有时候在这里提问题

@zk8802 感谢！！ 删掉这个就解决了

@BOYPT
我已经调整 TAP 的优先级了，然而还是不行
ifIndex InterfaceAlias AddressFamily NlMtu(Bytes) InterfaceMetric Dhcp ConnectionState PolicyStore
------- -------------- ------------- ------------ --------------- ---- --------------- -----------
22 以太网 2 IPv6 1500 35 Disabled Disconnected ActiveStore
12 TAP IPv6 1500 3 Enabled Connected ActiveStore
13 以太网 IPv6 1500 35 Enabled Connected ActiveStore
1 Loopback Pseudo-Interface 1 IPv6 4294967295 75 Disabled Connected ActiveStore
22 以太网 2 IPv4 1500 35 Enabled Disconnected ActiveStore
12 TAP IPv4 1500 200 Enabled Connected ActiveStore
13 以太网 IPv4 1500 3 Enabled Connected ActiveStore
1 Loopback Pseudo-Interface 1 IPv4 4294967295 75 Disabled Connected ActiveStore

@zhouyut001 我客户端配置了 route-nopull，不接受推送，看日志也生效了

@BOYPT 如何修改这个行为呢？？好奇怪

只考虑能跑，不考虑性能什么的，用 electron

@BOYPT 大佬，你好，我也发现了，路由表是设置对了，我发现了错误所在，就是 DNS 查询默认用了 VPN 网关，这个问题是不是跟那个错误日志有关：
```
Thu Dec 27 10:15:14 2018 Options error: option 'dhcp-option' cannot be used in this context ([PUSH-OPTIONS])
Thu Dec 27 10:15:14 2018 Options error: option 'dhcp-option' cannot be used in this context ([PUSH-OPTIONS])
```

@dnsjia 客户端没有这个配置，服务端有`push "redirect-gateway def1 bypass-dhcp"`

@BOYPT 可是还是不行，流量还是都走了 VPN

@BOYPT 我都试了，日志里写着
```
Thu Dec 27 10:15:14 2018 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Thu Dec 27 10:15:14 2018 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.5 255.255.255.0'
Thu Dec 27 10:15:14 2018 Pushed option removed by filter: 'redirect-gateway def1 bypass-dhcp'
Thu Dec 27 10:15:14 2018 Options error: option 'dhcp-option' cannot be used in this context ([PUSH-OPTIONS])
Thu Dec 27 10:15:14 2018 Options error: option 'dhcp-option' cannot be used in this context ([PUSH-OPTIONS])
Thu Dec 27 10:15:14 2018 OPTIONS IMPORT: timers and/or timeouts modified
Thu Dec 27 10:15:14 2018 OPTIONS IMPORT: --ifconfig/up options modified
Thu Dec 27 10:15:14 2018 OPTIONS IMPORT: route-related options modified
Thu Dec 27 10:15:14 2018 Outgoing Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
Thu Dec 27 10:15:14 2018 Outgoing Data Channel: Using 512 bit message hash 'SHA512' for HMAC authentication
Thu Dec 27 10:15:14 2018 Incoming Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
Thu Dec 27 10:15:14 2018 Incoming Data Channel: Using 512 bit message hash 'SHA512' for HMAC authentication
Thu Dec 27 10:15:14 2018 interactive service msg_channel=820
Thu Dec 27 10:15:14 2018 ROUTE_GATEWAY 192.168.3.1/255.255.255.0 I=13 HWADDR=00:e0:4b:68:02:31
```

@BOYPT 我客户端已经添加了 --route-nopull

@hjc4869 我的服务端配置确实带了 push "redirect-gateway def1 bypass-dhcp"

@hjc4869 这是我的 ovpn 配置

client
dev tun
proto udp
sndbuf 0
rcvbuf 0
remote **.**.**.** ****
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
auth SHA512
cipher AES-256-CBC
setenv opt block-outside-dns
key-direction 1
verb 3
<ca>
-----BEGIN CERTIFICATE-----
****
</ca>
<cert>
-----BEGIN CERTIFICATE-----
**
</cert>
<key>
-----BEGIN PRIVATE KEY-----
***
</key>
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
******
-----END OpenVPN Static key V1-----
</tls-auth>


route-nopull
route 10.0.0.0 255.0.0.0 vpn_gateway

@airyland 确实是 ewei_shopv2

阿里也有很多开源的产品呀，感觉挺不错的