kylemanna / docker-openvpn

🔒 OpenVPN server in a Docker container complete with an EasyRSA PKI CA
https://hub.docker.com/r/kylemanna/openvpn/
MIT License
8.62k stars 2.37k forks source link

Client can only connect directly after container restart #633

Open newhinton opened 3 years ago

newhinton commented 3 years ago

When setting up the quickstart-container (with non default portmapping), i can only connect directly after the container restarted. Everytime after, i get P_CONTROL_HARD_RESET_CLIENT_V2 erros from the client, and the dockercontainer does not log any attemps to connect. UFW is used and enabled, but allows for the non default port to accept incoming (as shown by the successful attempt while rebooting)

tcpdump shows the successful connection, as well as the incoming retries by the client. After 5 retries the client throws this error: TLS Error: TLS key negotiation failed to occur within 60 seconds

I do get errors in the dockerlog regarding '--sysctl net.ipv6.conf.all.forwarding=1' Is this nessessary to set?

How can i debug this behaviour and find out what blocks my connection on further attempts?