Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bug: Neither OpenVPN nor Wireguard are working anymore on Mullvad #2430

Closed
JitteryDoodle opened this issue Aug 22, 2024 · 3 comments
Closed

Bug: Neither OpenVPN nor Wireguard are working anymore on Mullvad #2430

JitteryDoodle opened this issue Aug 22, 2024 · 3 comments

Comments

@JitteryDoodle
Copy link

Is this urgent?

No

Host OS

Ubuntu 22.04

CPU arch

x86_64

VPN service provider

Mullvad

What are you using to run the container

docker-compose

What is the version of Gluetun

Running version latest built on 2024-08-21T13:30:44.080Z (commit 4851bd7)

What's the problem 🤔

Up until today, my mullvad wireguard connection via Gluetun was working and I was able to connect just fine. Unfortunately, I had to restart docker and afterwards it no longer connects to mullvad. I've triple checked the PrivateKey (for wireguard) and the account id (for OVPN) and both are accurate and unchanged from what their working setting was.

Anyway, I looked a little deeper and it seems that the mullvad servers were out of date. So, I ran the update command as the docs describe and retrieved the "most recent" servers, or so I thought. However, when I look at the server list on Mullvad's website and the server list in servers.json, I noticed that the hostnames and IP addresses do not match. Once I found that I tried to do a custom connection using the downloaded .conf files from Mullvad's website, with the proper IP address and host. Unfortunately, I ran into the same issue once more here, and was unable to connect.

After that, I thought it could be wireguard not playing nicely with my firewall or something like that, so I then tried OpenVPN which also failed to connect. I made sure that it was open in ufw and both 1194 and wireguard's 51820 are allowing connections, so that's not it either.

Share your logs (at least 10 lines)

