Jump to content
Not connected, Your IP: 3.237.5.1
muelli

Czech Server stalls once in a while

Recommended Posts

Hi

I have a problem with the Czech server.

Since a few weeks the server seems to stall now an then (every few minutes).

No data is coming through. Then openvpn reconnects and it works again till the next stop.

 

I switched to other servers because of this, but basically i like the czech server. Is there a problem with this server that will be fixed?

 

thanks!

Share this post


Link to post

Hello!

 

If you want help then you'll have to show us how these disconnects look like, in the logs:)

 

Sent to you from me with datalove


Moderators do not speak on behalf of AirVPN. Only the Official Staff account does. Please also do not run Tor Exit Servers behind AirVPN, thank you.
Did you make a guide or how-to for something? Then contact me to get it listed in my new user guide's Guides Section, so that the community can find it more easily.

Share this post


Link to post

there is not much to see, when traffic stops, it stops.

I discovered, that it is just some sites that seem to stop working. for example this forum/airvpn works, but google.com wont open.

very weird.

just in case, the logs from the connect (when traffic stops to certain sites, openvpn does not automatically reconnect, I do that manually):

 

Oct 28 09:00:10 server ovpn-airvpn[28530]: OpenVPN 2.3.2 x86_64-pc-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [iPv6] built on Dec  1 2014
Oct 28 09:00:10 server ovpn-airvpn[28530]: Control Channel Authentication: tls-auth using INLINE static key file
Oct 28 09:00:10 server ovpn-airvpn[28530]: Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Oct 28 09:00:10 server ovpn-airvpn[28530]: Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Oct 28 09:00:10 server ovpn-airvpn[28530]: Socket Buffers: R=[212992->131072] S=[212992->131072]
Oct 28 09:00:10 server ovpn-airvpn[28531]: UDPv4 link local: [undef]
Oct 28 09:00:10 server ovpn-airvpn[28531]: UDPv4 link remote: [AF_INET]89.238.166.234:443
Oct 28 09:00:10 server ovpn-airvpn[28531]: TLS: Initial packet from [AF_INET]89.238.166.234:443, sid=4edede61 2aec2df5
Oct 28 09:00:10 server ovpn-airvpn[28531]: VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org
Oct 28 09:00:10 server ovpn-airvpn[28531]: Validating certificate key usage
Oct 28 09:00:10 server ovpn-airvpn[28531]: ++ Certificate has key usage  00a0, expects 00a0
Oct 28 09:00:10 server ovpn-airvpn[28531]: VERIFY KU OK
Oct 28 09:00:10 server ovpn-airvpn[28531]: Validating certificate extended key usage
Oct 28 09:00:10 server ovpn-airvpn[28531]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Oct 28 09:00:10 server ovpn-airvpn[28531]: VERIFY EKU OK
Oct 28 09:00:10 server ovpn-airvpn[28531]: VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org
Oct 28 09:00:15 server ovpn-airvpn[28531]: Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Oct 28 09:00:15 server ovpn-airvpn[28531]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Oct 28 09:00:15 server ovpn-airvpn[28531]: Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Oct 28 09:00:15 server ovpn-airvpn[28531]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Oct 28 09:00:15 server ovpn-airvpn[28531]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 4096 bit RSA
Oct 28 09:00:15 server ovpn-airvpn[28531]: [server] Peer Connection Initiated with [AF_INET]89.238.166.234:443
Oct 28 09:00:17 server ovpn-airvpn[28531]: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Oct 28 09:00:17 server ovpn-airvpn[28531]: PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.4.0.1,comp-lzo no,route-gateway 10.4.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.4.5.95 255.255.0.0'
Oct 28 09:00:17 server ovpn-airvpn[28531]: OPTIONS IMPORT: timers and/or timeouts modified
Oct 28 09:00:17 server ovpn-airvpn[28531]: OPTIONS IMPORT: LZO parms modified
Oct 28 09:00:17 server ovpn-airvpn[28531]: OPTIONS IMPORT: --ifconfig/up options modified
Oct 28 09:00:17 server ovpn-airvpn[28531]: OPTIONS IMPORT: route options modified
Oct 28 09:00:17 server ovpn-airvpn[28531]: OPTIONS IMPORT: route-related options modified
Oct 28 09:00:17 server ovpn-airvpn[28531]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Oct 28 09:00:17 server ovpn-airvpn[28531]: ROUTE_GATEWAY x.x.x.x/255.255.255.0 IFACE=p3p1 HWADDR=xx:xx:xx:xx:xx:xx
Oct 28 09:00:17 server ovpn-airvpn[28531]: TUN/TAP device tun0 opened
Oct 28 09:00:17 server ovpn-airvpn[28531]: TUN/TAP TX queue length set to 100
Oct 28 09:00:17 server ovpn-airvpn[28531]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Oct 28 09:00:17 server ovpn-airvpn[28531]: /sbin/ip link set dev tun0 up mtu 1500
Oct 28 09:00:17 server ovpn-airvpn[28531]: /sbin/ip addr add dev tun0 10.4.5.95/16 broadcast 10.4.255.255
Oct 28 09:00:22 server ovpn-airvpn[28531]: /sbin/ip route add x.x.x.x/32 via x.x.x.x
Oct 28 09:00:22 server ovpn-airvpn[28531]: ERROR: Linux route add command failed: external program exited with error status: 2
Oct 28 09:00:22 server ovpn-airvpn[28531]: /sbin/ip route add 0.0.0.0/1 via 10.4.0.1
Oct 28 09:00:22 server ovpn-airvpn[28531]: /sbin/ip route add 128.0.0.0/1 via 10.4.0.1
Oct 28 09:00:22 server ovpn-airvpn[28531]: Initialization Sequence Completed
 

Share this post


Link to post

Hello,

 

have you seen this?

Oct 28 09:00:22 server ovpn-airvpn[28531]: /sbin/ip route add x.x.x.x/32 via x.x.x.x
Oct 28 09:00:22 server ovpn-airvpn[28531]: ERROR: Linux route add command failed: external program exited with error status: 2

 

You must have noticed because you edited it.

 

Kind regards

Share this post


Link to post

Yes I have. But nevertheless, the route gets set correctly.

 

Today I saw this error by openvpn and then it does a hard restart:

event_wait : Interrupted system call (code=4)

 

 

it is quite confusing...

Share this post


Link to post

The hanging connections seem to get worse, I have this now with other servers to (spain, etc).

 

For testing purposes I switched to NordVPN. More or less to my amazement, the problem stopped. So it seems either you have rolled out some changes in the last weeks that impact me now, or there is another problem...

What could I provide you with, to further analyze the problem?

Share this post


Link to post

If you speak of the devil... it just happened again.

 

Just before, I set openvpn to be a bit more verbose.

 

Here the tunnel just stopped working:

 

Nov 14 13:08:33 server ovpn-airvpn[20341]: [server] Inactivity timeout (--ping-restart), restarting
Nov 14 13:08:33 server ovpn-airvpn[20341]: TCP/UDP: Closing socket
Nov 14 13:08:33 server ovpn-airvpn[20341]: SIGUSR1[soft,ping-restart] received, process restarting
Nov 14 13:08:33 server ovpn-airvpn[20341]: Restart pause, 2 second(s)

 

 

It tried to reconnect, but because of the stall and the soft ping-restart, the routes where still set, so it could not resolv, etc.

Nov 14 13:08:35 server ovpn-airvpn[20341]: Re-using SSL/TLS context
Nov 14 13:08:35 server ovpn-airvpn[20341]: LZO compression initialized
Nov 14 13:08:35 server ovpn-airvpn[20341]: Control Channel MTU parms [ L:1590 D:166 EF:66 EB:0 ET:0 EL:0 ]
Nov 14 13:08:35 server ovpn-airvpn[20341]: Socket Buffers: R=[212992->425984] S=[212992->425984]
Nov 14 13:08:55 server ovpn-airvpn[20341]: RESOLVE: Cannot resolve host address: cz.vpn.airdns.org: Temporary failure in name resolution
Nov 14 13:08:55 server ovpn-airvpn[20341]: Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:135 ET:32 EL:0 AF:3/1 ]
Nov 14 13:08:55 server ovpn-airvpn[20341]: Local Options String: 'V4,dev-type tun,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Nov 14 13:08:55 server ovpn-airvpn[20341]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Nov 14 13:08:55 server ovpn-airvpn[20341]: Local Options hash (VER=V4): '5aa199aa'
Nov 14 13:08:55 server ovpn-airvpn[20341]: Expected Remote Options hash (VER=V4): 'c61d845c'
Nov 14 13:09:15 server ovpn-airvpn[20341]: RESOLVE: Cannot resolve host address: cz.vpn.airdns.org: Temporary failure in name resolution

 

 

Then I restart manually:

Nov 14 13:09:26 server ovpn-airvpn[20571]: Current Parameter Settings:
Nov 14 13:09:26 server ovpn-airvpn[20571]:   config = '/etc/openvpn/airvpn.conf'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   mode = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   persist_config = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   persist_mode = 1
Nov 14 13:09:26 server ovpn-airvpn[20571]:   show_ciphers = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   show_digests = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   show_engines = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   genkey = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   key_pass_file = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   show_tls_ciphers = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]: Connection profiles [default]:
Nov 14 13:09:26 server ovpn-airvpn[20571]:   proto = udp
Nov 14 13:09:26 server ovpn-airvpn[20571]:   local = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   local_port = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   remote = 'cz.vpn.airdns.org'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   remote_port = 443
Nov 14 13:09:26 server ovpn-airvpn[20571]:   remote_float = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   bind_defined = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   bind_local = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   connect_retry_seconds = 5
Nov 14 13:09:26 server ovpn-airvpn[20571]:   connect_timeout = 10
Nov 14 13:09:26 server ovpn-airvpn[20571]:   connect_retry_max = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   socks_proxy_server = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   socks_proxy_port = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   socks_proxy_retry = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   tun_mtu = 1500
Nov 14 13:09:26 server ovpn-airvpn[20571]:   tun_mtu_defined = ENABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   link_mtu = 1500
Nov 14 13:09:26 server ovpn-airvpn[20571]:   link_mtu_defined = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   tun_mtu_extra = 32
Nov 14 13:09:26 server ovpn-airvpn[20571]:   tun_mtu_extra_defined = ENABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   mtu_discover_type = -1
Nov 14 13:09:26 server ovpn-airvpn[20571]:   fragment = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   mssfix = 1450
Nov 14 13:09:26 server ovpn-airvpn[20571]:   explicit_exit_notification = 5
Nov 14 13:09:26 server ovpn-airvpn[20571]: Connection profiles END
Nov 14 13:09:26 server ovpn-airvpn[20571]:   remote_random = ENABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ipchange = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   dev = 'tun'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   dev_type = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   dev_node = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   lladdr = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   topology = 1
Nov 14 13:09:26 server ovpn-airvpn[20571]:   tun_ipv6 = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ifconfig_local = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ifconfig_remote_netmask = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ifconfig_noexec = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ifconfig_nowarn = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ifconfig_ipv6_local = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ifconfig_ipv6_netbits = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ifconfig_ipv6_remote = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   shaper = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   mtu_test = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   mlock = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   keepalive_ping = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   keepalive_timeout = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   inactivity_timeout = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ping_send_timeout = 15
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ping_rec_timeout = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ping_rec_timeout_action = 2
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ping_timer_remote = ENABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   remap_sigusr1 = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   persist_tun = ENABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   persist_local_ip = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   persist_remote_ip = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   persist_key = ENABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   passtos = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   resolve_retry_seconds = 1000000000
Nov 14 13:09:26 server ovpn-airvpn[20571]:   username = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   groupname = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   chroot_dir = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   cd_dir = '/etc/openvpn'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   writepid = '/run/openvpn/airvpn.pid'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   up_script = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   down_script = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   down_pre = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   up_restart = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   up_delay = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   daemon = ENABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   inetd = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   log = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   suppress_timestamps = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   nice = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   verbosity = 4
Nov 14 13:09:26 server ovpn-airvpn[20571]:   mute = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   gremlin = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   status_file = '/run/openvpn/airvpn.status'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   status_file_version = 1
Nov 14 13:09:26 server ovpn-airvpn[20571]:   status_file_update_freq = 10
Nov 14 13:09:26 server ovpn-airvpn[20571]:   occ = ENABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   rcvbuf = 524288
Nov 14 13:09:26 server ovpn-airvpn[20571]:   sndbuf = 524288
Nov 14 13:09:26 server ovpn-airvpn[20571]:   mark = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   sockflags = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   fast_io = ENABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   lzo = 7
Nov 14 13:09:26 server ovpn-airvpn[20571]:   route_script = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   route_default_gateway = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   route_default_metric = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   route_noexec = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   route_delay = 5
Nov 14 13:09:26 server ovpn-airvpn[20571]:   route_delay_window = 30
Nov 14 13:09:26 server ovpn-airvpn[20571]:   route_delay_defined = ENABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   route_nopull = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   route_gateway_via_dhcp = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   max_routes = 100
Nov 14 13:09:26 server ovpn-airvpn[20571]:   allow_pull_fqdn = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   management_addr = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   management_port = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   management_user_pass = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   management_log_history_cache = 250
Nov 14 13:09:26 server ovpn-airvpn[20571]:   management_echo_buffer_size = 100
Nov 14 13:09:26 server ovpn-airvpn[20571]:   management_write_peer_info_file = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   management_client_user = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   management_client_group = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   management_flags = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   shared_secret_file = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   key_direction = 2
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ciphername_defined = ENABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ciphername = 'AES-256-CBC'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   authname_defined = ENABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   authname = 'SHA1'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   prng_hash = 'SHA1'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   prng_nonce_secret_len = 16
Nov 14 13:09:26 server ovpn-airvpn[20571]:   keysize = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   engine = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   replay = ENABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   mute_replay_warnings = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   replay_window = 64
Nov 14 13:09:26 server ovpn-airvpn[20571]:   replay_time = 15
Nov 14 13:09:26 server ovpn-airvpn[20571]:   packet_id_file = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   use_iv = ENABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   test_crypto = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   tls_server = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   tls_client = ENABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   key_method = 2
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ca_file = '[[iNLINE]]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ca_path = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   dh_file = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   cert_file = '[[iNLINE]]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   priv_key_file = '[[iNLINE]]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   pkcs12_file = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   cipher_list = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   tls_verify = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   tls_export_cert = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   verify_x509_type = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   verify_x509_name = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   crl_file = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ns_cert_type = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   remote_cert_ku = 160
Nov 14 13:09:26 server ovpn-airvpn[20571]:   remote_cert_ku = 136
Nov 14 13:09:26 server ovpn-airvpn[20571]:   remote_cert_ku = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]: message repeated 13 times: [   remote_cert_ku = 0]
Nov 14 13:09:26 server ovpn-airvpn[20571]:   remote_cert_eku = 'TLS Web Server Authentication'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ssl_flags = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   tls_timeout = 2
Nov 14 13:09:26 server ovpn-airvpn[20571]:   renegotiate_bytes = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   renegotiate_packets = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   renegotiate_seconds = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   handshake_window = 60
Nov 14 13:09:26 server ovpn-airvpn[20571]:   transition_window = 3600
Nov 14 13:09:26 server ovpn-airvpn[20571]:   single_session = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   push_peer_info = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   tls_exit = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   tls_auth_file = '[[iNLINE]]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   pkcs11_protected_authentication = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]: message repeated 15 times: [   pkcs11_protected_authentication = DISABLED]
Nov 14 13:09:26 server ovpn-airvpn[20571]:   pkcs11_private_mode = 00000000
Nov 14 13:09:26 server ovpn-airvpn[20571]: message repeated 15 times: [   pkcs11_private_mode = 00000000]
Nov 14 13:09:26 server ovpn-airvpn[20571]:   pkcs11_cert_private = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]: message repeated 15 times: [   pkcs11_cert_private = DISABLED]
Nov 14 13:09:26 server ovpn-airvpn[20571]:   pkcs11_pin_cache_period = -1
Nov 14 13:09:26 server ovpn-airvpn[20571]:   pkcs11_id = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   pkcs11_id_management = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   server_network = 0.0.0.0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   server_netmask = 0.0.0.0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   server_network_ipv6 = ::
Nov 14 13:09:26 server ovpn-airvpn[20571]:   server_netbits_ipv6 = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   server_bridge_ip = 0.0.0.0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   server_bridge_netmask = 0.0.0.0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   server_bridge_pool_start = 0.0.0.0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   server_bridge_pool_end = 0.0.0.0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ifconfig_pool_defined = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ifconfig_pool_start = 0.0.0.0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ifconfig_pool_end = 0.0.0.0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ifconfig_pool_netmask = 0.0.0.0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ifconfig_pool_persist_filename = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ifconfig_pool_persist_refresh_freq = 600
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ifconfig_ipv6_pool_defined = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ifconfig_ipv6_pool_base = ::
