Jump to content
Not connected, Your IP: 216.73.217.153
AirVPN
nethole

ANSWERED gluetun/openvpn previously working now won't connect

By nethole, ... in Troubleshooting and Problems

Recommended Posts

nethole    0

nethole
Posted ... (edited)

I've been using my config for the past couple years.  More and more frequently, I would get a situation where gluetun would not start properly, but stopping and restarting a couple times, and it would function.   As of today, I cannot get it to start successfully.  I do not see any problems listed with the Netherland servers.  I've regenerated a new opvn configuration, got rid of ipv6, and was testing on a separate machine.  I was able to succesffully connect once, but after starting it has not successfully connected.  Is this a symptom of an update that has ocurred or phasing out of old software on airvpn servers that has finally caught up with me? 

-snip-  Running version latest built on 2024-04-08T07:43:05.096Z (commit 7b4befc)

---snip
gtunmanual  | 2026-07-08T09:45:37-04:00 INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov  2 2022
gtunmanual  | 2026-07-08T09:45:37-04:00 INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
gtunmanual  | 2026-07-08T09:45:37-04:00 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]213.152.187.233:443
gtunmanual  | 2026-07-08T09:45:37-04:00 INFO [openvpn] Attempting to establish TCP connection with [AF_INET]213.152.187.233:443 [nonblock]
gtunmanual  | 2026-07-08T09:45:37-04:00 INFO [openvpn] TCP connection established with [AF_INET]213.152.187.233:443
gtunmanual  | 2026-07-08T09:45:37-04:00 INFO [openvpn] TCP_CLIENT link local: (not bound)
gtunmanual  | 2026-07-08T09:45:37-04:00 INFO [openvpn] TCP_CLIENT link remote: [AF_INET]213.152.187.233:443
gtunmanual  | 2026-07-08T09:45:37-04:00 INFO [openvpn] Connection reset, restarting [-1]
gtunmanual  | 2026-07-08T09:45:37-04:00 INFO [openvpn] SIGUSR1[soft,connection-reset] received, process restarting

FYI....   VPN using the same configs from linux works JUST FINE.....    This is something with the gluetun

I'm about to go generate test configs for a number of different countries, and then follow up directly with an openvpn client to see if I can find more details for what's going on, but I thought I would ask here in case others have seen similar problems lately, or semi-recently in the past, and can suggest a direction to look (beside just update everything and hope for the best).  I'll be doing that on test machines systematically anyway, just looking to find out what the actual problem is, for why gluetun, which has worked for the past couple of years, is no longer establishing a VPN via openvpn with airvpn servers

JULY 9 EDIT:  Has there been certificate updates, or software updates,  that have occured recently to SOME airvpn machines?     My gluetun is not able to communicate with some servers.   (same for openvpn).  Yet, if I connect to the platforms with openssl, I see different results from the machines that are 'working' for gluetun and the machines that are NOT working for gluetun

Edited ... by nethole
Added openssl connection details

Share this post

Link to post

nethole    0

nethole
Posted ...

Additional notes, I've been testing from other platforms, and some of those other platfforms are 'sometimes working' with the netherland servers.   So far I've found

failing to 213.152.186.171 from laptop with v3.41.1 of gluetun

works to 213.152.162.91 (Sorry, missed the name)

fails 213.152.162.157

works to 213.152.187.207 alzirr

works 213.152.162.156 muscida

fails 134.19.179.238


Is this ringing any bells with recent changes to some of the platforms?

Share this post

Link to post

nethole    0

nethole
Posted ...

I realize that I had been using an older version of airvpn servers for gluetun, but after updating the list, I'm now seeing issues connecting with gluetun to what SHOULD be valid servers, 

134.19.179.174, Aljanah -- netherlands for example.  To rule out something that is specific to gluetun, I've used openvpn, even updating to newer versions.  Now those cannot connect, or rather, are being reset.
sudo openvpn --config singlefail.ovpn --remote 134.19.178.174 443 --verb 4

