We Put Colitu's VPN Verification to the Test. Here’s What Changed.

说明与用途

Colitu 更新了 VPN 验证，解决了隧道中断、网络切换和 DNS 问题，提升了连接可靠性。

问题

A VPN handshake may succeed while the tunnel cannot carry traffic, potentially causing the application to report a working connection incorrectly.

结果

The updated Colitu VPN client now reliably verifies tunnel connectivity, recovers quickly from network transitions, and maintains DNS consistency, reducing false positives in connection checks.

工作流

• 1. Build controlled environment where VPN server accepts handshake but drops tunnel traffic while verification endpoints stay reachable via normal internet.
• 2. Run automated tests and real‑device tests on Windows and Linux.
• 3. Identify issues: split‑tunneling affecting verification, delayed recovery on network change, DNS inconsistency.
• 4. Implement fixes: dedicated tunnel‑bound verification path, immediate reconnection on address/gateway change, tunnel‑bound DNS resolution.
• 5. Release updated binaries and document changes in Colitu Lab research.

证据

We built a controlled environment where a VPN server accepts the handshake but silently drops traffic inside the tunnel, while verification endpoints remain accessible through the normal internet connection.

来源

We corrected this behavior. Connection checks now use a dedicated, tunnel‑bound verification path that cannot be redirected by ordinary routing rules.

来源

Colitu now detects address and gateway changes, invalidates previous verification, and begins reconnecting within seconds.

来源

We standardized tunnel adapter handling so DNS resolution follows the VPN tunnel across the tested Windows transports.

来源