Logs for openvpn

 # docker compose up
[+] Running 1/0
 ✔ Container gluetun-vpn-gluetun-1  Created                                                                             0.0s
Attaching to gluetun-1
gluetun-1  | ========================================
gluetun-1  | ========================================
gluetun-1  | =============== gluetun ================
gluetun-1  | ========================================
gluetun-1  | =========== Made with ❤️ by ============
gluetun-1  | ======= https://github.com/qdm12 =======
gluetun-1  | ========================================
gluetun-1  | ========================================
gluetun-1  |
gluetun-1  | Running version latest built on 2024-08-21T13:30:44.080Z (commit 4851bd7)
gluetun-1  |
gluetun-1  | 🔧 Need help? ☕ Discussion? https://github.com/qdm12/gluetun/discussions/new/choose
gluetun-1  | 🐛 Bug? ✨ New feature? https://github.com/qdm12/gluetun/issues/new/choose
gluetun-1  | 💻 Email? [email protected]
gluetun-1  | 💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
gluetun-1  | 2024-08-22T05:56:17Z WARN DOT_VERBOSITY is obsolete, use LOG_LEVEL instead.
gluetun-1  | 2024-08-22T05:56:17Z WARN You are using the old environment variable HTTPPROXY_PORT, please consider changing it to HTTPPROXY_LISTENING_ADDRESS
gluetun-1  | 2024-08-22T05:56:17Z INFO [routing] default route found: interface eth0, gateway 172.27.0.1, assigned IP 172.27.0.2 and family v4
gluetun-1  | 2024-08-22T05:56:17Z INFO [routing] local ethernet link found: eth0
gluetun-1  | 2024-08-22T05:56:17Z INFO [routing] local ipnet found: 172.27.0.0/16
gluetun-1  | 2024-08-22T05:56:17Z INFO [firewall] enabling...
gluetun-1  | 2024-08-22T05:56:17Z INFO [firewall] enabled successfully
gluetun-1  | 2024-08-22T05:56:18Z INFO [storage] merging by most recent 20480 hardcoded servers and 20480 servers read from /gluetun/servers.json
gluetun-1  | 2024-08-22T05:56:18Z INFO Alpine version: 3.20.2
gluetun-1  | 2024-08-22T05:56:18Z INFO OpenVPN 2.5 version: 2.5.10
gluetun-1  | 2024-08-22T05:56:18Z INFO OpenVPN 2.6 version: 2.6.11
gluetun-1  | 2024-08-22T05:56:18Z INFO IPtables version: v1.8.10
gluetun-1  | 2024-08-22T05:56:18Z INFO Settings summary:
gluetun-1  | ├── VPN settings:
gluetun-1  | |   ├── VPN provider settings:
gluetun-1  | |   |   ├── Name: mullvad
gluetun-1  | |   |   └── Server selection settings:
gluetun-1  | |   |       ├── VPN type: openvpn
gluetun-1  | |   |       ├── Countries: Canada
gluetun-1  | |   |       └── OpenVPN server selection settings:
gluetun-1  | |   |           └── Protocol: UDP
gluetun-1  | |   └── OpenVPN settings:
gluetun-1  | |       ├── OpenVPN version: 2.6
gluetun-1  | |       ├── User: [set]
gluetun-1  | |       ├── Password: [set]
gluetun-1  | |       ├── Network interface: tun0
gluetun-1  | |       ├── Run OpenVPN as: root
gluetun-1  | |       └── Verbosity level: 1
gluetun-1  | ├── DNS settings:
gluetun-1  | |   ├── Keep existing nameserver(s): no
gluetun-1  | |   ├── DNS server address to use: 10.64.0.1
gluetun-1  | |   └── DNS over TLS settings:
gluetun-1  | |       ├── Enabled: yes
gluetun-1  | |       ├── Update period: every 24h0m0s
gluetun-1  | |       ├── Upstream resolvers:
gluetun-1  | |       |   └── cloudflare
