We Put Colitu's VPN Verification to the Test. Here’s What Changed.

Описание и применение

Колитус обновил систему проверки VPN, устранив проблемы с разрывом туннеля, переходом сети и DNS, что повысило надёжность соединения.

Задача

A VPN handshake may succeed while the tunnel cannot carry traffic, potentially causing the application to report a working connection incorrectly.

Результат

The updated Colitu VPN client now reliably verifies tunnel connectivity, recovers quickly from network transitions, and maintains DNS consistency, reducing false positives in connection checks.

Рабочий процесс

• 1. Build controlled environment where VPN server accepts handshake but drops tunnel traffic while verification endpoints stay reachable via normal internet.
• 2. Run automated tests and real‑device tests on Windows and Linux.
• 3. Identify issues: split‑tunneling affecting verification, delayed recovery on network change, DNS inconsistency.
• 4. Implement fixes: dedicated tunnel‑bound verification path, immediate reconnection on address/gateway change, tunnel‑bound DNS resolution.
• 5. Release updated binaries and document changes in Colitu Lab research.

Доказательства

We built a controlled environment where a VPN server accepts the handshake but silently drops traffic inside the tunnel, while verification endpoints remain accessible through the normal internet connection.

Источник

We corrected this behavior. Connection checks now use a dedicated, tunnel‑bound verification path that cannot be redirected by ordinary routing rules.

Источник

Colitu now detects address and gateway changes, invalidates previous verification, and begins reconnecting within seconds.

Источник

We standardized tunnel adapter handling so DNS resolution follows the VPN tunnel across the tested Windows transports.

Источник