Linux: AirVPN Suite 2.0.0 preview available

[Staff 9765]

@irxhnfdptv

Thanks, so it looks like the problem is Bluetit-specific. Can you please send us (here or in private) the complete Bluetit log, taken after the problem has occurred, that you can print with the following command?

sudo journalctl | grep bluetit

Kind regards
 

[Staff 9765]

@irxhnfdptv

Thank you very much for your tests! The problem is now understood and a fix is coming on the next alpha version which will be out in the very near future, stay tuned!

Kind regards
 

[183aTr78f9o 16]

On 9/15/2023 at 10:00 AM, Staff said:

Bluetit run control file (/etc/airvpn/bluetit.rc) option:

airvpntype: (string) VPN type to be used for AirVPN connections. Possible values: wireguard, openvpn. Default: openvpn

 

@Staff Correct me if I'm wrong but it appears that airvpntype option is missing from /etc/airvpn/bluetit.rc file in AirVPN-Suite-x86_64-2.0.0-alpha-2.tar.gz archive (sha512 sum verified and matching).

Thought I would let you know.

[183aTr78f9o 16]

My experience after using 2.0.0 Preview for a few days (systemd 255.3 / NetworkManager 1.42.6-r2)

/etc/airvpn/bluetit.rc

airconnectatboot     quick
networklockpersist   iptables
airvpntype           wireguard

Despite having "airconnectatboot quick" and bluetit.service unit being enabled:

$ systemctl status bluetit.service
● bluetit.service - AirVPN Bluetit Daemon
     Loaded: loaded (/etc/systemd/system/bluetit.service; enabled; preset: disabled)
     Active: active (running) since Mon 2024-02-12 16:20:31 CET; 7s ago

bluetit doesn't connect at boot.