2026-07-09 08:55:45 DEPRECATED OPTION: --persist-key option ignored. Keys are now always persisted across restarts.
2026-07-09 08:55:45 us=916408 Note: --data-ciphers-fallback with cipher 'AES-256-CBC' disables data channel offload.
2026-07-09 08:55:45 us=916431 WARNING: file 'user.key' is group or others accessible
2026-07-09 08:55:45 us=916441 Current Parameter Settings:
2026-07-09 08:55:45 us=916446   config = 'singlefail.ovpn'
2026-07-09 08:55:45 us=916451   mode = 0
2026-07-09 08:55:45 us=916458   persist_config = DISABLED
2026-07-09 08:55:45 us=916464   persist_mode = 1
2026-07-09 08:55:45 us=916470   show_ciphers = DISABLED
2026-07-09 08:55:45 us=916475   show_digests = DISABLED
2026-07-09 08:55:45 us=916480   show_engines = DISABLED
2026-07-09 08:55:45 us=916485   genkey = DISABLED
2026-07-09 08:55:45 us=916490   genkey_filename = '[UNDEF]'
2026-07-09 08:55:45 us=916496   key_pass_file = '[UNDEF]'
2026-07-09 08:55:45 us=916501   show_tls_ciphers = DISABLED
2026-07-09 08:55:45 us=916506   connect_retry_max = 0
2026-07-09 08:55:45 us=916512 Connection profiles [0]:
2026-07-09 08:55:45 us=916518   proto = tcp-client
2026-07-09 08:55:45 us=916523   Local Sockets:
2026-07-09 08:55:45 us=916529     [(null)]:1194-tcp-client
2026-07-09 08:55:45 us=916535   remote = '134.19.179.174'
2026-07-09 08:55:45 us=916540   remote_port = '443'
2026-07-09 08:55:45 us=916545   remote_float = DISABLED
2026-07-09 08:55:45 us=916550   bind_defined = DISABLED
2026-07-09 08:55:45 us=916555   bind_local = DISABLED
2026-07-09 08:55:45 us=916563   bind_ipv6_only = DISABLED
2026-07-09 08:55:45 us=916568   connect_retry_seconds = 1
2026-07-09 08:55:45 us=916574   connect_timeout = 120
2026-07-09 08:55:45 us=916579   socks_proxy_server = '[UNDEF]'
2026-07-09 08:55:45 us=916584   socks_proxy_port = '[UNDEF]'
2026-07-09 08:55:45 us=916589   tun_mtu = 1500
2026-07-09 08:55:45 us=916595   tun_mtu_defined = ENABLED
2026-07-09 08:55:45 us=916600   link_mtu = 1500
2026-07-09 08:55:45 us=916605   link_mtu_defined = DISABLED
2026-07-09 08:55:45 us=916610   tun_mtu_extra = 0
2026-07-09 08:55:45 us=916615   tun_mtu_extra_defined = DISABLED
2026-07-09 08:55:45 us=916621   tls_mtu = 1250
2026-07-09 08:55:45 us=916626   mtu_discover_type = -1
2026-07-09 08:55:45 us=916632   fragment = 0
2026-07-09 08:55:45 us=916637   mssfix = 1492
2026-07-09 08:55:45 us=916642   mssfix_encap = ENABLED
2026-07-09 08:55:45 us=916647   mssfix_fixed = DISABLED
2026-07-09 08:55:45 us=916653   explicit_exit_notification = 0
2026-07-09 08:55:45 us=916658   tls_auth_file = '[UNDEF]'
2026-07-09 08:55:45 us=916663   key_direction = not set
2026-07-09 08:55:45 us=916669   tls_crypt_file = '[INLINE]'
2026-07-09 08:55:45 us=916674   tls_crypt_v2_file = '[UNDEF]'
2026-07-09 08:55:45 us=916679 Connection profiles [1]:
2026-07-09 08:55:45 us=916684   proto = tcp-client
2026-07-09 08:55:45 us=916689   Local Sockets:
2026-07-09 08:55:45 us=916696     [(null)]:1194-tcp-client
2026-07-09 08:55:45 us=916706   remote = '134.19.178.174'
2026-07-09 08:55:45 us=916716   remote_port = '443'
2026-07-09 08:55:45 us=916724   remote_float = DISABLED
2026-07-09 08:55:45 us=916733   bind_defined = DISABLED
2026-07-09 08:55:45 us=916740   bind_local = DISABLED
2026-07-09 08:55:45 us=916745   bind_ipv6_only = DISABLED
2026-07-09 08:55:45 us=916750   connect_retry_seconds = 1
2026-07-09 08:55:45 us=916755   connect_timeout = 120
2026-07-09 08:55:45 us=916761   socks_proxy_server = '[UNDEF]'
2026-07-09 08:55:45 us=916767   socks_proxy_port = '[UNDEF]'
2026-07-09 08:55:45 us=916771   tun_mtu = 1500
2026-07-09 08:55:45 us=916776   tun_mtu_defined = ENABLED
2026-07-09 08:55:45 us=916781   link_mtu = 1500
2026-07-09 08:55:45 us=916787   link_mtu_defined = DISABLED
2026-07-09 08:55:45 us=916792   tun_mtu_extra = 0
2026-07-09 08:55:45 us=916797   tun_mtu_extra_defined = DISABLED
2026-07-09 08:55:45 us=916802   tls_mtu = 1250
2026-07-09 08:55:45 us=916808   mtu_discover_type = -1
2026-07-09 08:55:45 us=916813   fragment = 0
2026-07-09 08:55:45 us=916818   mssfix = 1492
2026-07-09 08:55:45 us=916824   mssfix_encap = ENABLED
2026-07-09 08:55:45 us=916829   mssfix_fixed = DISABLED
2026-07-09 08:55:45 us=916834   explicit_exit_notification = 0
2026-07-09 08:55:45 us=916839   tls_auth_file = '[UNDEF]'
2026-07-09 08:55:45 us=916845   key_direction = not set
2026-07-09 08:55:45 us=916850   tls_crypt_file = '[INLINE]'
2026-07-09 08:55:45 us=916860   tls_crypt_v2_file = '[UNDEF]'
2026-07-09 08:55:45 us=916869 Connection profiles END
2026-07-09 08:55:45 us=916879   remote_random = DISABLED
2026-07-09 08:55:45 us=916887   ipchange = '[UNDEF]'
2026-07-09 08:55:45 us=916893   dev = 'tun'
2026-07-09 08:55:45 us=916898   dev_type = '[UNDEF]'
