[CLOUDSTACK-10016] VPC VR doesn't respond to DNS requests from remote access vpn clients

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 4.9.0
• Component/s: Virtual Router, VPC
• Security Level: Public (Anyone can view this level - this is the default.)
• Labels: patch
• Environment: All
• Flags: Patch
• Assignee: Unassigned
• Reporter: Sean Lair
• Created: 24/Jul/17 22:53
• Updated: 28/Jul/17 09:37

Description

When enabling remote access VPN, a new interface is created upon client connecting via VPN. The DNS service (dnsmasq) is set only to listen on interfaces that are active when it starts. Thus VPN users are provided the VR's IP address for DNS resolution, but it is not actually listening for DNS requests.