search

qdm12 / gluetun

VPN client in a thin Docker container for multiple VPN providers, written in Go, and using OpenVPN or Wireguard, DNS over TLS, with a few proxy servers built-in.
https://hub.docker.com/r/qmcgaw/gluetun
MIT License
7.35k stars 349 forks source link

Bug: Requests getting blocked on Gluetun #2038

Open WINOFFRG opened 8 months ago

WINOFFRG commented 8 months ago

Is this urgent?

Yes

Host OS

Ubuntu LTS v20

CPU arch

x86_64

VPN service provider

Custom

What are you using to run the container

docker-compose

What is the version of Gluetun

Running version latest built on 2024-01-01T18:24:19.221Z (commit c826707)

What's the problem 🤔

I am using Gluetun becasue the service which I am trying to access on server get's blocked because of country/region. For the same, I have a custom OpenVPN config which allows my IP to get unblocked. So, on local environment if I connect to the VPN and make HTTP request to the endpoint, It works fine. However, when running gluetun in proxy mode and forwarding the same HTTP request to that proxy container, the request somehow gets blocked. I have verified that no extra headers are being sent and there is no change in request data. The same is not just happening with OpenVPN but with VPN Providers like Surfshark or Proton as well.

Note the HTTP Code 475 in logs, The exact same request works when I am running the same OpenVPN config on desktop via Connect and make the HTTP request via application.

Share your logs (at least 10 lines)

========================================
========================================
=============== gluetun ================
========================================
=========== Made with ❤️ by ============
======= https://github.com/qdm12 =======
========================================
========================================

Running version latest built on 2024-01-01T18:24:19.221Z (commit c826707)