2026-07-09 08:55:45 us=916903   dev_node = '[UNDEF]'
2026-07-09 08:55:45 us=916908   disable_dco = ENABLED
2026-07-09 08:55:45 us=916914   lladdr = '[UNDEF]'
2026-07-09 08:55:45 us=916919   topology = 1
2026-07-09 08:55:45 us=916924   ifconfig_local = '[UNDEF]'
2026-07-09 08:55:45 us=916930   ifconfig_remote_netmask = '[UNDEF]'
2026-07-09 08:55:45 us=916935   ifconfig_noexec = DISABLED
2026-07-09 08:55:45 us=916940   ifconfig_nowarn = DISABLED
2026-07-09 08:55:45 us=916945   ifconfig_ipv6_local = '[UNDEF]'
2026-07-09 08:55:45 us=916950   ifconfig_ipv6_netbits = 0
2026-07-09 08:55:45 us=916956   ifconfig_ipv6_remote = '[UNDEF]'
2026-07-09 08:55:45 us=916961   shaper = 0
2026-07-09 08:55:45 us=916966   mtu_test = 0
2026-07-09 08:55:45 us=916971   mlock = DISABLED
2026-07-09 08:55:45 us=916976   keepalive_ping = 0
2026-07-09 08:55:45 us=916981   keepalive_timeout = 0
2026-07-09 08:55:45 us=916987   inactivity_timeout = 0
2026-07-09 08:55:45 us=916992   session_timeout = 0
2026-07-09 08:55:45 us=916998   inactivity_minimum_bytes = 0
2026-07-09 08:55:45 us=917003   ping_send_timeout = 0
2026-07-09 08:55:45 us=917009   ping_rec_timeout = 0
2026-07-09 08:55:45 us=917014   ping_rec_timeout_action = 0
2026-07-09 08:55:45 us=917019   ping_timer_remote = DISABLED
2026-07-09 08:55:45 us=917025   remap_sigusr1 = 0
2026-07-09 08:55:45 us=917030   persist_tun = ENABLED
2026-07-09 08:55:45 us=917035   persist_local_ip = DISABLED
2026-07-09 08:55:45 us=917040   persist_remote_ip = DISABLED
2026-07-09 08:55:45 us=917045   passtos = DISABLED
2026-07-09 08:55:45 us=917051   resolve_retry_seconds = 1000000000
2026-07-09 08:55:45 us=917056   resolve_in_advance = DISABLED
2026-07-09 08:55:45 us=917062   username = '[UNDEF]'
2026-07-09 08:55:45 us=917067   groupname = '[UNDEF]'
2026-07-09 08:55:45 us=917073   chroot_dir = '[UNDEF]'
2026-07-09 08:55:45 us=917078   cd_dir = '[UNDEF]'
2026-07-09 08:55:45 us=917083   writepid = '[UNDEF]'
2026-07-09 08:55:45 us=917088   up_script = '[UNDEF]'
2026-07-09 08:55:45 us=917094   down_script = '[UNDEF]'
2026-07-09 08:55:45 us=917099   down_pre = DISABLED
2026-07-09 08:55:45 us=917105   up_restart = DISABLED
2026-07-09 08:55:45 us=917110   up_delay = DISABLED
2026-07-09 08:55:45 us=917115   daemon = DISABLED
2026-07-09 08:55:45 us=917121   log = DISABLED
2026-07-09 08:55:45 us=917126   suppress_timestamps = DISABLED
2026-07-09 08:55:45 us=917131   machine_readable_output = DISABLED
2026-07-09 08:55:45 us=917137   nice = 0
2026-07-09 08:55:45 us=917142   verbosity = 4
2026-07-09 08:55:45 us=917148   mute = 0
2026-07-09 08:55:45 us=917153   gremlin = 0
2026-07-09 08:55:45 us=917159   status_file = '[UNDEF]'
2026-07-09 08:55:45 us=917164   status_file_version = 1
2026-07-09 08:55:45 us=917169   status_file_update_freq = 60
2026-07-09 08:55:45 us=917174   occ = ENABLED
2026-07-09 08:55:45 us=917180   rcvbuf = 262144
2026-07-09 08:55:45 us=917185   sndbuf = 262144
2026-07-09 08:55:45 us=917191   mark = 0
2026-07-09 08:55:45 us=917196   sockflags = 0
2026-07-09 08:55:45 us=917202   comp.alg = 1
2026-07-09 08:55:45 us=917208   comp.flags = 24
2026-07-09 08:55:45 us=917213   route_script = '[UNDEF]'
2026-07-09 08:55:45 us=917218   route_default_gateway = '[UNDEF]'
2026-07-09 08:55:45 us=917224   route_default_metric = 0
2026-07-09 08:55:45 us=917229   route_default_table_id = 0
2026-07-09 08:55:45 us=917235   route_noexec = DISABLED
2026-07-09 08:55:45 us=917240   route_delay = 0
2026-07-09 08:55:45 us=917245   route_delay_window = 30
2026-07-09 08:55:45 us=917250   route_delay_defined = DISABLED
2026-07-09 08:55:45 us=917256   route_nopull = DISABLED
2026-07-09 08:55:45 us=917261   route_gateway_via_dhcp = DISABLED
2026-07-09 08:55:45 us=917267   allow_pull_fqdn = DISABLED
2026-07-09 08:55:45 us=917272   management_addr = '[UNDEF]'
2026-07-09 08:55:45 us=917278   management_port = '[UNDEF]'
2026-07-09 08:55:45 us=917283   management_user_pass = '[UNDEF]'
2026-07-09 08:55:45 us=917288   management_log_history_cache = 250
2026-07-09 08:55:45 us=917294   management_echo_buffer_size = 100
2026-07-09 08:55:45 us=917299   management_client_user = '[UNDEF]'
2026-07-09 08:55:45 us=917304   management_client_group = '[UNDEF]'
2026-07-09 08:55:45 us=917310   management_flags = 0
2026-07-09 08:55:45 us=917316   shared_secret_file = '[UNDEF]'
2026-07-09 08:55:45 us=917321   key_direction = not set
2026-07-09 08:55:45 us=917326   ciphername = 'AES-256-CBC'
2026-07-09 08:55:45 us=917332   ncp_ciphers = 'AES-256-GCM:AES-256-CBC:AES-192-GCM:AES-192-CBC:AES-128-GCM:AES-128-CBC'
2026-07-09 08:55:45 us=917338   authname = 'SHA512'
2026-07-09 08:55:45 us=917343   engine = DISABLED
2026-07-09 08:55:45 us=917348   mute_replay_warnings = DISABLED
