I frequently don't use VIP.   It depends on the type of failure, but it does not normally exceed 30s, and 10s is not uncommon.   Most of my deployments have dual ISP connections (a "business" grade circuit, and a cheap domestic circuit as a backup - often sitting behind an ISP router).  It may be that it uses the backup circuit to notify the VPN registry of the primary being down - I don't know. I rarely use VPN concentrator mode, even when only used for VPNs. ... View more

@CN this is so cool, thanks for sharing and thanks for introducing the idea to us in the first place 🙂   Here's the abstract to save you a click (though, of course, the rest of the paper is worth a perusal and they'll be updating with new info as it becomes available). So exciting to know we have been part of such an impactful project:   ... View more