$ journalctl -u bluetit.service

Feb 12 16:03:47 desktop systemd[1]: Stopping AirVPN Bluetit Daemon...
Feb 12 16:03:47 desktop bluetit[883839]: Received Terminated signal. Terminating Bluetit.
Feb 12 16:03:47 desktop bluetit[883839]: Stopping WireGuard connection thread
Feb 12 16:03:47 desktop bluetit[883839]: Stopping WireGuard connection
Feb 12 16:03:47 desktop bluetit[883839]: Removed route IPv4 0.0.0.0/0 dev tun0
Feb 12 16:03:47 desktop bluetit[883839]: Removed route IPv4 128.0.0.0/1 dev tun0
Feb 12 16:03:47 desktop bluetit[883839]: Removed route IPv6 8000::/1 dev tun0
Feb 12 16:03:47 desktop bluetit[883839]: Removed route IPv4 redacted/32 via 192.168.1.254 dev enp7s0
Feb 12 16:03:47 desktop bluetit[883839]: Disabling WireGuard network interface tun0
Feb 12 16:03:47 desktop bluetit[883839]: WireGuard network interface tun0 successfully disabled
Feb 12 16:03:47 desktop bluetit[883839]: WireGuard successfully disconnected
Feb 12 16:03:47 desktop bluetit[883839]: Successfully restored DNS settings
Feb 12 16:03:47 desktop bluetit[883839]: Session network filter and lock rollback successful
Feb 12 16:03:47 desktop bluetit[883839]: Connection statistics updater thread finished
Feb 12 16:03:47 desktop bluetit[883839]: Session network filter and lock rollback successful
Feb 12 16:03:47 desktop bluetit[883839]: Persistent network filter and lock are enabled
Feb 12 16:03:47 desktop bluetit[883839]: Sending event 'event_disconnected'
Feb 12 16:03:47 desktop bluetit[883839]: Connection time: 07:02:21
Feb 12 16:03:47 desktop bluetit[883839]: Total transferred Input data: 853.24 MB
Feb 12 16:03:47 desktop bluetit[883839]: Total transferred Output data: 45.45 MB
Feb 12 16:03:47 desktop bluetit[883839]: Max Input rate: 33.79 Mbit/s
Feb 12 16:03:47 desktop bluetit[883839]: Max Output rate: 766.10 Kbit/s
Feb 12 16:03:47 desktop bluetit[883839]: AirVPN Manifest updater thread finished
Feb 12 16:03:47 desktop bluetit[883839]: Session network filter and lock are now disabled
Feb 12 16:03:47 desktop bluetit[883839]: Logging out AirVPN user 183aTr78f9o
Feb 12 16:03:47 desktop bluetit[883839]: Sending event 'event_end_of_session'
Feb 12 16:03:47 desktop systemd[1]: bluetit.service: Deactivated successfully.
Feb 12 16:03:47 desktop systemd[1]: Stopped AirVPN Bluetit Daemon.
Feb 12 16:03:47 desktop systemd[1]: bluetit.service: Consumed 12.085s CPU time, 9.0M memory peak.
-- Boot cfc9061d444c4310bc005cc765531a58 --
Feb 12 16:06:31 desktop systemd[1]: Starting AirVPN Bluetit Daemon...
Feb 12 16:06:31 desktop bluetit[3301]: Starting Bluetit - AirVPN WireGuard/OpenVPN3 Service 2.0.0 alpha 2 - 24 November 2023
Feb 12 16:06:31 desktop bluetit[3301]: OpenVPN core 3.9 AirVPN linux x86_64 64-bit
Feb 12 16:06:31 desktop bluetit[3301]: Copyright (C) 2012-2022 OpenVPN Inc. All rights reserved.
Feb 12 16:06:31 desktop bluetit[3301]: SSL Library: OpenSSL 3.0.12 24 Oct 2023
Feb 12 16:06:31 desktop bluetit[3301]: WireGuard connection available
Feb 12 16:06:31 desktop bluetit[3306]: Bluetit daemon started with PID 3306
Feb 12 16:06:31 desktop bluetit[3306]: Waiting for external network connection to be available
Feb 12 16:06:31 desktop systemd[1]: Started AirVPN Bluetit Daemon.
Feb 12 16:07:30 desktop bluetit[3306]: Waiting for external network connection to be available
Feb 12 16:08:30 desktop bluetit[3306]: Waiting for external network connection to be available
Feb 12 16:09:30 desktop bluetit[3306]: Waiting for external network connection to be available

It's stuck at "Waiting for external network connection to be available" but at this point my Ethernet interface is up and working. I do
have Internet connection outside of the VPN tunnel.

Futhermore, switching back to

airvpntype           openvpn

and rebooting results in the same issue at boot. bluetit.service still prints "WireGuard connection available" whereas it should now connect using OpenVPN instead of Wireguard.

Regardless of "airvpntype" value, restarting bluetit.service manually solves the issue and the VPN connection is established successfully.

I never experienced this before on AirVPN Suite 1.3.0.

Another concern is that bluetit doesn't automatically reconnect after resuming from suspend/hibernate. This isn't new, it has always been like this as far as I'm concerned. I've been using custom systemd services to stop bluetit before suspending/hibernating and starting it again after, but it doesn't work reliably.

If someone has a more robust workaround, I'd love to know it.

Apart from that, I haven't experienced any disconnection whatsoever using Wireguard, very stable. The speed boost (depending on the server) compared to OpenVPN is noticeable and nice to have.

Thanks.

[Staff 9765]

@183aTr78f9o

Hello and thank you very much for your tests, patience and documented reports.

All the problems you reported are being examined.

Kind regards
 

[Rib 0]

Hi, is there a way to reverse the split tunnnel (I.E. have only specified apps using the VPN connection)?

[Staff 9765]

21 hours ago, Rib said:

Hi, is there a way to reverse the split tunnnel (I.E. have only specified apps using the VPN connection)?

Hello!

We're sorry, this is not currently planned. Suite 2.0 is designed to offer reverse traffic splitting on an application basis only. The type of traffic splitting you request may be considered in future releases.

Kind regards