Re: Preventing a Network Service from becoming Primary
Re: Preventing a Network Service from becoming Primary
- Subject: Re: Preventing a Network Service from becoming Primary
- From: Allan Nathanson <email@hidden>
- Date: Thu, 2 Nov 2006 09:32:30 -0500
On Nov 2, 2006, at 8:23 AM, Ben Low wrote:
On 02/11/2006, at 3:31 AM, Allan Nathanson wrote:
...
Are you suggesting that there simply be no default route?
Yes. Just as when you're not connected to anything other than
loopback.
... and I doubt that you'll get very far with the
kSCPropNetIPv4Router property since the entire configuration is
driven to make things work for the active service with the highest
priority.
Fair enough... I would agree that in the general case it makes a
great deal of sense to just keep promoting services until you get a
default route, as a user it's great to not have to worry about
switching wireless off and on when connecting here and there (ditto
ppp, etc). It all "just works". But when it comes to VPNs, it
doesn't make sense - these can only ever be the default when there
is an explicit route to the server already in the route table - a
conditional default at best, if you will.
But it also doesn't make sense for the VPN to be active when the
server is no longer accessible.
The only way I can see to mitigate this problem is to set up a
kicker script to signal openvpn to timeout immediately on network
changes - kind of turning the openvpn case into the same as PPTP:
shrinking but not eliminating the problem. Not as nice as could be,
but should work... (is there a better way in user-land of being
alerted to a network state change than hacking /System/Library/
SystemConfiguration/Kicker.bundle/Contents/Resources/
{Kicker.xml,enable-network}?)
Have you looked at the SCNetworkReachability APIs (specifically,
starting with SCNetworkReachabiltyCreateWithAddressPair)? FWIW, I'd
avoid using a kicker script.
- Allan
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden