Cannot reuse the host VPN connection on a virtual machine with network lock enabled.

[rulerofqak 0]

If I have Network Lock disabled my VM can use the internet normally and the public IP is from AirVPN. So why does its connection gets dropped when network lock is enabled on the host? That doesn't make any sense to me. I tried adding the VM IP on routes section, I tried adding it to "allowed IPs for incoming", I tried adding it to "allowed IPs for outgoing". Nothing makes any difference. Why is that happening? Please help me.

[puno_pareparepare_puno 0]

Can someone please help. I have the same issue.

KVM -> Linux Guest -> Linux Host... Networking by default set to NAT. "Allow lan/private" is checked..

Eddie is running on Host. Guest VM connects via Eddie perfectly, with NO Network Lock ... When I turn on Network Lock on Host, it blocks Guest VM network. Please help us set this up. I've spent hours searching but have not been able to find a solution. Thank You.

 

[jx35552zza 6]

Bump. I am experiencing the same issue.

Guest machine networking through host (through Eddie) works only when network lock is disabled.

If anyone knows how to make the guest machine's networking work with network lock enabled, I would much appreciate the help.

It is not a critical issue, but I would much like to understand where, what and why this is the case (for learning purposes, and since having Network Lock enabled at all times is a nice to have).
I can imagine some blocking rules made by Eddie somewhere (maybe nftables?) being the cause, but I am not sure what to add/change and where.

[cheeze 10]

It's looking more and more that there will be no solution. I'm going back and forth with airvpn staff and they are trying to figure out if anything can be done, but they said it is a  hard problem due to the way libvirt and the network lock, further complicated by nft, iptables, iptalbes-legacy and nft-iptables work. 

Libvirt  knows about this issue and has for years, but when it comes to network lock and the iptables being taken over by the lock, it's a mess.

[jx35552zza 6]

Quick add: I'm now using VMs where networking works with Network Lock enabled. I use VMware Workstation, I do not remember what I was using when I wrote my previous comment in 2023. That said, I've only tested NAT mode, I haven't tried Bridged or other setups since I haven't used them recently.

One thing to note is that VMware's NAT hands out 127.0.0.1:53 as the DNS server via DHCP for my setup. So I always change it manually on the guest machines that I set up.

That said, I’m not entirely sure how solid Network Lock actually is. The Eddie client tends to be pretty unstable for me in a lot of areas. Still, it does display the lock icon when the VPN is active.