Wireguard constant disconnections on Android

[VinXI 2]

I'm tired. The connection keeps disconnecting sometime after the screen is off, and yes "Pause VPN when screen is off" is disabled. I as well went to android VPN settings and checked "Always-on VPN" and the eddie client still disconnects me. I tried the wireguard client, and while it does not do random disconnections, it doesn't play nice with excluding local traffic, even when add them to the allowed IPs.

The issue doesn't happen on OpenVPN, TCP or UDP, but I wish to use wireguard.

Here is the settings and connection log. All of them have been ending with wireguard handshake expiry

--- Settings dump ---

AirVPN logged in user: VinXI
AirVPN selected user key: Default
airvpn_default_vpn_type: WireGuard
airvpn_default_openvpn_protocol: UDP
airvpn_default_openvpn_port: 443
airvpn_default_wireguard_port: 1637
airvpn_default_ip_version: IPv6overIPv4
airvpn_default_tls_mode: tls-crypt
airvpn_quick_connect_mode: auto
airvpn_cipher: SERVER
airvpn_forbid_quick_connection_to_user_country: true
airvpn_custom_bootstrap_servers: 
airvpn_server_whitelist: 
airvpn_server_blacklist: 
airvpn_country_whitelist: 
airvpn_country_blacklist: 
airvpn_current_local_country: Auto
enable_master_password: false
system_vpn_lock: true
system_vpn_boot_priority: AirVPN-Best-Server,AirVPN-Default-Server,AirVPN-Default-Country,Default-VPN-Profile,Last-Connected-Profile
system_vpn_reconnect: false
system_vpn_reconnect_retries: -1
system_dns_override_enable: false
system_dns_custom: 
system_proxy_enable: false
system_persistent_notification: true
system_notification_sound: true
system_show_message_dialogs: true
system_forced_mtu: 
system_application_filter_type: 0
system_application_filter: 
system_application_language: 
system_application_theme: System
system_first_run: true
system_start_vpn_at_boot: true
system_last_profile_is_connected: true
is_always_on_vpn: on
vpn_lockdown: off
system_exclude_local_networks: true
system_pause_vpn_when_screen_is_off: false
system_airvpn_remember_me: true
ovpn3_tls_version_min: tls_1_2
ovpn3_protocol: 
ovpn3_ipv6: 
ovpn3_timeout: 60
ovpn3_tun_persist: true
ovpn3_compression_mode: no
ovpn3_synchronous_dns_lookup: false
ovpn3_autologin_sessions: true
ovpn3_disable_client_cert: false
ovpn3_ssl_debug_level: 0
ovpn3_default_key_direction: -1
ovpn3_tls_cert_profile: 
ovpn3_proxy_host: 
ovpn3_proxy_port: 
ovpn3_proxy_allow_cleartext_auth: false
ovpn3_custom_directives: 


--- VPN status ---

Type: WireGuard
Status: Not Connected
Connection Mode: AirVPN server
User: VinXI
User Key: Default


--- VPN profile ---

Name: airvpn_server_connect
Profile: airvpn_server_connect
Status: ok
Description: us.vpn.airdns.org
Type: WireGuard
Server: us.vpn.airdns.org
Port: 1637
Protocol: UDP


