Zomboided
commented
1 year ago You can enable the ping settings https://github.com/Zomboided/service.vpn.manager/wiki/07.-Advanced-Options#check-connection-with-ping to force openvpn to validate the connection if it's not being used. If openvpn is in a loop retrying the connection, then you can consider https://github.com/Zomboided/service.vpn.manager/wiki/07.-Advanced-Options#network-down
VPN Mgr is not validating that your connection is good, it's checking that openvpn is running. You need to 'fix' openvpn to address the fact that it's taking ~9 minutes to die. Increasing the checking frequency won't help you and will just cause a bunch of check PIDs to run which, depending on your platform, maybe undesireable.
On Mon, May 8, 2023 at 11:44 AM lmarceg @.***> wrote:
Hi, I am using the latest LE (11.0.1) but this problem occurs since a while, so I don't think it's really LE dependent. I use an Rpi4 and WiFi, and I sometimes get WiFi drops and reconnects. VPNManager starts at boot, and typically my routing table is good
Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface default 10.8.3.1 128.0.0.0 UG 0 0 0 tun0 default 192.168.1.1 0.0.0.0 UG 0 0 0 wlan0 8.8.8.8 192.168.1.1 255.255.255.255 UGH 0 0 0 wlan0 10.8.3.0 255.255.255.0 U 0 0 0 tun0 128.0.0.0 10.8.3.1 128.0.0.0 UG 0 0 0 tun0 192.168.1.0 255.255.255.0 U 0 0 0 wlan0 192.168.1.1 * 255.255.255.255 UH 0 0 0 wlan0 217.138.xxx.xxx 192.168.1.1 255.255.255.255 UGH 0 0 0 wlan0
When the connection drops and reconnection occurs, I see that the routing table is recreated but the VPN IP address is not in it:
Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface default 10.8.3.1 128.0.0.0 UG 0 0 0 tun0 default 192.168.1.1 0.0.0.0 UG 0 0 0 wlan0 8.8.8.8 192.168.1.1 255.255.255.255 UGH 0 0 0 wlan0 10.8.3.0 255.255.255.0 U 0 0 0 tun0 128.0.0.0 10.8.3.1 128.0.0.0 UG 0 0 0 tun0 192.168.1.0 255.255.255.0 U 0 0 0 wlan0 192.168.1.1 * 255.255.255.255 UH 0 0 0 wlan0
Of course, no internet access is possible this way, but openvpn is still running. Only after a very long time (around 9 minutes) openvpn understands there is a problem and then the routing table is updated.
This is what happens when there is a reconnection of the WiFi:
May 08 11:10:26 LibreELEC connmand[531]: wlan0 {del} address 192.168.1.143/24 label wlan0 May 08 11:10:26 LibreELEC connmand[531]: wlan0 {del} route 192.168.1.0 gw 0.0.0.0 scope 253 ... May 08 11:10:33 LibreELEC connmand[531]: wlan0 {add} address 192.168.1.143/24 label wlan0 family 2 May 08 11:10:33 LibreELEC connmand[531]: wlan0 {add} route 192.168.1.0 gw 0.0.0.0 scope 253 May 08 11:10:33 LibreELEC connmand[531]: wlan0 {add} route 192.168.1.1 gw 0.0.0.0 scope 253 May 08 11:10:33 LibreELEC connmand[531]: wlan0 {add} route 8.8.8.8 gw 192.168.1.1 scope 0
May 08 11:10:33 LibreELEC connmand[531]: wlan0 {add} route 0.0.0.0 gw 192.168.1.1 scope 0 and this is what I see around 9 minutes afterwards:
May 08 11:19:08 LibreELEC openvpn[820]: [xxxxxx.nordvpn.com] Inactivity timeout (--ping-restart), restarting May 08 11:19:08 LibreELEC openvpn[820]: SIGTERM received, sending exit notification to peer May 08 11:19:09 LibreELEC openvpn[820]: /sbin/ip route del 217.138.xxx.xxx/32 May 08 11:19:09 LibreELEC openvpn[820]: ERROR: Linux route delete command failed: external program exited with error status: 2 May 08 11:19:09 LibreELEC openvpn[820]: /sbin/ip route del 0.0.0.0/1 May 08 11:19:09 LibreELEC connmand[531]: tun0 {del} route 0.0.0.0 gw 10.8.3.1 scope 0