2026-07-09 08:55:45 us=917354   replay_window = 64
2026-07-09 08:55:45 us=917359   replay_time = 15
2026-07-09 08:55:45 us=917365   packet_id_file = '[UNDEF]'
2026-07-09 08:55:45 us=917370   test_crypto = DISABLED
2026-07-09 08:55:45 us=917375   tls_server = DISABLED
2026-07-09 08:55:45 us=917381   tls_client = ENABLED
2026-07-09 08:55:45 us=917386   ca_file = 'ca.crt'
2026-07-09 08:55:45 us=917392   ca_path = '[UNDEF]'
2026-07-09 08:55:45 us=917397   dh_file = '[UNDEF]'
2026-07-09 08:55:45 us=917403   cert_file = 'user.crt'
2026-07-09 08:55:45 us=917408   extra_certs_file = '[UNDEF]'
2026-07-09 08:55:45 us=917414   priv_key_file = 'user.key'
2026-07-09 08:55:45 us=917419   pkcs12_file = '[UNDEF]'
2026-07-09 08:55:45 us=917424   cipher_list = '[UNDEF]'
2026-07-09 08:55:45 us=917430   cipher_list_tls13 = '[UNDEF]'
2026-07-09 08:55:45 us=917435   tls_cert_profile = '[UNDEF]'
2026-07-09 08:55:45 us=917441   tls_verify = '[UNDEF]'
2026-07-09 08:55:45 us=917446   tls_export_peer_cert_dir = '[UNDEF]'
2026-07-09 08:55:45 us=917452   verify_x509_type = 0
2026-07-09 08:55:45 us=917457   verify_x509_name = '[UNDEF]'
2026-07-09 08:55:45 us=917462   crl_file = '[UNDEF]'
2026-07-09 08:55:45 us=917468   ns_cert_type = 0
2026-07-09 08:55:45 us=917473   remote_cert_ku = 65535
2026-07-09 08:55:45 us=917478   remote_cert_ku = 0
2026-07-09 08:55:45 us=917484   remote_cert_ku = 0
2026-07-09 08:55:45 us=917489   remote_cert_ku = 0
2026-07-09 08:55:45 us=917495   remote_cert_ku = 0
2026-07-09 08:55:45 us=917500   remote_cert_ku = 0
2026-07-09 08:55:45 us=917506   remote_cert_ku = 0
2026-07-09 08:55:45 us=917511   remote_cert_ku = 0
2026-07-09 08:55:45 us=917516   remote_cert_ku = 0
2026-07-09 08:55:45 us=917522   remote_cert_ku = 0
2026-07-09 08:55:45 us=917527   remote_cert_ku = 0
2026-07-09 08:55:45 us=917536   remote_cert_ku = 0
2026-07-09 08:55:45 us=917545   remote_cert_ku = 0
2026-07-09 08:55:45 us=917554   remote_cert_ku = 0
2026-07-09 08:55:45 us=917562   remote_cert_ku = 0
2026-07-09 08:55:45 us=917568   remote_cert_ku = 0
2026-07-09 08:55:45 us=917573   remote_cert_eku = 'TLS Web Server Authentication'
2026-07-09 08:55:45 us=917579   ssl_flags = 192
2026-07-09 08:55:45 us=917584   tls_timeout = 2
2026-07-09 08:55:45 us=917590   renegotiate_bytes = -1
2026-07-09 08:55:45 us=917595   renegotiate_packets = 0
2026-07-09 08:55:45 us=917601   renegotiate_seconds = 3600
2026-07-09 08:55:45 us=917606   handshake_window = 60
2026-07-09 08:55:45 us=917611   transition_window = 3600
2026-07-09 08:55:45 us=917617   single_session = DISABLED
2026-07-09 08:55:45 us=917622   push_peer_info = ENABLED
2026-07-09 08:55:45 us=917627   tls_exit = DISABLED
2026-07-09 08:55:45 us=917633   tls_crypt_v2_metadata = '[UNDEF]'
2026-07-09 08:55:45 us=917638   pkcs11_protected_authentication = DISABLED
2026-07-09 08:55:45 us=917644   pkcs11_protected_authentication = DISABLED
2026-07-09 08:55:45 us=917649   pkcs11_protected_authentication = DISABLED
2026-07-09 08:55:45 us=917655   pkcs11_protected_authentication = DISABLED
2026-07-09 08:55:45 us=917660   pkcs11_protected_authentication = DISABLED
2026-07-09 08:55:45 us=917665   pkcs11_protected_authentication = DISABLED
2026-07-09 08:55:45 us=917676   pkcs11_protected_authentication = DISABLED
2026-07-09 08:55:45 us=917686   pkcs11_protected_authentication = DISABLED
2026-07-09 08:55:45 us=917695   pkcs11_protected_authentication = DISABLED
2026-07-09 08:55:45 us=917705   pkcs11_protected_authentication = DISABLED
2026-07-09 08:55:45 us=917714   pkcs11_protected_authentication = DISABLED
2026-07-09 08:55:45 us=917721   pkcs11_protected_authentication = DISABLED
2026-07-09 08:55:45 us=917729   pkcs11_protected_authentication = DISABLED
2026-07-09 08:55:45 us=917736   pkcs11_protected_authentication = DISABLED
2026-07-09 08:55:45 us=917744   pkcs11_protected_authentication = DISABLED
2026-07-09 08:55:45 us=917751   pkcs11_protected_authentication = DISABLED
2026-07-09 08:55:45 us=917759   pkcs11_private_mode = 00000000
2026-07-09 08:55:45 us=917767   pkcs11_private_mode = 00000000
2026-07-09 08:55:45 us=917774   pkcs11_private_mode = 00000000
2026-07-09 08:55:45 us=917781   pkcs11_private_mode = 00000000
2026-07-09 08:55:45 us=917789   pkcs11_private_mode = 00000000
2026-07-09 08:55:45 us=917797   pkcs11_private_mode = 00000000
2026-07-09 08:55:45 us=917804   pkcs11_private_mode = 00000000
2026-07-09 08:55:45 us=917811   pkcs11_private_mode = 00000000
2026-07-09 08:55:45 us=917832   pkcs11_private_mode = 00000000
2026-07-09 08:55:45 us=917847   pkcs11_private_mode = 00000000
2026-07-09 08:55:45 us=917852   pkcs11_private_mode = 00000000
2026-07-09 08:55:45 us=917857   pkcs11_private_mode = 00000000