--- Log dump ---

01 Jan. 1970 00:00:00 UTC [Info] Start connection to best AirVPN server in United States of America - WireGuard, Protocol UDP, Port 1637
18 Jul. 2023 12:17:21 UTC [Info] Using user key 'Default'
18 Jul. 2023 12:17:21 UTC [Info] Local networks are exempted from the VPN
18 Jul. 2023 12:17:21 UTC [Info] WireGuardTunnel: successfully created a new WireGuard client
18 Jul. 2023 12:17:21 UTC [Info] Setting MTU to 1320
18 Jul. 2023 12:17:30 UTC [Info] Starting VPN thread
18 Jul. 2023 12:17:30 UTC [Info] Adding server IPv4 address 10.188.173.174/32
18 Jul. 2023 12:17:30 UTC [Info] Adding server IPv6 address fd7d:76ee:e68f:a993:d64b:ed40:171:7272/128
18 Jul. 2023 12:17:30 UTC [Info] Adding DNS IPv4 address 10.128.0.1
18 Jul. 2023 12:17:30 UTC [Info] Adding DNS IPv6 address fd7d:76ee:e68f:a993::1
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 10.188.173.174/32
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv6 route fd7d:76ee:e68f:a993:d64b:ed40:171:7272/128
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 10.128.0.1/32
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv6 route fd7d:76ee:e68f:a993::1/128
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 0.0.0.0/5
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 8.0.0.0/7
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 11.0.0.0/8
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 12.0.0.0/6
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 16.0.0.0/4
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 32.0.0.0/3
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 64.0.0.0/2
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 128.0.0.0/3
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 160.0.0.0/5
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 168.0.0.0/6
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 172.0.0.0/12
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 172.32.0.0/11
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 172.64.0.0/10
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 172.128.0.0/9
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 173.0.0.0/8
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 174.0.0.0/7
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 176.0.0.0/4
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 192.0.0.0/9
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 192.128.0.0/11
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 192.160.0.0/13
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 192.169.0.0/16
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 192.170.0.0/15
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 192.172.0.0/14
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 192.176.0.0/12
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 192.192.0.0/10
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 193.0.0.0/8
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 194.0.0.0/7
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 196.0.0.0/6
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 200.0.0.0/5
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 208.0.0.0/4
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv4 route 224.0.0.0/3
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv6 route ::/1
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv6 route 8000::/2
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv6 route c000::/3
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv6 route e000::/4
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv6 route f000::/5
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv6 route f800::/6
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv6 route fc00::/8
18 Jul. 2023 12:17:30 UTC [Info] Adding IPv6 route fe00::/7
18 Jul. 2023 12:17:30 UTC [Info] Starting VPN connection to server
18 Jul. 2023 12:17:30 UTC [Info] Protecting IPv4 socket
18 Jul. 2023 12:17:30 UTC [Info] Protecting IPv6 socket
18 Jul. 2023 12:17:30 UTC [Info] CONNECTED to VPN (AirVPN server us.vpn.airdns.org) us.vpn.airdns.org (WireGuard)
Server Host: 104.129.48.66
Server Port: 1637
IPv4 address: 10.188.173.174/32
IPv6 address: fd7d:76ee:e68f:a993:d64b:ed40:171:7272/128
DNS IPv4: 10.128.0.1/32
DNS IPv6: fd7d:76ee:e68f:a993::1/128
18 Jul. 2023 12:20:22 UTC [Info] Refreshing AirVPN manifest
18 Jul. 2023 12:20:22 UTC [Info] Requesting manifest document to AirVPN
18 Jul. 2023 12:20:22 UTC [Info] Trying connection to AirVPN bootstrap server at http://63.33.78.166
18 Jul. 2023 12:20:26 UTC [Info] Successfully received manifest document from AirVPN
18 Jul. 2023 12:20:26 UTC [Info] Setting manifest to the instance downloaded from AirVPN server
18 Jul. 2023 12:22:06 UTC [Error] WireGuard handshake expired. Connection will be terminated.
18 Jul. 2023 12:22:06 UTC [Warning] WireGuard: Disconnecting VPN
18 Jul. 2023 12:22:06 UTC [Debug] VPNTunnel.clearContexts(): Clearing VPN contexts
18 Jul. 2023 12:22:06 UTC [Warning] WireGuard: Successfully disconnected from VPN
 

[benfitita 39]

It could be related to MTU issues. Try setting it to 1280 to see if things improve.

[VinXI 2]

11 hours ago, benfitita said:

It could be related to MTU issues. Try setting it to 1280 to see if things improve.

I tried your suggestion and changed the MTU value from 0 to 1280. Unfortunately the same issue happened soon after.

[benfitita 39]

I see. As a last resort... Sometimes bugs happen and settings can be ignored. Could you check your log if MTU is actually set to 1280? If it is, then I think the best approach would be open a support ticket in client area.

[VinXI 2]

I can confirm that there was this log line about MTU, yet the disconnection happened.

VPNContext.initMTU(): MTU forced to 1280

I will see about making a ticket. Thanks.

[kj7fs4fxeu9jhh 0]

Did you get a solution for this?
I'm facing the same problem currently.

[VinXI 2]

1 hour ago, kj7fs4fxeu9jhh said:

Did you get a solution for this?
I'm facing the same problem currently.

No. For now I have resorted to OpenVPN on Android.

[overbuilt985 0]

This is my temporary solution before new Eddie release. I have tested 1 day,never see  disconnected VPN again.
1.Eddie app->Settings->VPN->VPN reconnection
Enable it.When Handshake expired, VPN will reconnect.


2.Only use connect by single server, don't use connect by country.There have another issue when reconnecting VPN.

[VinXI 2]

That is odd that in the recent version the option of "VPN reconnection" is not there.

[overbuilt985 0]

I’m new AirVPN user,my Eddie ver. is 3.0. I don’t know other version’s situation.Wireguard is really too young too simple,not only this issue but also have another issue.These issue only happen is Wireguard not happen in OpenVPN.For now using wireguard is try error find out what happen and how to avoid it.

 

[Air4141841 24]

what is your phone doing with the screen off where it requires being connected to wireguard?
 

[VinXI 2]

For me I like to enable the VPN on my phone and forget about it until I want to change to another location. I don't want to have to remember to enable the VPN every time I pickup the phone to do something online.

[Staff 9972]

On 8/6/2023 at 4:59 PM, VinXI said:

That is odd that in the recent version the option of "VPN reconnection" is not there.

Hello!

