Replies: 3 comments 2 replies
-
It looks like it succeeded (
Maybe try a different hostname? Also feel free to share the config file directly here (without your username+password) |
Beta Was this translation helpful? Give feedback.
-
Thanks for answering my question, @qdm12! I tried three other VPNs, and two did work! The ones that worked switch from 'healthy' to 'unhealthy' and then back to 'healthy', and there are two errors:
Is that something to worry about? The command I just tried the three other VPNs I've tried yesterday again, and today even the one that didn't work is working now. So it seems, that there is just sometimes a temporary problem with VPNGate VPNs. I'm going to write a script that checks all (100) VPNs that are returned by the VPNGate API. Would you say that polling And would you be interested in getting a list of VPNs that don't work? As I wrote, the problem likely is with the VPNs and not with However, I spend some time trying to create something similar to |
Beta Was this translation helpful? Give feedback.
-
No it's probably just the connections started right when it became unhealthy so they failed/got dropped. It's just the ip getter and the github version information so nothing important anyway.
Subscribe to #706 I'll try do that one soon. Once natively supported, gluetun will automatically switch to another vpn server (at random for now, depending on filters set) if one fails. So that would mitigate your issue of bad vpn servers.
Well I should add a health endpoint for sure. In the meantime, checking the public IP address should work ok. If it's a scripting on your host, you should instead check when the container gets unhealthy through docker.
The thing is they might work tomorrow right? How do we know they are permanently down? |
Beta Was this translation helpful? Give feedback.
-
Hi,
I tried to connect to an VPNGate VPN (which someone has suggested as a potential new provider) with the OpenVPN config VPNGate provides, but for some reason it doesn't work, and I'm not really sure what the problem could be (there are some errors in the log output, but my research didn't lead to a solution so far).
I'm using the following command to start
gluetun
:/tmp/test.openvpn
is a OpneVPN config that I have downloaded from the VPNGate website (for example, opening this link will start the download process of such an OpenVPN config file.When I start
gluetun
, there are a few errors in the log output:Full log output
$ bash test.sh
========================================
=============== gluetun ================
=========== Made with ❤️ by ============
======= https://github.com/qdm12 =======
========================================
Running version latest built on 2022-06-12T16:05:21.750Z (commit 89b6a03)
🔧 Need help? https://github.com/qdm12/gluetun/discussions/new
🐛 Bug? https://github.com/qdm12/gluetun/issues/new
✨ New feature? https://github.com/qdm12/gluetun/issues/new
☕ Discussion? https://github.com/qdm12/gluetun/discussions/new
💻 Email? [email protected]
💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
2022-06-13T14:18:17Z INFO [routing] default route found: interface eth0, gateway 172.17.0.1 and assigned IP 172.17.0.2
2022-06-13T14:18:17Z INFO [routing] local ethernet link found: eth0
2022-06-13T14:18:17Z INFO [routing] local ipnet found: 172.17.0.0/16
2022-06-13T14:18:17Z INFO [firewall] enabling...
2022-06-13T14:18:17Z INFO [firewall] enabled successfully
2022-06-13T14:18:17Z INFO [storage] creating /gluetun/servers.json with 11233 hardcoded servers
2022-06-13T14:18:17Z INFO Alpine version: 3.16.0
2022-06-13T14:18:17Z INFO OpenVPN 2.4 version: 2.4.12
2022-06-13T14:18:17Z INFO OpenVPN 2.5 version: 2.5.6
2022-06-13T14:18:17Z INFO Unbound version: 1.15.0
2022-06-13T14:18:17Z INFO IPtables version: v1.8.8
2022-06-13T14:18:17Z INFO Settings summary:
├── VPN settings:
| ├── VPN provider settings:
| | ├── Name: custom
| | └── Server selection settings:
| | ├── VPN type: openvpn
| | └── OpenVPN server selection settings:
| | ├── Protocol: UDP
| | └── Custom configuration file: /gluetun/custom.conf