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ifconfig_ipv6_pool_netbits = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   n_bcast_buf = 256
Nov 14 13:09:26 server ovpn-airvpn[20571]:   tcp_queue_limit = 64
Nov 14 13:09:26 server ovpn-airvpn[20571]:   real_hash_size = 256
Nov 14 13:09:26 server ovpn-airvpn[20571]:   virtual_hash_size = 256
Nov 14 13:09:26 server ovpn-airvpn[20571]:   client_connect_script = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   learn_address_script = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   client_disconnect_script = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   client_config_dir = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   ccd_exclusive = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   tmp_dir = '/tmp'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   push_ifconfig_defined = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   push_ifconfig_local = 0.0.0.0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   push_ifconfig_remote_netmask = 0.0.0.0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   push_ifconfig_ipv6_defined = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   push_ifconfig_ipv6_local = ::/0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   push_ifconfig_ipv6_remote = ::
Nov 14 13:09:26 server ovpn-airvpn[20571]:   enable_c2c = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   duplicate_cn = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   cf_max = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   cf_per = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   max_clients = 1024
Nov 14 13:09:26 server ovpn-airvpn[20571]:   max_routes_per_client = 256
Nov 14 13:09:26 server ovpn-airvpn[20571]:   auth_user_pass_verify_script = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   auth_user_pass_verify_script_via_file = DISABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   port_share_host = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]:   port_share_port = 0
Nov 14 13:09:26 server ovpn-airvpn[20571]:   client = ENABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   pull = ENABLED
Nov 14 13:09:26 server ovpn-airvpn[20571]:   auth_user_pass_file = '[uNDEF]'
Nov 14 13:09:26 server ovpn-airvpn[20571]: OpenVPN 2.3.2 x86_64-pc-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [iPv6] built on Dec  1 2014
Nov 14 13:09:26 server ovpn-airvpn[20571]: WARNING: --ping should normally be used with --ping-restart or --ping-exit
Nov 14 13:09:26 server ovpn-airvpn[20571]: Control Channel Authentication: tls-auth using INLINE static key file
Nov 14 13:09:26 server ovpn-airvpn[20571]: Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Nov 14 13:09:26 server ovpn-airvpn[20571]: Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Nov 14 13:09:26 server ovpn-airvpn[20571]: LZO compression initialized
Nov 14 13:09:26 server ovpn-airvpn[20571]: Control Channel MTU parms [ L:1590 D:166 EF:66 EB:0 ET:0 EL:0 ]
Nov 14 13:09:26 server ovpn-airvpn[20571]: Socket Buffers: R=[212992->425984] S=[212992->425984]
Nov 14 13:09:26 server ovpn-airvpn[20571]: Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:135 ET:32 EL:0 AF:3/1 ]
Nov 14 13:09:26 server ovpn-airvpn[20571]: Local Options String: 'V4,dev-type tun,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Nov 14 13:09:26 server ovpn-airvpn[20571]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Nov 14 13:09:26 server ovpn-airvpn[20571]: Local Options hash (VER=V4): '5aa199aa'
Nov 14 13:09:26 server ovpn-airvpn[20571]: Expected Remote Options hash (VER=V4): 'c61d845c'
Nov 14 13:09:26 server ovpn-airvpn[20572]: UDPv4 link local: [undef]
Nov 14 13:09:26 server ovpn-airvpn[20572]: UDPv4 link remote: [AF_INET]89.238.166.234:443
Nov 14 13:09:27 server ovpn-airvpn[20572]: TLS: Initial packet from [AF_INET]89.238.166.234:443, sid=04efc86b 529d0252
Nov 14 13:09:27 server ovpn-airvpn[20572]: VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org
Nov 14 13:09:27 server ovpn-airvpn[20572]: Validating certificate key usage
Nov 14 13:09:27 server ovpn-airvpn[20572]: ++ Certificate has key usage  00a0, expects 00a0
Nov 14 13:09:27 server ovpn-airvpn[20572]: VERIFY KU OK
Nov 14 13:09:27 server ovpn-airvpn[20572]: Validating certificate extended key usage
Nov 14 13:09:27 server ovpn-airvpn[20572]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Nov 14 13:09:27 server ovpn-airvpn[20572]: VERIFY EKU OK
Nov 14 13:09:27 server ovpn-airvpn[20572]: VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org
Nov 14 13:09:30 server ovpn-airvpn[20572]: WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1590', remote='link-mtu 1558'
Nov 14 13:09:30 server ovpn-airvpn[20572]: WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1532', remote='tun-mtu 1500'
Nov 14 13:09:30 server ovpn-airvpn[20572]: Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Nov 14 13:09:30 server ovpn-airvpn[20572]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Nov 14 13:09:30 server ovpn-airvpn[20572]: Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Nov 14 13:09:30 server ovpn-airvpn[20572]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Nov 14 13:09:30 server ovpn-airvpn[20572]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 4096 bit RSA
Nov 14 13:09:30 server ovpn-airvpn[20572]: [server] Peer Connection Initiated with [AF_INET]89.238.166.234:443
Nov 14 13:09:32 server ovpn-airvpn[20572]: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Nov 14 13:09:32 server ovpn-airvpn[20572]: PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.4.0.1,comp-lzo no,route-gateway 10.4.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.4.5.95 255.255.0.0'
Nov 14 13:09:32 server ovpn-airvpn[20572]: OPTIONS IMPORT: timers and/or timeouts modified
Nov 14 13:09:32 server ovpn-airvpn[20572]: OPTIONS IMPORT: LZO parms modified
Nov 14 13:09:32 server ovpn-airvpn[20572]: OPTIONS IMPORT: --ifconfig/up options modified
Nov 14 13:09:32 server ovpn-airvpn[20572]: OPTIONS IMPORT: route options modified
Nov 14 13:09:32 server ovpn-airvpn[20572]: OPTIONS IMPORT: route-related options modified
Nov 14 13:09:32 server ovpn-airvpn[20572]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Nov 14 13:09:32 server ovpn-airvpn[20572]: ROUTE_GATEWAY X.X.X.X/255.255.255.0 IFACE=p3p1 HWADDR=00:X:X:X:X:X
Nov 14 13:09:32 server ovpn-airvpn[20572]: TUN/TAP device tun0 opened
Nov 14 13:09:32 server ovpn-airvpn[20572]: TUN/TAP TX queue length set to 1000
Nov 14 13:09:32 server ovpn-airvpn[20572]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Nov 14 13:09:32 server ovpn-airvpn[20572]: /sbin/ip link set dev tun0 up mtu 1500
Nov 14 13:09:32 server ovpn-airvpn[20572]: /sbin/ip addr add dev tun0 10.4.5.95/16 broadcast 10.4.255.255
Nov 14 13:09:37 server ovpn-airvpn[20572]: /sbin/ip route add 89.238.166.234/32 via X:X:X:X