Please note that automatic re-connection is an option that's available from Eddie Android edition 1 throughout Eddie Android edition 3.0. Which version are you running? Check Settings > VPN > VPN reconnection and make sure you enable Always on VPN and Block connections without VPN  to prevent any possible leak during re-connections (please read the instructions if needed).

Kind regards
 

[VinXI 2]

11 hours ago, Staff said:

Check Settings > VPN > VPN reconnection

Earlier when I was going through the settings when overbuilt985 posted about it, I never saw this setting. As far as I remember after VPN>VPN Lock, there was the DNS section, nothing about VPN reconnection. And even in the guide screenshots eddie-for-android-settings-03-vpn1.jpg (450×800) (airvpn.org) nothing about VPN reconnection. But now I can see the option.

I don't know if I was completely blind to it or if something changed and it appeared somehow. Regardless, I have enabled it, and will update a while later on the stability of the connection.

[Staff 9972]

@VinXI

Hello!

The screenshot has cut out the option which does exist but has not been documented in the guide. We're glad to know that you have found it.

As @overbuilt985 pointed out, it does not work all the times when you use WireGuard and you turn off and on the network and under other sleep conditions. While WireGuard becomes more refined, we are confident that this problem will be mitigated. Development team is also informed. If you switch to OpenVPN at the moment you will have a much more accurate network control.

Kind regards
 

[overbuilt985 0]

Not only these.I meet a Wireguard issue when I first using AirVPN.Maybe it only happened in a newbie like me,for old users won’t happen.
My ISP had block a lot of servers IP.In wireguard ,it don’t know the ip cannot connect still show successful connected.The Eddie show successful connected,but I cannot open any website.In OpenVPN will stop in trying connect to server.Old users had its own blocked list,won’t use the server had been block,but new user like me without it.The first time use AirVPN and choice wireguard not OpenVPN,very easy jump in to the trap.

[VinXI 2]

Hello everyone. I am back with an update on my disconnection issue. I still can't believe I missed the "VPN reconnection" option after going over the settings about ten times, but in any case I have enabled it and did some tests. It has not solved my issue, but disconnections are less frequent. So here are the things I did

1) Enabled VPN reconnection.
2) In Android VPN settings, enabled Always-on VPN and blocking connections without VPN for Eddie.
3) Disable Android battery optimization for Eddie.
4) In Android's App Overview section (the three lines button next to Android's home and back button) do NOT dismiss Eddie by swiping up on it or pressing Close all.

Each of these steps increased the likelihood of Eddie successfully reconnecting after a handshake expiry, but none of them guaranteed it for a full day. At some point the handshake will expire, and the log will say 

Trying to reconnect VPN. Attempt 1 of (infinite)

but then nothing happens. And if VPN lock is enabled, the phone goes without connection and you wouldn't know. Not ideal if you are expecting internet calls or messages. For that reason I have to switch to OV and see if this issue is resolved with WG on Air.

PS: Each WG handshake expires after 5 minutes to 1 hour, regardless of whether or not Eddie successfully reconnects. I don't know if that frequency is typical, but I thought it might be relevant to know. 

[overbuilt985 0]

Yes,Wireguard always handshake expired.
Try enable Eddie->Settings->Persistent notifications and add Eddie in memory excluded list.

[VinXI 2]

22 hours ago, overbuilt985 said:

and add Eddie in memory excluded list

Now running for 12 hours stable with this new suggestion. I will update when there's a change or in a couple of days.

[VinXI 2]

Hello everyone. I am back with an update. The long story short is that the suggestion to add Eddie to the memory exclusion list, in addition to the other steps, did further help decrease failed reconnections. But unfortunately it did not prevent them. In the end Wireguard on Eddie could go at best 24 hours without interruption. This is a reliability issue as I mentioned before, because for example yesterday morning I woke up and it was connected, but then later in the afternoon I saw that it has disconnected, and I had missed a number of messages for several hours when internet was blocked.

At this point I won't be tinkering anymore with Eddie and WG on Android. I will have to stick with OV for reliability reasons, and reconsider my future with Air pending an update to Android Eddie that makes its WG connection more stable.

[overbuilt985 0]

Are you using Power Saving mode?I want to try will it happen in my mobile.

[VinXI 2]

7 hours ago, overbuilt985 said:

Are you using Power Saving mode?I want to try will it happen in my mobile.

No.

[overbuilt985 0]

It happened.Look like Eddie restart in midnight.This is another problem cause VPN disconnect.I will try how to reproduce it.

[overbuilt985 0]

Really Eddie restart.Now is finding out what happen.

[overbuilt985 0]

Not sure is it root cause.I connected by single server.And the server going to maintain yesterday(Very luck).If server cannot connected,Eddie will always retry.And log file will more and more large.Finally Eddie will crash.
But it really hard to reproduce,I cannot control what time the server go to maintain.If this is true,use quick connect can avoid.I will change to quick connect and continue test.