| └── OpenVPN settings:
| ├── OpenVPN version: 2.5
| ├── User: [set]
| ├── Password: [set]
| ├── Custom configuration file: /gluetun/custom.conf
| ├── Tunnel IPv6: no
| ├── Network interface: tun0
| ├── Run OpenVPN as: root
| └── Verbosity level: 1
├── DNS settings:
| ├── DNS server address to use: 127.0.0.1
| ├── Keep existing nameserver(s): no
| └── DNS over TLS settings:
| ├── Enabled: yes
| ├── Update period: every 24h0m0s
| ├── Unbound settings:
| | ├── Authoritative servers:
| | | └── cloudflare
| | ├── Caching: yes
| | ├── IPv6: no
| | ├── Verbosity level: 1
| | ├── Verbosity details level: 0
| | ├── Validation log level: 0
| | ├── System user: root
| | └── Allowed networks:
| | ├── 0.0.0.0/0
| | └── ::/0
| └── DNS filtering settings:
| ├── Block malicious: yes
| ├── Block ads: no
| ├── Block surveillance: no
| └── Blocked IP networks:
| ├── 127.0.0.1/8
| ├── 10.0.0.0/8
| ├── 172.16.0.0/12
| ├── 192.168.0.0/16
| ├── 169.254.0.0/16
| ├── ::1/128
| ├── fc00::/7
| ├── fe80::/10
| ├── ::ffff:7f00:1/104
| ├── ::ffff:a00:0/104
| ├── ::ffff:a9fe:0/112
| ├── ::ffff:ac10:0/108
| └── ::ffff:c0a8:0/112
├── Firewall settings:
| └── Enabled: yes
├── Log settings:
| └── Log level: INFO
├── Health settings:
| ├── Server listening address: 127.0.0.1:9999
| ├── Target address: cloudflare.com:443
| └── VPN wait durations:
| ├── Initial duration: 6s
| └── Additional duration: 5s
├── Shadowsocks server settings:
| └── Enabled: no
├── HTTP proxy settings:
| ├── Enabled: yes
| ├── Listening address: :8888
| ├── User:
| ├── Password: [not set]
| ├── Stealth mode: no
| └── Log: no
├── Control server settings:
| ├── Listening address: :8000
| └── Logging: yes
├── OS Alpine settings:
| ├── Process UID: 1000
| └── Process GID: 1000
├── Public IP settings:
| ├── Fetching: every 12h0m0s
| └── IP file path: /tmp/gluetun/ip
└── Version settings:
└── Enabled: yes
2022-06-13T14:18:17Z INFO [routing] default route found: interface eth0, gateway 172.17.0.1 and assigned IP 172.17.0.2
2022-06-13T14:18:17Z INFO [routing] adding route for 0.0.0.0/0
2022-06-13T14:18:17Z INFO [firewall] setting allowed subnets...
2022-06-13T14:18:17Z INFO [routing] default route found: interface eth0, gateway 172.17.0.1 and assigned IP 172.17.0.2
2022-06-13T14:18:17Z INFO TUN device is not available: open /dev/net/tun: no such file or directory; creating it...
2022-06-13T14:18:17Z INFO [pprof] http server listening on [::]:6060
2022-06-13T14:18:17Z INFO [dns over tls] using plaintext DNS at address 1.1.1.1
2022-06-13T14:18:17Z INFO [http server] http server listening on [::]:8000
2022-06-13T14:18:17Z INFO [http proxy] listening on :8888
2022-06-13T14:18:17Z INFO [healthcheck] listening on 127.0.0.1:9999
2022-06-13T14:18:17Z INFO [firewall] allowing VPN connection...
2022-06-13T14:18:17Z INFO [openvpn] DEPRECATED OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning.
2022-06-13T14:18:17Z INFO [openvpn] OpenVPN 2.5.6 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Apr 17 2022
2022-06-13T14:18:17Z INFO [openvpn] library versions: OpenSSL 1.1.1o 3 May 2022, LZO 2.10
2022-06-13T14:18:17Z WARN [openvpn] No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
2022-06-13T14:18:17Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]23.94.174.160:443
2022-06-13T14:18:17Z INFO [openvpn] Attempting to establish TCP connection with [AF_INET]23.94.174.160:443 [nonblock]
2022-06-13T14:18:17Z INFO [openvpn] TCP connection established with [AF_INET]23.94.174.160:443
2022-06-13T14:18:17Z INFO [openvpn] TCP_CLIENT link local: (not bound)
2022-06-13T14:18:17Z INFO [openvpn] TCP_CLIENT link remote: [AF_INET]23.94.174.160:443
2022-06-13T14:18:20Z INFO [openvpn] [.opengw.net] Peer Connection Initiated with [AF_INET]23.94.174.160:443
2022-06-13T14:18:23Z INFO [healthcheck] program has been unhealthy for 6s: restarting VPN
2022-06-13T14:18:23Z INFO [vpn] stopping
2022-06-13T14:18:23Z INFO [vpn] starting
2022-06-13T14:18:23Z INFO [firewall] allowing VPN connection...
2022-06-13T14:18:23Z INFO [openvpn] DEPRECATED OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning.