gluetun-1  | |       ├── Caching: yes
gluetun-1  | |       ├── IPv6: no
gluetun-1  | |       └── DNS filtering settings:
gluetun-1  | |           ├── Block malicious: yes
gluetun-1  | |           ├── Block ads: no
gluetun-1  | |           ├── Block surveillance: no
gluetun-1  | |           └── Blocked IP networks:
gluetun-1  | |               ├── 127.0.0.1/8
gluetun-1  | |               ├── 10.0.0.0/8
gluetun-1  | |               ├── 172.16.0.0/12
gluetun-1  | |               ├── 192.168.0.0/16
gluetun-1  | |               └── 169.254.0.0/16
gluetun-1  | ├── Firewall settings:
gluetun-1  | |   └── Enabled: yes
gluetun-1  | ├── Log settings:
gluetun-1  | |   └── Log level: info
gluetun-1  | ├── Health settings:
gluetun-1  | |   ├── Server listening address: 127.0.0.1:9999
gluetun-1  | |   ├── Target address: cloudflare.com:443
gluetun-1  | |   ├── Duration to wait after success: 5s
gluetun-1  | |   ├── Read header timeout: 100ms
gluetun-1  | |   ├── Read timeout: 500ms
gluetun-1  | |   └── VPN wait durations:
gluetun-1  | |       ├── Initial duration: 6s
gluetun-1  | |       └── Additional duration: 5s
gluetun-1  | ├── Shadowsocks server settings:
gluetun-1  | |   └── Enabled: no
gluetun-1  | ├── HTTP proxy settings:
gluetun-1  | |   └── Enabled: no
gluetun-1  | ├── Control server settings:
gluetun-1  | |   ├── Listening address: :8000
gluetun-1  | |   └── Logging: yes
gluetun-1  | ├── Storage settings:
gluetun-1  | |   └── Filepath: /gluetun/servers.json
gluetun-1  | ├── OS Alpine settings:
gluetun-1  | |   ├── Process UID: 1000
gluetun-1  | |   └── Process GID: 1000
gluetun-1  | ├── Public IP settings:
gluetun-1  | |   ├── Fetching: every 12h0m0s
gluetun-1  | |   ├── IP file path: /tmp/gluetun/ip
gluetun-1  | |   └── Public IP data API: ipinfo
gluetun-1  | └── Version settings:
gluetun-1  |     └── Enabled: yes
gluetun-1  | 2024-08-22T05:56:18Z WARN DNS address is set to 10.64.0.1 so the DNS over TLS (DoT) server will not be used. The default value changed to 127.0.0.1 so it uses the internal DoT serves. If the DoT server fails to start, the IPv4 address of the first plaintext DNS server corresponding to the first DoT provider chosen is used.
gluetun-1  | 2024-08-22T05:56:18Z INFO [routing] default route found: interface eth0, gateway 172.27.0.1, assigned IP 172.27.0.2 and family v4
gluetun-1  | 2024-08-22T05:56:18Z INFO [routing] adding route for 0.0.0.0/0
gluetun-1  | 2024-08-22T05:56:18Z INFO [firewall] setting allowed subnets...
gluetun-1  | 2024-08-22T05:56:18Z INFO [routing] default route found: interface eth0, gateway 172.27.0.1, assigned IP 172.27.0.2 and family v4
gluetun-1  | 2024-08-22T05:56:18Z INFO TUN device is not available: open /dev/net/tun: no such file or directory; creating it...
gluetun-1  | 2024-08-22T05:56:18Z INFO [dns] using plaintext DNS at address 10.64.0.1
gluetun-1  | 2024-08-22T05:56:18Z INFO [http server] http server listening on [::]:8000
gluetun-1  | 2024-08-22T05:56:18Z INFO [healthcheck] listening on 127.0.0.1:9999
gluetun-1  | 2024-08-22T05:56:18Z INFO [firewall] allowing VPN connection...
gluetun-1  | 2024-08-22T05:56:18Z INFO [openvpn] OpenVPN 2.6.11 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
