As requested previously I would like to see a pause/continue command to
allow a tunnel to set "on hold". What is very important is that even
openvpn internal traffic should be set to hold.
The problem is that if you pause a tunnel, the other side of the
connection will time out if it is using --ping-restart or --keepalive.
So when the tunnel is restarted, the other side of the connection may no
longer be there.
It might be possible to do this using a "restart and hold" action, where
OpenVPN does a SIGUSR1-style shutdown, but then delays the restart until a
command is received from the management interface.