在官网说明 (
http://www.infradead.org/ocserv/manual.html) 中,看到了如下一行:
> The server maintains two connections/channels with the client. The main VPN channel is established over TCP and TLS. This is the control channel as well as the backup data channel. After its establishment a UDP channel using DTLS is initiated which serves as the main data channel. If the UDP channel fails to establish or is temporarily unavailable the backup channel over TCP/TLS is being used.
所以,服务器开启的时候,最好再加上 -p 443:443/udp,比如:
docker run --name ocserv --privileged -p 443:443 -p 443:443/udp -d tommylau/ocserv