gluetun-1  | 2024-08-22T05:56:18Z INFO [openvpn] library versions: OpenSSL 3.3.1 4 Jun 2024, LZO 2.10
gluetun-1  | 2024-08-22T05:56:18Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]37.120.237.66:1194
gluetun-1  | 2024-08-22T05:56:18Z INFO [openvpn] UDPv4 link local: (not bound)
gluetun-1  | 2024-08-22T05:56:18Z INFO [openvpn] UDPv4 link remote: [AF_INET]37.120.237.66:1194
gluetun-1  | 2024-08-22T05:56:24Z INFO [healthcheck] program has been unhealthy for 6s: restarting VPN
gluetun-1  | 2024-08-22T05:56:24Z INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md
gluetun-1  | 2024-08-22T05:56:24Z INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION
gluetun-1  | 2024-08-22T05:56:24Z INFO [vpn] stopping
gluetun-1  | 2024-08-22T05:56:24Z INFO [vpn] starting
gluetun-1  | 2024-08-22T05:56:24Z INFO [firewall] allowing VPN connection...
gluetun-1  | 2024-08-22T05:56:24Z INFO [openvpn] OpenVPN 2.6.11 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
gluetun-1  | 2024-08-22T05:56:24Z INFO [openvpn] library versions: OpenSSL 3.3.1 4 Jun 2024, LZO 2.10
gluetun-1  | 2024-08-22T05:56:24Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]198.54.132.50:1194
gluetun-1  | 2024-08-22T05:56:24Z INFO [openvpn] UDPv4 link local: (not bound)
gluetun-1  | 2024-08-22T05:56:24Z INFO [openvpn] UDPv4 link remote: [AF_INET]198.54.132.50:1194
gluetun-1  | 2024-08-22T05:56:35Z INFO [healthcheck] program has been unhealthy for 11s: restarting VPN
gluetun-1  | 2024-08-22T05:56:35Z INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md
gluetun-1  | 2024-08-22T05:56:35Z INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION
gluetun-1  | 2024-08-22T05:56:35Z INFO [vpn] stopping
gluetun-1  | 2024-08-22T05:56:35Z INFO [vpn] starting
gluetun-1  | 2024-08-22T05:56:35Z INFO [firewall] allowing VPN connection...
gluetun-1  | 2024-08-22T05:56:35Z INFO [openvpn] OpenVPN 2.6.11 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
gluetun-1  | 2024-08-22T05:56:35Z INFO [openvpn] library versions: OpenSSL 3.3.1 4 Jun 2024, LZO 2.10
gluetun-1  | 2024-08-22T05:56:35Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]178.249.214.206:1194
gluetun-1  | 2024-08-22T05:56:35Z INFO [openvpn] UDPv4 link local: (not bound)
gluetun-1  | 2024-08-22T05:56:35Z INFO [openvpn] UDPv4 link remote: [AF_INET]178.249.214.206:1194
gluetun-1  | 2024-08-22T05:56:51Z INFO [healthcheck] program has been unhealthy for 16s: restarting VPN
gluetun-1  | 2024-08-22T05:56:51Z INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md
gluetun-1  | 2024-08-22T05:56:51Z INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION
gluetun-1  | 2024-08-22T05:56:51Z INFO [vpn] stopping
gluetun-1  | 2024-08-22T05:56:51Z INFO [vpn] starting
gluetun-1  | 2024-08-22T05:56:51Z INFO [firewall] allowing VPN connection...
gluetun-1  | 2024-08-22T05:56:51Z INFO [openvpn] OpenVPN 2.6.11 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
gluetun-1  | 2024-08-22T05:56:51Z INFO [openvpn] library versions: OpenSSL 3.3.1 4 Jun 2024, LZO 2.10
gluetun-1  | 2024-08-22T05:56:51Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]38.240.226.132:1194
gluetun-1  | 2024-08-22T05:56:51Z INFO [openvpn] UDPv4 link local: (not bound)
