search

Joentje / nordvpn-proxy

Use NordVPN in your Docker stack
138 stars 53 forks source link

IP leakage when changing the server #72

Open salvq opened 3 years ago

salvq commented 3 years ago

There is an IP leakage when changing the server (i.e. openvpn restarts due to server overload)

When you kill the service, your original IP is leakage until connection is established to new server

https://github.com/Joentje/nordvpn-proxy/blob/dcc8d7f6dba126d220f4c830a7f1a783c08b69fa/app/ovpn/get-status-server.sh#L18

Does the docker contain killswitch option or any plans to have it ?

Thanks,

Joentje commented 2 years ago

Any suggestions? When using Docker networking, and there is no vpn connection, does it still work for you?

salvq commented 2 years ago

Yes, when you kill the connection to VPN server, you are connected to internet without VPN.

One suggestion would be to figure out iptables and ip route parameters but I do not know all the details yet, just started learning about that.

Another option is to use nordvpn application for linux which provide feature called killswitch and will do the ip tables for you. However there is an issue to access the docker network from host from host, so also would requires iptables / route parameters adjustment.

strictboss commented 2 years ago

Any improvements for the issue? Really nice project idea. I like that, but killswitch is needed!

strictboss commented 2 years ago

Yes, when you kill the connection to VPN server, you are connected to internet without VPN.

One suggestion would be to figure out iptables and ip route parameters but I do not know all the details yet, just started learning about that.

Another option is to use nordvpn application for linux which provide feature called killswitch and will do the ip tables for you. However there is an issue to access the docker network from host from host, so also would requires iptables / route parameters adjustment.

@salvq Maybe you really can improve the project in the context of working killswitch?