2026-07-09 08:55:45 us=917862   pkcs11_private_mode = 00000000
2026-07-09 08:55:45 us=917867   pkcs11_private_mode = 00000000
2026-07-09 08:55:45 us=917872   pkcs11_private_mode = 00000000
2026-07-09 08:55:45 us=917877   pkcs11_private_mode = 00000000
2026-07-09 08:55:45 us=917882   pkcs11_cert_private = DISABLED
2026-07-09 08:55:45 us=917887   pkcs11_cert_private = DISABLED
2026-07-09 08:55:45 us=917892   pkcs11_cert_private = DISABLED
2026-07-09 08:55:45 us=917897   pkcs11_cert_private = DISABLED
2026-07-09 08:55:45 us=917902   pkcs11_cert_private = DISABLED
2026-07-09 08:55:45 us=917907   pkcs11_cert_private = DISABLED
2026-07-09 08:55:45 us=917912   pkcs11_cert_private = DISABLED
2026-07-09 08:55:45 us=917917   pkcs11_cert_private = DISABLED
2026-07-09 08:55:45 us=917921   pkcs11_cert_private = DISABLED
2026-07-09 08:55:45 us=917927   pkcs11_cert_private = DISABLED
2026-07-09 08:55:45 us=917932   pkcs11_cert_private = DISABLED
2026-07-09 08:55:45 us=917936   pkcs11_cert_private = DISABLED
2026-07-09 08:55:45 us=917941   pkcs11_cert_private = DISABLED
2026-07-09 08:55:45 us=917946   pkcs11_cert_private = DISABLED
2026-07-09 08:55:45 us=917951   pkcs11_cert_private = DISABLED
2026-07-09 08:55:45 us=917956   pkcs11_cert_private = DISABLED
2026-07-09 08:55:45 us=917961   pkcs11_pin_cache_period = -1
2026-07-09 08:55:45 us=917966   pkcs11_id = '[UNDEF]'
2026-07-09 08:55:45 us=917972   pkcs11_id_management = DISABLED
2026-07-09 08:55:45 us=917986   server_network = 0.0.0.0
2026-07-09 08:55:45 us=917991   server_netmask = 0.0.0.0
2026-07-09 08:55:45 us=917996   server_network_ipv6 = ::
2026-07-09 08:55:45 us=918001   server_netbits_ipv6 = 0
2026-07-09 08:55:45 us=918007   server_bridge_ip = 0.0.0.0
2026-07-09 08:55:45 us=918012   server_bridge_netmask = 0.0.0.0
2026-07-09 08:55:45 us=918017   server_bridge_pool_start = 0.0.0.0
2026-07-09 08:55:45 us=918022   server_bridge_pool_end = 0.0.0.0
2026-07-09 08:55:45 us=918027   ifconfig_pool_defined = DISABLED
2026-07-09 08:55:45 us=918033   ifconfig_pool_start = 0.0.0.0
2026-07-09 08:55:45 us=918038   ifconfig_pool_end = 0.0.0.0
2026-07-09 08:55:45 us=918043   ifconfig_pool_netmask = 0.0.0.0
2026-07-09 08:55:45 us=918049   ifconfig_pool_persist_filename = '[UNDEF]'
2026-07-09 08:55:45 us=918054   ifconfig_pool_persist_refresh_freq = 600
2026-07-09 08:55:45 us=918059   ifconfig_ipv6_pool_defined = DISABLED
2026-07-09 08:55:45 us=918064   ifconfig_ipv6_pool_base = ::
2026-07-09 08:55:45 us=918070   ifconfig_ipv6_pool_netbits = 0
2026-07-09 08:55:45 us=918075   n_bcast_buf = 256
2026-07-09 08:55:45 us=918081   tcp_queue_limit = 64
2026-07-09 08:55:45 us=918086   real_hash_size = 0
2026-07-09 08:55:45 us=918091   virtual_hash_size = 0
2026-07-09 08:55:45 us=918096   client_connect_script = '[UNDEF]'
2026-07-09 08:55:45 us=918101   learn_address_script = '[UNDEF]'
2026-07-09 08:55:45 us=918106   client_disconnect_script = '[UNDEF]'
2026-07-09 08:55:45 us=918111   client_crresponse_script = '[UNDEF]'
2026-07-09 08:55:45 us=918116   client_config_dir = '[UNDEF]'
2026-07-09 08:55:45 us=918121   ccd_exclusive = DISABLED
2026-07-09 08:55:45 us=918126   tmp_dir = '/tmp'
2026-07-09 08:55:45 us=918131   push_ifconfig_defined = DISABLED
2026-07-09 08:55:45 us=918137   push_ifconfig_local = 0.0.0.0
2026-07-09 08:55:45 us=918142   push_ifconfig_remote_netmask = 0.0.0.0
2026-07-09 08:55:45 us=918147   push_ifconfig_ipv6_defined = DISABLED
2026-07-09 08:55:45 us=918153   push_ifconfig_ipv6_local = ::/0
2026-07-09 08:55:45 us=918163   push_ifconfig_ipv6_remote = ::
2026-07-09 08:55:45 us=918173   enable_c2c = DISABLED
2026-07-09 08:55:45 us=918181   duplicate_cn = DISABLED
2026-07-09 08:55:45 us=918187   cf_max = 0
2026-07-09 08:55:45 us=918196   cf_per = 0
2026-07-09 08:55:45 us=918205   cf_initial_max = 100
2026-07-09 08:55:45 us=918212   cf_initial_per = 10
2026-07-09 08:55:45 us=918218   max_clients = 1024
2026-07-09 08:55:45 us=918223   max_routes_per_client = 256
2026-07-09 08:55:45 us=918229   auth_user_pass_verify_script = '[UNDEF]'
2026-07-09 08:55:45 us=918234   auth_user_pass_verify_script_via_file = DISABLED
2026-07-09 08:55:45 us=918239   auth_token_generate = DISABLED
2026-07-09 08:55:45 us=918248   force_key_material_export = DISABLED
2026-07-09 08:55:45 us=918256   auth_token_lifetime = 0
2026-07-09 08:55:45 us=918266   auth_token_secret_file = '[UNDEF]'
2026-07-09 08:55:45 us=918275   port_share_host = '[UNDEF]'
2026-07-09 08:55:45 us=918281   port_share_port = '[UNDEF]'
2026-07-09 08:55:45 us=918290   vlan_tagging = DISABLED
2026-07-09 08:55:45 us=918300   vlan_accept = all
2026-07-09 08:55:45 us=918310   vlan_pvid = 1
2026-07-09 08:55:45 us=918319   client = ENABLED
2026-07-09 08:55:45 us=918328   pull = ENABLED