2022-06-13T14:18:23Z INFO [openvpn] OpenVPN 2.5.6 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Apr 17 2022
2022-06-13T14:18:23Z INFO [openvpn] library versions: OpenSSL 1.1.1o 3 May 2022, LZO 2.10
2022-06-13T14:18:23Z WARN [openvpn] No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
2022-06-13T14:18:23Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]23.94.174.160:443
2022-06-13T14:18:23Z INFO [openvpn] Attempting to establish TCP connection with [AF_INET]23.94.174.160:443 [nonblock]
2022-06-13T14:18:23Z INFO [openvpn] TCP connection established with [AF_INET]23.94.174.160:443
2022-06-13T14:18:23Z INFO [openvpn] TCP_CLIENT link local: (not bound)
2022-06-13T14:18:23Z INFO [openvpn] TCP_CLIENT link remote: [AF_INET]23.94.174.160:443
2022-06-13T14:18:26Z INFO [openvpn] [.opengw.net] Peer Connection Initiated with [AF_INET]23.94.174.160:443
2022-06-13T14:18:28Z INFO [openvpn] TUN/TAP device tun0 opened
2022-06-13T14:18:28Z INFO [openvpn] /sbin/ip link set dev tun0 up mtu 1500
2022-06-13T14:18:28Z INFO [openvpn] /sbin/ip link set dev tun0 up
2022-06-13T14:18:28Z INFO [openvpn] /sbin/ip addr add dev tun0 local 10.211.1.89 peer 10.211.1.90
2022-06-13T14:18:28Z INFO [openvpn] UID set to nonrootuser
2022-06-13T14:18:28Z INFO [openvpn] Initialization Sequence Completed
2022-06-13T14:18:28Z INFO [dns over tls] downloading DNS over TLS cryptographic files
2022-06-13T14:18:35Z INFO [healthcheck] healthy!
2022-06-13T14:18:43Z INFO [healthcheck] unhealthy: cannot dial: dial tcp4 104.16.132.229:443: i/o timeout
2022-06-13T14:18:45Z INFO [dns over tls] downloading hostnames and IP block lists
2022-06-13T14:18:45Z INFO [healthcheck] healthy!
2022-06-13T14:19:00Z WARN [dns over tls] context deadline exceeded (Client.Timeout or context cancellation while reading body)
2022-06-13T14:19:00Z INFO [dns over tls] init module 0: validator
2022-06-13T14:19:00Z INFO [dns over tls] init module 1: iterator
2022-06-13T14:19:00Z INFO [dns over tls] start of service (unbound 1.15.0).
2022-06-13T14:19:06Z INFO [healthcheck] unhealthy: cannot dial: dial tcp4: i/o timeout
2022-06-13T14:19:14Z INFO [healthcheck] program has been unhealthy for 6s: restarting VPN
2022-06-13T14:19:14Z INFO [vpn] stopping
2022-06-13T14:19:14Z ERROR [vpn] cannot get version information: Get "https://api.github.com/repos/qdm12/gluetun/commits": context canceled
2022-06-13T14:19:14Z INFO [vpn] starting
2022-06-13T14:19:14Z INFO [firewall] allowing VPN connection...
2022-06-13T14:19:14Z INFO [openvpn] DEPRECATED OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning.
2022-06-13T14:19:14Z INFO [openvpn] OpenVPN 2.5.6 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Apr 17 2022
2022-06-13T14:19:14Z INFO [openvpn] library versions: OpenSSL 1.1.1o 3 May 2022, LZO 2.10
2022-06-13T14:19:14Z WARN [openvpn] No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
2022-06-13T14:19:14Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]23.94.174.160:443
2022-06-13T14:19:14Z INFO [openvpn] Attempting to establish TCP connection with [AF_INET]23.94.174.160:443 [nonblock]
2022-06-13T14:19:14Z INFO [openvpn] TCP connection established with [AF_INET]23.94.174.160:443
2022-06-13T14:19:14Z INFO [openvpn] TCP_CLIENT link local: (not bound)
2022-06-13T14:19:14Z INFO [openvpn] TCP_CLIENT link remote: [AF_INET]23.94.174.160:443
2022-06-13T14:19:16Z INFO [openvpn] [.opengw.net] Peer Connection Initiated with [AF_INET]23.94.174.160:443
2022-06-13T14:19:19Z INFO [openvpn] TUN/TAP device tun0 opened
2022-06-13T14:19:19Z INFO [openvpn] /sbin/ip link set dev tun0 up mtu 1500
2022-06-13T14:19:19Z INFO [openvpn] /sbin/ip link set dev tun0 up
2022-06-13T14:19:19Z INFO [openvpn] /sbin/ip addr add dev tun0 local 10.211.1.181 peer 10.211.1.182
2022-06-13T14:19:19Z ERROR [openvpn] RTNETLINK answers: File exists
2022-06-13T14:19:19Z ERROR [openvpn] Linux route add command failed: external program exited with error status: 2
2022-06-13T14:19:19Z INFO [openvpn] UID set to nonrootuser
2022-06-13T14:19:19Z INFO [openvpn] Initialization Sequence Completed
2022-06-13T14:19:25Z INFO [healthcheck] program has been unhealthy for 11s: restarting VPN
2022-06-13T14:19:25Z INFO [vpn] stopping
2022-06-13T14:19:25Z INFO [vpn] starting
2022-06-13T14:19:25Z INFO [firewall] allowing VPN connection...
