certain locations.

The client should work properly when there is no connection possible to disco.eduvpn.org (fetch server list) or app.eduvpn.org (check for updates).

Do you have an idea how long this delay is for you? Ideally these call would be performed in the background, or if not possible not block for > ~5 seconds.

There might be different things happening in a "no Internet" scenario:

  1. DNS does not resolve (NXDOMAIN)
  2. DNS resolves to wrong IP
  3. DNS requests for domain hangs
  4. DNS works, but connection is dropped (and not rejected) so long timeout
  5. DNS works, but connection is immediately rejected (connection refused, or similar ICMP response)
  6. ...

I guess they have different behaviors in the client. Perhaps this also needs to be addressed separately in eduVPN/eduvpn-common?

The client _should_ work properly when there is no connection possible to `disco.eduvpn.org` (fetch server list) or `app.eduvpn.org` (check for updates). Do you have an idea how long this delay is for you? Ideally these call would be performed in the background, or if not possible not block for > ~5 seconds. There might be different things happening in a "no Internet" scenario: 1. DNS does not resolve (NXDOMAIN) 2. DNS resolves to wrong IP 3. DNS requests for domain hangs 4. DNS works, but connection is dropped (and not rejected) so long timeout 5. DNS works, but connection is immediately rejected (connection refused, or similar ICMP response) 6. ... I guess they have different behaviors in the client. Perhaps this also needs to be addressed separately in eduVPN/eduvpn-common?

It is a bit erratic but IF it becomes responsive again it is between 30s and 2 min - but the bigger problem is that often the window becomes completely unresponsive to mouse and keyboard input even after the timeout is reached and switched to the input dialog...

It is a bit erratic but **IF** it becomes responsive again it is between 30s and 2 min - but the bigger problem is that often the window becomes completely unresponsive to mouse and keyboard input even after the timeout is reached and switched to the input dialog...

I create a new issue for the slowness, #266, but that is not this issue which is about disabling talking to disco.eduvpn.org at all. As far as I know for disabling update checks there already is a toggle.

I create a new issue for the slowness, #266, but that is not _this_ issue which is about disabling talking to `disco.eduvpn.org` at all. As far as I know for disabling update checks there already is a toggle.
Collaborator
Copy link

Could those computers use Let's Connect! client? It's an eduVPN sibling without discovery. The eduVPN server URLs must be added manually.

Will close this issue now and we'll solve the unresponsiveness on no-connectivity in #266.

Could those computers use Let's Connect! client? It's an eduVPN sibling without discovery. The eduVPN server URLs must be added manually. Will close this issue now and we'll solve the unresponsiveness on no-connectivity in #266.
Collaborator
Copy link

@fkooman wrote in #266 (comment):

I create a new issue for the slowness, #266, but that is not this issue which is about disabling talking to disco.eduvpn.org at all. As far as I know for disabling update checks there already is a toggle.

The update check is spawned in a background thread. The only indication it is not working is displayed on the About page. It should not block the UI at all.

@fkooman wrote in https://codeberg.org/eduVPN/windows/issues/266#issuecomment-4878027: > I create a new issue for the slowness, #266, but that is not _this_ issue which is about disabling talking to `disco.eduvpn.org` at all. As far as I know for disabling update checks there already is a toggle. The update check is spawned in a background thread. The only indication it is not working is displayed on the About page. It should not block the UI at all.
Collaborator
Copy link

I've made a new client release that should make the client behave smoother when offline or in otherwise network-restricted environment. Please, upgrade to https://codeberg.org/eduVPN/windows/releases/tag/4.4.99.3 and let me know if the experience is better now.

I've made a new client release that should make the client behave smoother when offline or in otherwise network-restricted environment. Please, upgrade to https://codeberg.org/eduVPN/windows/releases/tag/4.4.99.3 and let me know if the experience is better now.
Sign in to join this conversation.
No Branch/Tag specified
master
study/no-token-import
ver/3.x
govVPN
ver/3.3.0.x
ver/2.x
ver/1.x
4.6
4.5.99.8
4.5.99.7
4.5.99.6
4.5.99.5
4.5.99.4
4.5.99.3
4.5.99.2
4.5.99.1
4.5.99.0
4.5
4.4.99.4
4.4.99.3
4.4.99.2
4.4.99.1
4.4.99.0
4.4
4.3.99.1
4.3.99.0
4.3.2
4.3.1
4.3
4.2.8
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2
4.1.7
4.1.6
4.1.5
4.1.4
4.1.3
4.1.2
4.1.1
4.1
4.0
3.255.23
3.255.22
3.255.21
3.255.20
3.255.19
3.7
3.6.2
3.6.1
3.255.18
3.255.17
3.255.16
3.255.15
3.6
3.255.14
3.5
3.255.13
3.4.3
3.255.12
3.255.11
3.255.10
3.255.9
3.255.8
3.255.7
3.255.6
3.255.5
3.255.4
3.255.3
3.255.2
3.4.2
3.4.1
3.255.1
3.255
3.4
3.3.8
3.3.7
3.3.6
3.3.5
3.3.4
3.3.0.1
3.3.3
3.3.2
3.3.1
3.3
3.2.2
3.2.1
3.2
3.1.8
3.1.7
3.1.6
3.1.5
3.1.4
3.1.3
3.1.2
3.1.1
3.1
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0
2.255.6
2.255.5
2.255.4
2.255.3
2.255.2
2.255.1
2.1.4
2.255.0
2.1.3
2.1.2
2.1.1
2.1
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0
1.255.11
1.255.10
1.255.9
1.0.39
1.255.8
1.255.7
1.255.6
1.255.5
1.0.38
1.255.4
1.0.37
1.255.3
1.255.2
1.255.1
1.255.0
1.0.36
1.0.34
1.0.35
1.0.33
1.0.32
1.0.31
1.0.30
1.0.29
1.0.28
1.0.27
1.0.26
1.0.25
1.0.24
1.0.23
1.0.22
1.0.21
1.0.20
1.0.19
1.0.18
1.0.17
1.0.16
audit/2017-12
1.0.15
1.0.14
1.0.13
1.0.12
1.0.11
1.0-alpha8
1.0-alpha6
1.0-alpha5
1.0-alpha4a
1.0-alpha3
1.0-alpha2a
1.0-alpha1
1.0-alpha
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
3 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
eduVPN/windows#266
Reference in a new issue
eduVPN/windows
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?