 

Interestingly, the route ERROR still appears with airVPN, it did not with nordVPN....

However the route is being set correctly.

 

Nov 14 13:09:37 server ovpn-airvpn[20572]: ERROR: Linux route add command failed: external program exited with error status: 2

Nov 14 13:09:37 server ovpn-airvpn[20572]: /sbin/ip route add 0.0.0.0/1 via 10.4.0.1
Nov 14 13:09:37 server ovpn-airvpn[20572]: /sbin/ip route add 128.0.0.0/1 via 10.4.0.1
Nov 14 13:09:37 server ovpn-airvpn[20572]: Initialization Sequence Completed
 

As everything was working very nicely with nordVPN, i copied some of their settings to the airVPN config:
remote-random
persist-tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
ping 15
ping-restart 0
ping-timer-rem
reneg-sec 0
comp-lzo
pull
fast-io
 

But the behaviour did not change.

Share this post


Link to post

This error:

Nov 14 13:09:37 server ovpn-airvpn[20572]: ERROR: Linux route add command failed: external program exited with error status: 2

 
has nothing to do with the server.
When the disconnection is forced by the server, OpenVPN client will restart without status 2.

Occasional moderator, sometimes BOFH. Opinions are my own, except when my wife disagrees.

Share this post


Link to post

This error does not appear every time. Just did a manual restart and it did not show up.

$?=2 just means the kernel rejected the route to be set because it may already exist etc. I think _this_ error is safe to ignore, if the routes are correct afterwards.

 

I removed the nordVPN options and hope I can post more info if the problem occurs again. however I doubt it, as there is just not much to see in the logs...

any advice on how to forece more info is welcome.

Share this post


Link to post

I meant that you have something causing route conflict from your side.

For example, when 2 OpenVPN clients connect to the same server simultaneously.

 

If you use both the Network Manager and OpenVPN in cli mode that can cause the problem.

You should make sure that you run OpenVPN client only once.


Occasional moderator, sometimes BOFH. Opinions are my own, except when my wife disagrees.

Share this post


Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
  • Security Check
    Play CAPTCHA Audio
    Refresh Image

×
×
  • Create New...