2026-07-09 08:55:45 us=918336   auth_user_pass_file = '[UNDEF]'
2026-07-09 08:55:45 us=918348 OpenVPN 2.7.5 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2026-07-09 08:55:45 us=918365 library versions: OpenSSL 3.0.2 15 Mar 2022, LZO 2.10
2026-07-09 08:55:45 us=918378 DCO version: N/A
2026-07-09 08:55:45 us=922472 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2026-07-09 08:55:45 us=922508 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2026-07-09 08:55:45 us=922518 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2026-07-09 08:55:45 us=922530 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2026-07-09 08:55:45 us=922625 Control Channel MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1250 tun_max_mtu:0 headroom:126 payload:1600 tailroom:126 ET:0 ]
2026-07-09 08:55:45 us=922653 Data Channel MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1500 tun_max_mtu:1600 headroom:136 payload:1768 tailroom:562 ET:0 ]
2026-07-09 08:55:45 us=922696 TCP/UDP: Preserving recently used remote address: [AF_INET]134.19.179.174:443
2026-07-09 08:55:45 us=922734 Socket Buffers: R=[131072->425984] S=[16384->425984]
2026-07-09 08:55:45 us=922745 Attempting to establish TCP connection with [AF_INET]134.19.179.174:443
2026-07-09 08:55:46 us=25701 TCP connection established with [AF_INET]134.19.179.174:443
2026-07-09 08:55:46 us=25730 TCPv4_CLIENT link local: (not bound)
2026-07-09 08:55:46 us=25737 TCPv4_CLIENT link remote: [AF_INET]134.19.179.174:443
2026-07-09 08:55:46 us=143754 Connection reset, restarting [-1]
2026-07-09 08:55:46 us=143879 TCP/UDP: Closing socket
2026-07-09 08:55:46 us=143922 SIGUSR1[soft,connection-reset] received, process restarting
2026-07-09 08:55:46 us=143965 Restart pause, 2 second(s)
2026-07-09 08:55:48 us=144065 Re-using SSL/TLS context
2026-07-09 08:55:48 us=144212 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2026-07-09 08:55:48 us=144264 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2026-07-09 08:55:48 us=144281 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2026-07-09 08:55:48 us=144303 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2026-07-09 08:55:48 us=144435 Control Channel MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1250 tun_max_mtu:0 headroom:126 payload:1600 tailroom:126 ET:0 ]
2026-07-09 08:55:48 us=144459 Data Channel MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1500 tun_max_mtu:1600 headroom:136 payload:1768 tailroom:562 ET:0 ]
2026-07-09 08:55:48 us=144520 TCP/UDP: Preserving recently used remote address: [AF_INET]134.19.178.174:443
2026-07-09 08:55:48 us=144576 Socket Buffers: R=[131072->425984] S=[16384->425984]
2026-07-09 08:55:48 us=144590 Attempting to establish TCP connection with [AF_INET]134.19.178.174:443
2026-07-09 08:55:48 us=245719 TCP connection established with [AF_INET]134.19.178.174:443
2026-07-09 08:55:48 us=245750 TCPv4_CLIENT link local: (not bound)
2026-07-09 08:55:48 us=245757 TCPv4_CLIENT link remote: [AF_INET]134.19.178.174:443
2026-07-09 08:55:48 us=353748 Connection reset, restarting [-1]
2026-07-09 08:55:48 us=353867 TCP/UDP: Closing socket
2026-07-09 08:55:48 us=353905 SIGUSR1[soft,connection-reset] received, process restarting
2026-07-09 08:55:48 us=353931 Restart pause, 2 second(s)
2026-07-09 08:55:50 us=354006 Re-using SSL/TLS context
2026-07-09 08:55:50 us=354079 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2026-07-09 08:55:50 us=354100 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2026-07-09 08:55:50 us=354109 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2026-07-09 08:55:50 us=354120 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2026-07-09 08:55:50 us=354167 Control Channel MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1250 tun_max_mtu:0 headroom:126 payload:1600 tailroom:126 ET:0 ]
2026-07-09 08:55:50 us=354181 Data Channel MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1500 tun_max_mtu:1600 headroom:136 payload:1768 tailroom:562 ET:0 ]
2026-07-09 08:55:50 us=354219 TCP/UDP: Preserving recently used remote address: [AF_INET]134.19.179.174:443
2026-07-09 08:55:50 us=354247 Socket Buffers: R=[131072->425984] S=[16384->425984]
2026-07-09 08:55:50 us=354254 Attempting to establish TCP connection with [AF_INET]134.19.179.174:443
2026-07-09 08:55:51 us=472727 TCP connection established with [AF_INET]134.19.179.174:443
2026-07-09 08:55:51 us=472758 TCPv4_CLIENT link local: (not bound)
2026-07-09 08:55:51 us=472765 TCPv4_CLIENT link remote: [AF_INET]134.19.179.174:443
^C2026-07-09 08:55:51 us=517226 event_wait : Interrupted system call (fd=-1,code=4)
2026-07-09 08:55:51 us=517341 TCP/UDP: Closing socket
2026-07-09 08:55:51 us=517391 SIGINT[hard,] received, process exiting