gluetun-1  | 2024-08-22T05:56:51Z INFO [openvpn] UDPv4 link remote: [AF_INET]38.240.226.132:1194
gluetun-1  | 2024-08-22T05:57:12Z INFO [healthcheck] program has been unhealthy for 21s: restarting VPN
gluetun-1  | 2024-08-22T05:57:12Z INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md
gluetun-1  | 2024-08-22T05:57:12Z INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION
gluetun-1  | 2024-08-22T05:57:12Z INFO [vpn] stopping
gluetun-1  | 2024-08-22T05:57:12Z INFO [vpn] starting
gluetun-1  | 2024-08-22T05:57:12Z INFO [firewall] allowing VPN connection...
gluetun-1  | 2024-08-22T05:57:12Z INFO [openvpn] OpenVPN 2.6.11 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
gluetun-1  | 2024-08-22T05:57:12Z INFO [openvpn] library versions: OpenSSL 3.3.1 4 Jun 2024, LZO 2.10
gluetun-1  | 2024-08-22T05:57:12Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]38.240.226.132:1194
gluetun-1  | 2024-08-22T05:57:12Z INFO [openvpn] UDPv4 link local: (not bound)
gluetun-1  | 2024-08-22T05:57:12Z INFO [openvpn] UDPv4 link remote: [AF_INET]38.240.226.132:1194
gluetun-1  | 2024-08-22T05:57:38Z INFO [healthcheck] program has been unhealthy for 26s: restarting VPN
gluetun-1  | 2024-08-22T05:57:38Z INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md
gluetun-1  | 2024-08-22T05:57:38Z INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION
gluetun-1  | 2024-08-22T05:57:38Z INFO [vpn] stopping
gluetun-1  | 2024-08-22T05:57:38Z INFO [vpn] starting
gluetun-1  | 2024-08-22T05:57:38Z INFO [firewall] allowing VPN connection...
gluetun-1  | 2024-08-22T05:57:39Z INFO [openvpn] OpenVPN 2.6.11 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
gluetun-1  | 2024-08-22T05:57:39Z INFO [openvpn] library versions: OpenSSL 3.3.1 4 Jun 2024, LZO 2.10
gluetun-1  | 2024-08-22T05:57:39Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]38.240.226.100:1194
gluetun-1  | 2024-08-22T05:57:39Z INFO [openvpn] UDPv4 link local: (not bound)
gluetun-1  | 2024-08-22T05:57:39Z INFO [openvpn] UDPv4 link remote: [AF_INET]38.240.226.100:1194
gluetun-1  | 2024-08-22T05:58:10Z INFO [healthcheck] program has been unhealthy for 31s: restarting VPN
gluetun-1  | 2024-08-22T05:58:10Z INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md
gluetun-1  | 2024-08-22T05:58:10Z INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION
gluetun-1  | 2024-08-22T05:58:10Z INFO [vpn] stopping
gluetun-1  | 2024-08-22T05:58:10Z INFO [vpn] starting
gluetun-1  | 2024-08-22T05:58:10Z INFO [firewall] allowing VPN connection...
gluetun-1  | 2024-08-22T05:58:10Z INFO [openvpn] OpenVPN 2.6.11 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
gluetun-1  | 2024-08-22T05:58:10Z INFO [openvpn] library versions: OpenSSL 3.3.1 4 Jun 2024, LZO 2.10
gluetun-1  | 2024-08-22T05:58:10Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]38.240.226.100:1194
gluetun-1  | 2024-08-22T05:58:10Z INFO [openvpn] UDPv4 link local: (not bound)
gluetun-1  | 2024-08-22T05:58:10Z INFO [openvpn] UDPv4 link remote: [AF_INET]38.240.226.100:1194
^CGracefully stopping... (press Ctrl+C again to force)
[+] Stopping 1/1
 ✔ Container gluetun-vpn-gluetun-1  Stopped                                                                             1.1s
canceled

