ANSWERED AirVPN Suite Bluetit Error TUN_SETUP_FAILED

[matto82 0]

Hi all,

Attempting to run the AirVPN Suite in an LXC on Proxmox however I am receiving the following error:
 

TUN Error: tun_tx_queue_len_error: Operation not permitted
EVENT: TUN_SETUP_FAILED [FATAL ERROR] tun_tx_queue_len_error: Operation not permitted
ERROR: TUN_SETUP_FAILED

/dev/net/tun has root access 

crw-rw-rw- 1 root root 10, 200 Oct 15 14:10 /dev/net/tun

Also made sure my LXC has IPv6 enable.

I've previously used OpenVPN with another VPN service no problem, but I would like to add port forwarding which my current provider does not offer.

I've attached the log file from bluetit.

Thanks!

bluetit.log

[Staff 10014]

@matto82

Hello!

OpenVPN can't configure the tun interface (operation not permitted). Usually this happens in unprivileged containers, is it the case?

Please upgrade to AirVPN Suite 2.0.0 beta and test again with both OpenVPN and WireGuard. If the issue persists, please check this thread for further insight and potential solutions:
https://forum.proxmox.com/threads/openvpn-in-unprivileged-container.38670/

Kind regards
 

[matto82 0]

Yes, it is in an unprivileged container. I have the issue in the thread you linked resolved, I can run OpenVPN by itself and connect just fine, it's your suite software I am not able to connect with. Main issue is I am trying to get port forwarding to work. I still receive the same error with the 2.0.0 beta software.

Is there a way I can configure the port forwarding with just OpenVPN? Sorry I'm not familiar at all with how to get the port forwarding working with OpenVPN by itself, I was hoping your suite software would handle it for me.

[Staff 10014]

17 hours ago, matto82 said:

have the issue in the thread you linked resolved, I can run OpenVPN by itself and connect just fine, it's your suite software I am not able to connect with.

Hello!

OK. What is the OpenVPN version you have no problems with? OpenVPN 2 branch runs external system tools to configure interfaces and routing table, while OpenVPN3-AirVPN and Bluetit try to minimize the external tools to launch. In particular the tun interface configuration is accomplished quite differently by OpenVPN 2 and 3.

If you run Bluetit in "WireGuard mode", do you experience the very same issue? Also, do you experience the same issue if you run native wg tools?

Kind regards
 

[Staff 10014]

On 10/18/2024 at 4:09 PM, matto82 said:

Is there a way I can configure the port forwarding with just OpenVPN?

Hello!

Remote inbound port forwarding is a server side feature that can be comfortably managed from your AirVPN account port panel. Please see here:
https://airvpn.org/faq/port_forwarding/

Kind regards
 

[nonplokoon 0]

 

On 10/19/2024 at 9:44 AM, Staff said:

Hello!

OK. What is the OpenVPN version you have no problems with? OpenVPN 2 branch runs external system tools to configure interfaces and routing table, while OpenVPN3-AirVPN and Bluetit try to minimize the external tools to launch. In particular the tun interface configuration is accomplished quite differently by OpenVPN 2 and 3.

If you run Bluetit in "WireGuard mode", do you experience the very same issue? Also, do you experience the same issue if you run native wg tools?

Kind regards
 

Dear AirVPN support,

I have the same issue as reported by matto82. I'm running an unprivileged container with Debian bookworkm on a host with the same distribution. Here is the situation:

 - AirVPN Suite 1.3.0 and 2.0.0 beta when configured to use openvpn bring the following error:
 

TUN Error: tun_tx_queue_len_error: Operation not permitted
EVENT: TUN_SETUP_FAILED [FATAL ERROR] tun_tx_queue_len_error: Operation not permitted
ERROR: TUN_SETUP_FAILED

- OpenVPN3-AirVPN fork obtained via git clone https://github.com/AirVPN/openvpn3-airvpn in the unprivileged container brings the same error:

TUN Error: tun_tx_queue_len_error: Operation not permitted
EVENT: TUN_SETUP_FAILED [FATAL ERROR] tun_tx_queue_len_error: Operation not permitted
ERROR: TUN_SETUP_FAILED

- OpenVPN3 from the stable repository (when using intructions here: https://community.openvpn.net/openvpn/wiki/OpenVPN3Linux#Stablerepository-DebianUbuntu) successfully sets up the tunnel in the unprivileged container

Therefore, the issue lies within the OpenVPN3-AirVPN fork and not the rest of the AirVPN-Suite itself. Let me know what I should additionally do to help you identify the bug.

Kind regards