--contents of ovpn file to force connection to particular server.
 --------------------------------------------------------
# Air VPN | https://airvpn.org | Saturday 13th of April 2024 03:51:50 PM
# OpenVPN Client Configuration
# AirVPN_Netherlands_TCP-443-Entry3
# --------------------------------------------------------

client
dev tun
remote 134.19.179.174 443
resolv-retry infinite
nobind
persist-key
persist-tun
auth-nocache
verb 3
rcvbuf 262144
sndbuf 262144
push-peer-info
setenv UV_IPV6 yes
ca "ca.crt"
cert "user.crt"
key "user.key"
remote-cert-tls server
comp-lzo no
data-ciphers AES-256-GCM:AES-256-CBC:AES-192-GCM:AES-192-CBC:AES-128-GCM:AES-128-CBC
data-ciphers-fallback AES-256-CBC
proto tcp
tls-crypt "tls-crypt.key"
auth SHA512


 

Share this post

Link to post

nethole    0

nethole
Posted ...

Data point.   a server that my gluetun can succesfully communicate with, returns THIS information a direct connection from openssl
openssl s_client -connect 213.152.162.167:443
CONNECTED(00000003)
40D71F6EF07F0000:error:0A000126:SSL routines:ssl3_read_n:unexpected eof while reading:../ssl/record/rec_layer_s3.c:317:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 0 bytes and written 300 bytes
Verification: OK
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)

YET, from many machines that gluetun cannot comunicate with openssl returns THIS instead, ending with a return code of 18 -- self signed certificate
187.203:443 -CAfile ca.crt
CONNECTED(00000003)
Can't use SSL_get_servername
depth=0 C = IT, ST = Italy, L = Perugia, O = AirVPN, OU = stunnel, CN = stunnel.airvpn.org, emailAddress = info@airvpn.org
verify error:num=18:self-signed certificate
verify return:1
depth=0 C = IT, ST = Italy, L = Perugia, O = AirVPN, OU = stunnel, CN = stunnel.airvpn.org, emailAddress = info@airvpn.org
verify return:1
---
Certificate chain
 0 s:C = IT, ST = Italy, L = Perugia, O = AirVPN, OU = stunnel, CN = stunnel.airvpn.org, emailAddress = info@airvpn.org
   i:C = IT, ST = Italy, L = Perugia, O = AirVPN, OU = stunnel, CN = stunnel.airvpn.org, emailAddress = info@airvpn.org
   a:PKEY: rsaEncryption, 4096 (bit); sigalg: RSA-SHA1
   v:NotBefore: Jan 20 13:29:24 2015 GMT; NotAfter: Jan 15 13:29:24 2035 GMT
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIF8zCCA9ugAwIBAgIJAMztYlGaT5vlMA0GCSqGSIb3DQEBBQUAMIGPMQswCQYD
VQQGEwJJVDEOMAwGA1UECAwFSXRhbHkxEDAOBgNVBAcMB1BlcnVnaWExDzANBgNV
BAoMBkFpclZQTjEQMA4GA1UECwwHc3R1bm5lbDEbMBkGA1UEAwwSc3R1bm5lbC5h
aXJ2cG4ub3JnMR4wHAYJKoZIhvcNAQkBFg9pbmZvQGFpcnZwbi5vcmcwHhcNMTUw
MTIwMTMyOTI0WhcNMzUwMTE1MTMyOTI0WjCBjzELMAkGA1UEBhMCSVQxDjAMBgNV
BAgMBUl0YWx5MRAwDgYDVQQHDAdQZXJ1Z2lhMQ8wDQYDVQQKDAZBaXJWUE4xEDAO
BgNVBAsMB3N0dW5uZWwxGzAZBgNVBAMMEnN0dW5uZWwuYWlydnBuLm9yZzEeMBwG
CSqGSIb3DQEJARYPaW5mb0BhaXJ2cG4ub3JnMIICIjANBgkqhkiG9w0BAQEFAAOC
Ag8AMIICCgKCAgEAyjmExgSn+fzhBN029EGPvrYOXT1warJA8oVdqST8Ag58RXxf
aK9ePvfhzlav96+syf4Vog/PSbmvLbH6oC9/ZRTt+QlaWzBU7Jg1ZgahB/ErLFFK
LXPwULuG+8xnbEAix5KfEMmXefRgbws5nt1E5SVmzfENdi7FLYGflb9Tf2d/Ey/0
Quk027qjYQNZY216I0+ULuW69fQyPAC5OXnA94cLL/+1bs0Z6uM/QvQ+4AujOElf
Cx3r+GwPUDvVFYhSBd6Rlryhn+jFIo8xlLw5LJHsx3ZGW1LCSMtN+SlWF75pQTwn
IVIL4r/1NUYV3bSEkvo1JaRZI3pxH8rMmu/46zVDroMqGZdFieiTSsqwp7BG/RH+
wPi1BxwY+14YUrtH87sbiyBNYDoWneUIroccHyRXpRGcIIW2KpgUCDo3psYMU/I1
XVmzfQ3FpyTkyXf/erDxGwoE52qDZ6o63R1umf6Bo5LL4O709czaJqBV9TLls6N+
mbM2KGa1Bs6DoZuqXcZmgzKaXzD7xtOZaphQxPFc4fTcJ17ccUp+qE5oaLTArUF+
fo4t45U2qBkmkr74uGxbHp9hE+zkZqwRUTCV34nIdFGPN14g/kpBugdrXXJzlSo0
82xI8nC8REYe8ibd0B39VCvA7k5rfve9BlVyAmUE8XGVY+NLX1k/OX4Jv+UCAwEA
AaNQME4wHQYDVR0OBBYEFHjvPQm6E58lOp28Qokmu0sV9m63MB8GA1UdIwQYMBaA
FHjvPQm6E58lOp28Qokmu0sV9m63MAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEF
BQADggIBAJd5IIh/w7OwCP4keUKgsUbsogNvD9CCcuVYle3016s0wFj9cwqzfWvO
+r6/NaFmROYfd5TaiW0URG2ToZ/oiARBmCBpIAsK4l2UkJYCTVyhTUlFwsYv/sz0
NTCixFBFXu+k+4andTz5rRMVZXzq+ncMJXLMITQlvpiEmrW+F18/l3oS5hmLmpcV
Pxqh8UrtBZr/cLtjskSoMzf2f6C6tymZwWVyd+Hogn4Zlm1ZgYpC8Lt7d9GAUXMV
RXZhNhFy/Mh8SzcUEoZNknlsWgtwm6rrd65Y3DuC1Bo/DfrbV7cjax0NKWr9YNIB
BdOLwFWtcKwEev6O3eGrLkKHOwsb23eQylffqkzduL81Tl8BSY6zmRa0BrFvk/E4
1ZoJRKlIGqfVfPyoHNrFlvasJu9EK0E+SpOCNIq5cCMTbebc7EIS2jps52XJYaX8
MEvnpHL4qKu6KLsIY4fEjse+XIYvnkH2eoY3gZtIGlFYEfRW2tDKgTFLxBhJY/0R
+tGMGv2Ptesynr/JRMX0ej9wK7FgbdJ+bci259XRh9+gw7iq2DvtEA+aNQeakpq1
wR2NzrRVz6rDpoFKbZb1xKgXKyGPKz5xb20tU1VlnKNu5/oOyulK5ig6LlJRBQCM
W523LJNCYprObISc+IJBm93J6bLxxa/92B8mx8PidA1somc3US5w
-----END CERTIFICATE-----
subject=C = IT, ST = Italy, L = Perugia, O = AirVPN, OU = stunnel, CN = stunnel.airvpn.org, emailAddress = info@airvpn.org
issuer=C = IT, ST = Italy, L = Perugia, O = AirVPN, OU = stunnel, CN = stunnel.airvpn.org, emailAddress = info@airvpn.org
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA
Server Temp Key: ECDH, prime256v1, 256 bits
---
SSL handshake has read 2290 bytes and written 419 bytes
Verification error: self-signed certificate
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 4096 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: 71836963574E3A04AC63700F46856723EDEB893B62542F3C1438FEEF0129B9E5
    Session-ID-ctx:
    Master-Key: 8A9B92A3D3B79DA5886F6FDAFB7A12EF5105A061A1A4E74F5C244215B4F4B6DBBE2B7448E7382E866932743DA99581DD
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1783620257
    Timeout   : 7200 (sec)
    Verify return code: 18 (self-signed certificate)
    Extended master secret: no
---
closed