Logs for wireguard (unfortunately the usual issue with wireguard that appears to be auth related, even though i double checked)

[+] Running 1/1
 ✔ Container gluetun-vpn-gluetun-1  Recreated                                                                           0.6s
Attaching to gluetun-1
gluetun-1  | ========================================
gluetun-1  | ========================================
gluetun-1  | =============== gluetun ================
gluetun-1  | ========================================
gluetun-1  | =========== Made with ❤️ by ============
gluetun-1  | ======= https://github.com/qdm12 =======
gluetun-1  | ========================================
gluetun-1  | ========================================
gluetun-1  |
gluetun-1  | Running version latest built on 2024-08-21T13:30:44.080Z (commit 4851bd7)
gluetun-1  |
gluetun-1  | 🔧 Need help? ☕ Discussion? https://github.com/qdm12/gluetun/discussions/new/choose
gluetun-1  | 🐛 Bug? ✨ New feature? https://github.com/qdm12/gluetun/issues/new/choose
gluetun-1  | 💻 Email? [email protected]
gluetun-1  | 💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
gluetun-1  | 2024-08-22T06:08:24Z WARN DOT_VERBOSITY is obsolete, use LOG_LEVEL instead.
gluetun-1  | 2024-08-22T06:08:24Z WARN You are using the old environment variable HTTPPROXY_PORT, please consider changing it to HTTPPROXY_LISTENING_ADDRESS
gluetun-1  | 2024-08-22T06:08:24Z INFO [routing] default route found: interface eth0, gateway 172.27.0.1, assigned IP 172.27.0.2 and family v4
gluetun-1  | 2024-08-22T06:08:24Z INFO [routing] local ethernet link found: eth0
gluetun-1  | 2024-08-22T06:08:24Z INFO [routing] local ipnet found: 172.27.0.0/16
gluetun-1  | 2024-08-22T06:08:24Z INFO [firewall] enabling...
gluetun-1  | 2024-08-22T06:08:24Z INFO [firewall] enabled successfully
gluetun-1  | 2024-08-22T06:08:24Z INFO [storage] creating /gluetun/servers.json with 20480 hardcoded servers
gluetun-1  | 2024-08-22T06:08:24Z INFO Alpine version: 3.20.2
gluetun-1  | 2024-08-22T06:08:24Z INFO OpenVPN 2.5 version: 2.5.10
gluetun-1  | 2024-08-22T06:08:25Z INFO OpenVPN 2.6 version: 2.6.11
gluetun-1  | 2024-08-22T06:08:25Z INFO IPtables version: v1.8.10
gluetun-1  | 2024-08-22T06:08:25Z INFO Settings summary:
gluetun-1  | ├── VPN settings:
gluetun-1  | |   ├── VPN provider settings:
gluetun-1  | |   |   ├── Name: mullvad
gluetun-1  | |   |   └── Server selection settings:
gluetun-1  | |   |       ├── VPN type: wireguard
gluetun-1  | |   |       ├── Countries: Canada
gluetun-1  | |   |       ├── Cities: Vancouver
gluetun-1  | |   |       └── Wireguard selection settings:
gluetun-1  | |   |           ├── Endpoint IP address: 149.22.81.194
gluetun-1  | |   |           ├── Endpoint port: 51820
gluetun-1  | |   |           └── Server public key: BzYINbABQiSbRLDZIlmgsLgL88offQJCEH3JkcjRGUk=
gluetun-1  | |   └── Wireguard settings:
gluetun-1  | |       ├── Private key: sK0...mg=
gluetun-1  | |       ├── Interface addresses:
gluetun-1  | |       |   └── 10.70.248.236/32
gluetun-1  | |       ├── Allowed IPs:
gluetun-1  | |       |   ├── 0.0.0.0/0
gluetun-1  | |       |   └── ::/0
gluetun-1  | |       └── Network interface: tun0
gluetun-1  | |           └── MTU: 1400
gluetun-1  | ├── DNS settings:
gluetun-1  | |   ├── Keep existing nameserver(s): no
gluetun-1  | |   ├── DNS server address to use: 10.64.0.1
gluetun-1  | |   └── DNS over TLS settings:
gluetun-1  | |       ├── Enabled: yes
gluetun-1  | |       ├── Update period: every 24h0m0s
gluetun-1  | |       ├── Upstream resolvers:
gluetun-1  | |       |   └── cloudflare
gluetun-1  | |       ├── Caching: yes
gluetun-1  | |       ├── IPv6: no
gluetun-1  | |       └── DNS filtering settings:
gluetun-1  | |           ├── Block malicious: yes
gluetun-1  | |           ├── Block ads: no
gluetun-1  | |           ├── Block surveillance: no
gluetun-1  | |           └── Blocked IP networks:
gluetun-1  | |               ├── 127.0.0.1/8
gluetun-1  | |               ├── 10.0.0.0/8
gluetun-1  | |               ├── 172.16.0.0/12
gluetun-1  | |               ├── 192.168.0.0/16
gluetun-1  | |               └── 169.254.0.0/16
gluetun-1  | ├── Firewall settings:
gluetun-1  | |   └── Enabled: yes
gluetun-1  | ├── Log settings:
gluetun-1  | |   └── Log level: info
gluetun-1  | ├── Health settings:
gluetun-1  | |   ├── Server listening address: 127.0.0.1:9999
gluetun-1  | |   ├── Target address: cloudflare.com:443
gluetun-1  | |   ├── Duration to wait after success: 5s
gluetun-1  | |   ├── Read header timeout: 100ms
gluetun-1  | |   ├── Read timeout: 500ms
gluetun-1  | |   └── VPN wait durations:
gluetun-1  | |       ├── Initial duration: 6s
gluetun-1  | |       └── Additional duration: 5s