May 08 11:19:09 LibreELEC openvpn[820]: /sbin/ip route del 128.0.0.0/1 May 08 11:19:09 LibreELEC connmand[531]: tun0 {del} route 128.0.0.0 gw 10.8.3.1 scope 0 May 08 11:19:09 LibreELEC openvpn[820]: Closing TUN/TAP interface May 08 11:19:09 LibreELEC openvpn[820]: /sbin/ip addr del dev tun0 10.8.3.10/24 May 08 11:19:09 LibreELEC connmand[531]: tun0 {del} address 10.8.3.10/24 label tun0 May 08 11:19:09 LibreELEC connmand[531]: tun0 {del} route 10.8.3.0 gw 0.0.0.0 scope 253 May 08 11:19:09 LibreELEC systemd[1]: openvpn.service: Deactivated successfully. May 08 11:19:59 LibreELEC connmand[531]: tun0 {add} address 10.8.3.5/24 label tun0 family 2 May 08 11:19:59 LibreELEC connmand[531]: tun0 {add} route 10.8.3.0 gw 0.0.0.0 scope 253 May 08 11:19:59 LibreELEC connmand[531]: wlan0 {add} route 37.120.201.187 gw 192.168.1.1 scope 0 May 08 11:19:59 LibreELEC connmand[531]: tun0 {add} route 0.0.0.0 gw 10.8.3.1 scope 0 May 08 11:19:59 LibreELEC connmand[531]: tun0 {add} route 128.0.0.0 gw 10.8.3.1 scope 0 May 08 11:19:59 LibreELEC connmand[531]: wlan0 {add} route 37.120.xxx.xxx gw 192.168.1.1 scope 0 Of course, waiting for 9 minutes is rather tedious. Is there a way to improve this time? Or maybe a way to change the settings somewhere? The only number I can change is the connection validation frequency which is set to 60 seconds.
Settings are (I removed the configuration part)
true true true true http: !http://192.168 https: !https://192.168 false 60 true false true true true 0 true false false 02:00 false Last restart was at 2023-05-08 10:57:26, unscheduled false false false false 3 2 true Platform default false /usr/sbin/ true false true false true SIGTERM false true false false Validated connections false Auto select NordVPN 7.0.3 true true false 2023-05-08 10:57:26 unscheduled unscheduled 53,1,0 0,64,64 NordVPN false 1 1683537600 false VPN Manager VPN Mgr Thanks!
— Reply to this email directly, view it on GitHub https://github.com/Zomboided/service.vpn.manager/issues/400, or unsubscribe https://github.com/notifications/unsubscribe-auth/AECJZZJWE6XYEBXZKLTKCVLXFDFAVANCNFSM6AAAAAAXZYQ26I . You are receiving this because you are subscribed to this thread.Message ID: @.***>
lmarceg
Hi, I am using the latest LE (11.0.1) but this problem occurs since a while, so I don't think it's really LE dependent. I use an Rpi4 and WiFi, and I sometimes get WiFi drops and reconnects. VPNManager starts at boot, and typically my routing table is good
When the connection drops and reconnection occurs, I see that the routing table is recreated but the VPN IP address is not in it:
Of course, no internet access is possible this way, but openvpn is still running. Only after a very long time (around 9 minutes) openvpn understands there is a problem and then the routing table is updated.
This is what happens when there is a reconnection of the WiFi:
and this is what I see around 9 minutes afterwards:
Of course, waiting for 9 minutes is rather tedious. Is there a way to improve this time? Or maybe a way to change the settings somewhere? The only number I can change is the connection validation frequency which is set to 60 seconds.
Settings are (I removed the configuration part)
Thanks!