search

kayrus / gof5

Open Source F5 BIG-IP VPN client for Linux, MacOS, FreeBSD and Windows
Apache License 2.0
140 stars 25 forks source link

fatal read tun: read /dev/net/tun: not pollable #13

Closed lupohirp closed 3 years ago

lupohirp commented 4 years ago

Hi,

with the latest version i'm connecting succesfully. But it stops immediately because of this error : fatal read tun: read /dev/net/tun: not pollable

kayrus commented 4 years ago

@lupohirp please answer questions below:

lupohirp commented 4 years ago

Hi :

arcbr0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 100.115.92.1 netmask 255.255.255.252 broadcast 100.115.92.3 inet6 fe80::3884:46ff:fe02:6934 prefixlen 64 scopeid 0x20 ether be:d6:c8:85:32:4b txqueuelen 1000 (Ethernet) RX packets 15 bytes 916 (916.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 286 bytes 27482 (26.8 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10 loop txqueuelen 1000 (Local Loopback) RX packets 1775 bytes 132728 (129.6 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 1775 bytes 132728 (129.6 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

vetharc0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet6 fe80::bcd6:c8ff:fe85:324b prefixlen 64 scopeid 0x20 ether be:d6:c8:85:32:4b txqueuelen 1000 (Ethernet) RX packets 16 bytes 1216 (1.1 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 291 bytes 28064 (27.4 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

vethwlan0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet6 fe80::94a0:feff:fed5:c276 prefixlen 64 scopeid 0x20 ether 96:a0:fe:d5:c2:76 txqueuelen 1000 (Ethernet) RX packets 2283 bytes 582538 (568.8 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 8825 bytes 2121952 (2.0 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

vmtap0: flags=4675<UP,BROADCAST,RUNNING,ALLMULTI,MULTICAST> mtu 1500 inet 100.115.92.25 netmask 255.255.255.252 broadcast 100.115.92.27 inet6 fe80::e40d:21ff:feeb:10b6 prefixlen 64 scopeid 0x20 ether e6:0d:21:eb:10:b6 txqueuelen 1000 (Ethernet) RX packets 97360 bytes 22322063 (21.2 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 130389 bytes 462541250 (441.1 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

wlan0: flags=4675<UP,BROADCAST,RUNNING,ALLMULTI,MULTICAST> mtu 1500 inet 192.168.1.6 netmask 255.255.255.0 broadcast 192.168.1.255 inet6 fe80::3e6a:a7ff:fe27:99a8 prefixlen 64 scopeid 0x20 ether 3c:6a:a7:27:99:a8 txqueuelen 1000 (Ethernet) RX packets 722231 bytes 990376381 (944.4 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 197428 bytes 30216513 (28.8 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

kayrus commented 4 years ago

@lupohirp I reproduced an issue in chromeos. As a workaround try to use driver: pppd in ~/.gof5/config.yaml.

lupohirp commented 4 years ago

Ok connected succesfully. But it doesn't resolve with VPN DNS. If i try to ping a host behind the VPN, it doesn't work.

kayrus commented 4 years ago

@lupohirp you need to specify corporate network routes in ~/.gof5/config.yaml.

Another workaround for the not pollable error with the default driver is to restart shill:

sudo stop shill
sudo start shill BLACKLISTED_DEVICES=tun0
lupohirp commented 4 years ago

in routes property?

kayrus commented 4 years ago

@lupohirp yes

lupohirp commented 4 years ago

I have specified, but now for example Internet is already gone and it can't reach.

kayrus commented 4 years ago

@lupohirp what do you mean?

lupohirp commented 4 years ago

i mean that i can't reach even google for example....but i should....i'm not experienced in networkink so maybe i'm doing something wrong

kayrus commented 4 years ago

@lupohirp gof5 doesn't fetch routes from the F5 server yet, you have to specify routes manually in ~/.gof5/config.yaml.

lupohirp commented 4 years ago

mmm i have specified the routes ( i've taken from windows version of Big IP Edge ) but unrfotunately it doesn't work. Maybe ( rather.....for sure :) i've setted something wrong or maybe i'm missing something. I will wait version fetch routes automatically. Tnx kayrus for this work. It's really great. It should be by the company, but it seems that linux it doesn't exist....

kayrus commented 4 years ago

@lupohirp F5 has a Linux VPN client, but it is not opensource and its behavior cannot be customized. Have you managed to fix routes at the end? Have you tried to specify a 0.0.0.0/0 route for instance?

kayrus commented 3 years ago

@lupohirp support for routes, pushed by F5, was added in the recent release

kayrus commented 3 years ago

Support for ChromeOS with special config options was added. See https://github.com/kayrus/gof5#chromeos for details

kayrus commented 3 years ago

@lupohirp for chromeos 85 and later use sudo restart shill BLOCKED_DEVICES=tun0 to unblacklist the tun0 device.