gluetun-1  | ├── Shadowsocks server settings:
gluetun-1  | |   └── Enabled: no
gluetun-1  | ├── HTTP proxy settings:
gluetun-1  | |   └── Enabled: no
gluetun-1  | ├── Control server settings:
gluetun-1  | |   ├── Listening address: :8000
gluetun-1  | |   └── Logging: yes
gluetun-1  | ├── Storage settings:
gluetun-1  | |   └── Filepath: /gluetun/servers.json
gluetun-1  | ├── OS Alpine settings:
gluetun-1  | |   ├── Process UID: 1000
gluetun-1  | |   └── Process GID: 1000
gluetun-1  | ├── Public IP settings:
gluetun-1  | |   ├── Fetching: every 12h0m0s
gluetun-1  | |   ├── IP file path: /tmp/gluetun/ip
gluetun-1  | |   └── Public IP data API: ipinfo
gluetun-1  | └── Version settings:
gluetun-1  |     └── Enabled: yes
gluetun-1  | 2024-08-22T06:08:25Z WARN DNS address is set to 10.64.0.1 so the DNS over TLS (DoT) server will not be used. The default value changed to 127.0.0.1 so it uses the internal DoT serves. If the DoT server fails to start, the IPv4 address of the first plaintext DNS server corresponding to the first DoT provider chosen is used.
gluetun-1  | 2024-08-22T06:08:25Z INFO [routing] default route found: interface eth0, gateway 172.27.0.1, assigned IP 172.27.0.2 and family v4
gluetun-1  | 2024-08-22T06:08:25Z INFO [routing] adding route for 0.0.0.0/0
gluetun-1  | 2024-08-22T06:08:25Z INFO [firewall] setting allowed subnets...
gluetun-1  | 2024-08-22T06:08:25Z INFO [routing] default route found: interface eth0, gateway 172.27.0.1, assigned IP 172.27.0.2 and family v4
gluetun-1  | 2024-08-22T06:08:25Z INFO [dns] using plaintext DNS at address 10.64.0.1
gluetun-1  | 2024-08-22T06:08:25Z INFO [http server] http server listening on [::]:8000
gluetun-1  | 2024-08-22T06:08:25Z INFO [healthcheck] listening on 127.0.0.1:9999
gluetun-1  | 2024-08-22T06:08:25Z INFO [firewall] allowing VPN connection...
gluetun-1  | 2024-08-22T06:08:25Z INFO [wireguard] Using available kernelspace implementation
gluetun-1  | 2024-08-22T06:08:25Z INFO [wireguard] Connecting to 38.240.226.36:51820
gluetun-1  | 2024-08-22T06:08:25Z INFO [wireguard] Wireguard setup is complete. Note Wireguard is a silent protocol and it may or may not work, without giving any error message. Typically i/o timeout errors indicate the Wireguard connection is not working.
gluetun-1  | 2024-08-22T06:08:25Z INFO [dns] downloading hostnames and IP block lists
gluetun-1  | 2024-08-22T06:08:35Z INFO [healthcheck] program has been unhealthy for 6s: restarting VPN
gluetun-1  | 2024-08-22T06:08:35Z INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md
gluetun-1  | 2024-08-22T06:08:35Z INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION
gluetun-1  | 2024-08-22T06:08:35Z INFO [vpn] stopping
gluetun-1  | 2024-08-22T06:08:35Z ERROR [vpn] getting public IP address information: context canceled
gluetun-1  | 2024-08-22T06:08:35Z ERROR [vpn] cannot get version information: Get "https://api.github.com/repos/qdm12/gluetun/commits": context canceled
gluetun-1  | 2024-08-22T06:08:35Z WARN [dns] cannot update filter block lists: Get "https://raw.githubusercontent.com/qdm12/files/master/malicious-hostnames.updated": dial tcp: lookup raw.githubusercontent.com on 10.64.0.1:53: read udp 10.70.248.236:40134->10.64.0.1:53: i/o timeout, Get "https://raw.githubusercontent.com/qdm12/files/master/malicious-ips.updated": dial tcp: lookup raw.githubusercontent.com on 10.64.0.1:53: read udp 10.70.248.236:40134->10.64.0.1:53: i/o timeout
gluetun-1  | 2024-08-22T06:08:35Z INFO [dns] attempting restart in 10s
gluetun-1  | 2024-08-22T06:08:35Z INFO [vpn] starting
gluetun-1  | 2024-08-22T06:08:35Z INFO [firewall] allowing VPN connection...
gluetun-1  | 2024-08-22T06:08:35Z INFO [wireguard] Using available kernelspace implementation
gluetun-1  | 2024-08-22T06:08:35Z INFO [wireguard] Connecting to 38.240.226.36:51820
gluetun-1  | 2024-08-22T06:08:35Z INFO [wireguard] Wireguard setup is complete. Note Wireguard is a silent protocol and it may or may not work, without giving any error message. Typically i/o timeout errors indicate the Wireguard connection is not working.
gluetun-1  | 2024-08-22T06:08:45Z INFO [dns] downloading hostnames and IP block lists
gluetun-1  | 2024-08-22T06:08:47Z INFO [healthcheck] program has been unhealthy for 11s: restarting VPN
gluetun-1  | 2024-08-22T06:08:47Z INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md
gluetun-1  | 2024-08-22T06:08:47Z INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION
gluetun-1  | 2024-08-22T06:08:47Z INFO [vpn] stopping
gluetun-1  | 2024-08-22T06:08:47Z ERROR [vpn] getting public IP address information: fetching information: Get "https://ipinfo.io/": context canceled