 

Share this post

Link to post

Staff    10572

Staff
Posted ...
On 7/8/2026 at 4:06 PM, nethole said:
JULY 9 EDIT:  Has there been certificate updates, or software updates,  that have occured recently to SOME airvpn machines?     My gluetun is not able to communicate with some servers.   (same for openvpn).  Yet, if I connect to the platforms with openssl, I see different results from the machines that are 'working' for gluetun and the machines that are NOT working for gluetun

Hello!

The infrastructure is upgrading to OpenVPN 2.7 with DCO (Data Channel Offload) support. However, this upgrade doesn't break compatibility with OpenVPN 2.4 and higher versions, and you're running OpenVPN 2.5. Try to upgrade to OpenVPN 2.6 or 2.7 just in case and check whether the problem gets resolved. Also test WireGuard, which has not been modified (the kernel module gets upgraded with the kernel upgrade of course). To see the list of upgraded servers, you can go to your AirVPN account "Client Area", enter the "Config Generator", turn on the "Advanced" switch, and select "2.6 DCO" in the "OpenVPN profile" combo box. The CG will show only the servers running OpenVPN 2.7 and DCO module.

Kind regards

 

Share this post

Link to post

chilaspt    0

chilaspt
Posted ...
44 minutes ago, Staff said:

Hello!

The infrastructure is upgrading to OpenVPN 2.7 with DCO (Data Channel Offload) support. However, this upgrade doesn't break compatibility with OpenVPN 2.4 and higher versions, and you're running OpenVPN 2.5. Try to upgrade to OpenVPN 2.6 or 2.7 just in case and check whether the problem gets resolved. Also test WireGuard, which has not been modified (the kernel module gets upgraded with the kernel upgrade of course). To see the list of upgraded servers, you can go to your AirVPN account "Client Area", enter the "Config Generator", turn on the "Advanced" switch, and select "2.6 DCO" in the "OpenVPN profile" combo box. The CG will show only the servers running OpenVPN 2.7 and DCO module.

Kind regards

 

Thanks, I reconfigured to wireguard, and was able to get it to work last night! 

Cheers!

Share this post

Link to post

nethole    0

nethole
Posted ...

I can occasionally get a successful connection with gluetun, (3.41.0 specifically, which uses openvpn 2.6), however, the behavior of gluetun to merge servers into the servers.json  is making it difficult to reliably connect.


As part of the debugging process, I realized my original situation was not getting updated servers file, as I hadn't kept it on long enough (14 days, I believe was the default refresh window.  I turned it on and off daily).   A separate testing machine originally had openvpn 2.5.  I've updated it to openvpn 2.7.   Various versions of gluetun from 3.40 to 3.41.0, and 3.41.1 had variations in their behavior of which version of openvpn (2.5/2.6) to use.  I am now intimately familiar with the issues over the past six months from https://github.com/passteque/gluetun/issues  They also had different behavior in how they performed ipv6 testing.  This adds to the confusion because it would often pick server host that was ipv6 based, even though ipv6 was turned off on the platform running docker', or turned off in docker itself.  Seems somewhere there was a ipv6 route lying around, that it would then decided that it was acceptable to try to add an ipv6 route, and then would fail.  Add to this confusion 'mistakes' that get made in testing, and recording of tests, trying to narrow down problems and find solutions.  Side Quests include backing out changes to use macvlan for additional IP addresses on a single physical host with a docker container, as well as backing out changes to wireguard on local router, which don't completely change router routing behavior until the router is rebooted.

I'm going to suggest that contrary to the statement made by Staff two posts above, airvpn moving to OpenVPN 2.7 with DCO    DOES IN FACT break compatibility with at least some openvpn 2.5 clients [my version of gluetun being one of them].  Since gluetun:latest is really a 'development state' instead of a stable state,  it means its impossible to specifcally identify the total number of versions of gluetun that are actually out there, so regression testing made by airvpn may not have discovered there was a problem.   Simply looking through the revisions that have occurred between v3.40.0 and 3.41.0, and 3.41.1 dealing just with ipv6 behavior due to the change in alpine base image that semi-recently occur will support this idea.
ugh...
Fortunately, my desktop clients (that all have IPV6) have all been able to still connect (generally) with the .opvn details that I generated for them several years ago.
Unfortunately, it means I don't think I have a reliable way to have my gluetun container connect on a daily basis anymore without daily manual intervention (stop/restart/wash/rinse/repeat/wipe-hands-on-pants)

Switching to wireguard is not desirable, as it would change the 'Not-so-deep' packet inspection to indicate that a large quantity of traffic from me was UDP VPN, as opposed to now, it looks like boring webtraffic TCP443.

I think the problems now are 'gluetun' related, and no longer airvpn specific.

I'm going to have to do more experiments to see how I can maintain a servers.json file with just the servers that function with the particular version of gluetun I have (or will have) installed.  That's going to be tedious. 

If I can get over my desire to not use ipv6, I can reduce the frequency of gluetun startup failure. (unless there is a new feature to force it to only connect to ipv4 VPN hosts)
I still don't know how to keep the server.json file from getting polluted with 2.7 server machines that do not work with the versions of gluetun.  (likely newer versions of gluetun will get updated versions of openvpn or corrections so that they do function with the 2.7 servers that airvpn is running, but today is not that day)
 

Share this post

Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
×
  • Security Check
    Play CAPTCHA Audio
    Refresh Image
Go To Topic Listing
×
×
  • Create New...