2022-06-13T14:19:25Z INFO [openvpn] DEPRECATED OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning.
2022-06-13T14:19:25Z INFO [openvpn] OpenVPN 2.5.6 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Apr 17 2022
2022-06-13T14:19:25Z INFO [openvpn] library versions: OpenSSL 1.1.1o 3 May 2022, LZO 2.10
2022-06-13T14:19:25Z WARN [openvpn] No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
2022-06-13T14:19:25Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]23.94.174.160:443
2022-06-13T14:19:25Z INFO [openvpn] Attempting to establish TCP connection with [AF_INET]23.94.174.160:443 [nonblock]
2022-06-13T14:19:26Z INFO [openvpn] TCP connection established with [AF_INET]23.94.174.160:443
2022-06-13T14:19:26Z INFO [openvpn] TCP_CLIENT link local: (not bound)
2022-06-13T14:19:26Z INFO [openvpn] TCP_CLIENT link remote: [AF_INET]23.94.174.160:443
2022-06-13T14:19:29Z INFO [openvpn] [.opengw.net] Peer Connection Initiated with [AF_INET]23.94.174.160:443
2022-06-13T14:19:34Z ERROR [openvpn] AUTH: Received control message: AUTH_FAILED
Your credentials might be wrong 🤨
2022-06-13T14:19:34Z INFO [openvpn] SIGUSR1[soft,auth-failure] received, process restarting⚠️
2022-06-13T14:19:37Z INFO [dns over tls] falling back on plaintext DNS at address 1.1.1.1
2022-06-13T14:19:37Z WARN [dns over tls] DNS is not working: after 10 tries: lookup github.com on 127.0.0.1:53: server misbehaving
2022-06-13T14:19:37Z INFO [dns over tls] attempting restart in 10s
^C
2022-06-13T14:19:39Z WARN Caught OS signal interrupt, shutting down
2022-06-13T14:19:39Z INFO dns ticker: terminated ✔️
2022-06-13T14:19:39Z INFO updater ticker: terminated ✔️
2022-06-13T14:19:39Z INFO http server: terminated ✔️
2022-06-13T14:19:39Z INFO control: terminated ✔️
2022-06-13T14:19:39Z INFO updater: terminated ✔️
2022-06-13T14:19:39Z INFO public IP: terminated ✔️
2022-06-13T14:19:39Z INFO tickers: terminated ✔️
2022-06-13T14:19:39Z INFO HTTP health server: terminated ✔️
2022-06-13T14:19:39Z INFO vpn: terminated ✔️
2022-06-13T14:19:39Z INFO port forwarding: terminated ✔️
2022-06-13T14:19:39Z INFO shadowsocks proxy: terminated ✔️
2022-06-13T14:19:39Z INFO [dns over tls] downloading DNS over TLS cryptographic files
2022-06-13T14:19:39Z INFO unbound: terminated ✔️
2022-06-13T14:19:39Z INFO pprof server: terminated ✔️
2022-06-13T14:19:39Z WARN other: group shutdown timed out: 2 out of 5 goroutines: public IP: goroutine shutdown timed out: after 400ms, http proxy: goroutine shutdown timed out: after 400ms
2022-06-13T14:19:39Z INFO [routing] routing cleanup...
2022-06-13T14:19:39Z INFO [routing] default route found: interface eth0, gateway 172.17.0.1 and assigned IP 172.17.0.2
2022-06-13T14:19:39Z INFO [routing] deleting route for 0.0.0.0/0
2022-06-13T14:19:39Z INFO Shutdown successful
Does anybody have any idea what the problem could be?
Beta Was this translation helpful? Give feedback.
All reactions