Logs for custom attempt were the same as above



### Share your configuration

```yml
Docker compose for openvpn:

services:
  gluetun:
    image: qmcgaw/gluetun
    cap_add:
      - NET_ADMIN
    environment:
      - VPN_SERVICE_PROVIDER=mullvad
      - VPN_TYPE=openvpn
      - SERVER_COUNTRIES="Canada"
      - OPENVPN_USER=xxxxxxxxxxxxxxx
      - FIREWALL=off
      - DOT=on
      - DOT_PROVIDERS=cloudflare
      - DOT_PRIVATE_ADDRESS=127.0.0.1/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,169.254.0.0/16
      - DOT_VERBOSITY=1
      - DOT_CACHING=on
      - DOT_IPV6=off
      - DNS_KEEP_NAMESERVER=off
      - DNS_ADDRESS=10.64.0.1
      - HTTPPROXY_PORT=8888

Docker compose for wireguard:

services:
  gluetun:
    image: qmcgaw/gluetun
    #volumes:
      #- /root/gluetun-dir:/gluetun
    devices:
      - /dev/net/tun:/dev/net/tun
    cap_add:
      - NET_ADMIN
    environment:
      - VPN_SERVICE_PROVIDER=mullvad
      - VPN_TYPE=wireguard
      - WIREGUARD_PUBLIC_KEY=Bzxxxxxxxxx= # from peer section
      - WIREGUARD_PRIVATE_KEY=sK0xxxxxxx= # from interface section
      - WIREGUARD_ADDRESSES=10.70.248.xxx/32
      - WIREGUARD_ENDPOINT_IP=149.22.81.xxx
      - WIREGUARD_ENDPOINT_PORT=51820
      - SERVER_COUNTRIES="Canada"
      - FIREWALL=off
      - DOT=on
      - DOT_PROVIDERS=cloudflare
      - DOT_PRIVATE_ADDRESS=127.0.0.1/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,169.254.0.0/16
      - DOT_VERBOSITY=1
      - DOT_CACHING=on
      - DOT_IPV6=off
      - DNS_KEEP_NAMESERVER=off
      - DNS_ADDRESS=10.64.0.1
      - HTTPPROXY_PORT=8888

Docker compose for custom attempt:

services:
  gluetun:
    image: qmcgaw/gluetun
    volumes:
      - /root/gluetun-dir:/gluetun
    devices:
      - /dev/net/tun:/dev/net/tun
    cap_add:
      - NET_ADMIN
    environment:
      - VPN_SERVICE_PROVIDER=custom
      - VPN_TYPE=wireguard
      - DNS_ADDRESS=10.64.0.1
@github-actions GitHub Actions
Copy link
Contributor

@qdm12 is more or less the only maintainer of this project and works on it in his free time.
Please:

@JitteryDoodle
Copy link
Author

I'm going to close this for now after reading through #2154 for the third time. It's probably me, but if I can't figure it out myself tomorrow I'll just try wireguard's container instead. Rather not take anyone's time.

@github-actions GitHub Actions
Copy link
Contributor

Closed issues are NOT monitored, so commenting here is likely to be not seen.
If you think this is still unresolved and have more information to bring, please create another issue.

This is an automated comment setup because @qdm12 is the sole maintainer of this project
which became too popular to monitor issues closed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@JitteryDoodle