🔧 Need help? https://github.com/qdm12/gluetun/discussions/new
🐛 Bug? https://github.com/qdm12/gluetun/issues/new
✨ New feature? https://github.com/qdm12/gluetun/issues/new
☕ Discussion? https://github.com/qdm12/gluetun/discussions/new
💻 Email? quentin.mcgaw@gmail.com
💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
2024-01-08T23:12:13Z INFO [routing] default route found: interface eth0, gateway 172.18.0.1, assigned IP 172.18.0.2 and family v4
2024-01-08T23:12:13Z INFO [routing] local ethernet link found: eth0
2024-01-08T23:12:13Z INFO [routing] local ipnet found: 172.18.0.0/16
2024-01-08T23:12:13Z INFO [firewall] enabling...
2024-01-08T23:12:13Z INFO [firewall] enabled successfully
2024-01-08T23:12:14Z INFO [storage] creating /gluetun/servers.json with 17743 hardcoded servers
2024-01-08T23:12:14Z INFO Alpine version: 3.18.5
2024-01-08T23:12:14Z INFO OpenVPN 2.5 version: 2.5.8
2024-01-08T23:12:14Z INFO OpenVPN 2.6 version: 2.6.8
2024-01-08T23:12:14Z INFO Unbound version: 1.17.1
2024-01-08T23:12:14Z INFO IPtables version: v1.8.9
2024-01-08T23:12:14Z INFO Settings summary:
├── VPN settings:
|   ├── VPN provider settings:
|   |   ├── Name: custom
|   |   └── Server selection settings:
|   |       ├── VPN type: wireguard
|   |       └── Wireguard selection settings:
|   |           ├── Endpoint IP address: 185.159.157.82
|   |           ├── Endpoint port: 51820
|   |           └── Server public key: QnqJI0C2xQZrKfZLrBaCHa2h3TZ9CBt6sCuzg3ue4X4=
|   └── Wireguard settings:
|       ├── Private key: gBd...Fw=
|       ├── Interface addresses:
|       |   └── 10.2.0.2/32
|       ├── Allowed IPs:
|       |   ├── 0.0.0.0/0
|       |   └── ::/0
|       └── Network interface: tun0
|           └── MTU: 1400
├── DNS settings:
|   ├── Keep existing nameserver(s): no
|   ├── DNS server address to use: 127.0.0.1
|   └── DNS over TLS settings:
|       ├── Enabled: yes
|       ├── Update period: every 24h0m0s
|       ├── Unbound settings:
|       |   ├── Authoritative servers:
|       |   |   └── cloudflare
|       |   ├── Caching: yes
|       |   ├── IPv6: no
|       |   ├── Verbosity level: 1
|       |   ├── Verbosity details level: 0
|       |   ├── Validation log level: 0
|       |   ├── System user: root
|       |   └── Allowed networks:
|       |       ├── 0.0.0.0/0
|       |       └── ::/0
|       └── DNS filtering settings:
|           ├── Block malicious: yes
|           ├── Block ads: no
|           ├── Block surveillance: no
|           └── Blocked IP networks:
|               ├── 127.0.0.1/8
|               ├── 10.0.0.0/8
|               ├── 172.16.0.0/12
|               ├── 192.168.0.0/16
|               ├── 169.254.0.0/16
|               ├── ::1/128
|               ├── fc00::/7
|               ├── fe80::/10
|               ├── ::ffff:127.0.0.1/104
|               ├── ::ffff:10.0.0.0/104
|               ├── ::ffff:169.254.0.0/112
|               ├── ::ffff:172.16.0.0/108
|               └── ::ffff:192.168.0.0/112
├── Firewall settings:
|   └── Enabled: yes
├── Log settings:
|   └── Log level: INFO
├── Health settings:
|   ├── Server listening address: 127.0.0.1:9999
|   ├── Target address: cloudflare.com:443
|   ├── Duration to wait after success: 5s
|   ├── Read header timeout: 100ms
|   ├── Read timeout: 500ms
|   └── VPN wait durations:
|       ├── Initial duration: 6s
|       └── Additional duration: 5s
├── Shadowsocks server settings:
|   └── Enabled: no
├── HTTP proxy settings:
|   ├── Enabled: yes
|   ├── Listening address: :8888
|   ├── User: 
|   ├── Password: [not set]
|   ├── Stealth mode: yes
|   ├── Log: yes
|   ├── Read header timeout: 1s
|   └── Read timeout: 3s
├── Control server settings:
|   ├── Listening address: :8000
|   └── Logging: yes
├── OS Alpine settings:
|   ├── Process UID: 1000
|   └── Process GID: 1000
├── Public IP settings:
|   ├── Fetching: every 12h0m0s
|   └── IP file path: /tmp/gluetun/ip
└── Version settings:
    └── Enabled: yes
2024-01-08T23:12:14Z INFO [routing] default route found: interface eth0, gateway 172.18.0.1, assigned IP 172.18.0.2 and family v4
2024-01-08T23:12:14Z INFO [routing] adding route for 0.0.0.0/0
2024-01-08T23:12:14Z INFO [firewall] setting allowed subnets...
2024-01-08T23:12:14Z INFO [routing] default route found: interface eth0, gateway 172.18.0.1, assigned IP 172.18.0.2 and family v4
2024-01-08T23:12:14Z INFO TUN device is not available: open /dev/net/tun: no such file or directory; creating it...
2024-01-08T23:12:14Z INFO [dns] using plaintext DNS at address 1.1.1.1
2024-01-08T23:12:14Z INFO [http proxy] listening on :8888
2024-01-08T23:12:14Z INFO [http server] http server listening on [::]:8000
2024-01-08T23:12:14Z INFO [healthcheck] listening on 127.0.0.1:9999
2024-01-08T23:12:14Z INFO [firewall] allowing VPN connection...
2024-01-08T23:12:14Z INFO [wireguard] Using available kernelspace implementation
2024-01-08T23:12:14Z INFO [wireguard] Connecting to 185.159.157.82:51820
2024-01-08T23:12:14Z INFO [wireguard] Wireguard setup is complete. Note Wireguard is a silent protocol and it may or may not work, without giving any error message. Typically i/o timeout errors indicate the Wireguard connection is not working.
2024-01-08T23:12:14Z INFO [dns] downloading DNS over TLS cryptographic files
2024-01-08T23:12:16Z INFO [healthcheck] healthy!
2024-01-08T23:12:22Z INFO [dns] downloading hostnames and IP block lists
2024-01-08T23:12:30Z INFO [dns] init module 0: validator
2024-01-08T23:12:30Z INFO [dns] init module 1: iterator
2024-01-08T23:12:30Z INFO [dns] start of service (unbound 1.17.1).
2024-01-08T23:12:32Z INFO [dns] generate keytag query _ta-4a5c-4f66. NULL IN
2024-01-08T23:12:35Z INFO [healthcheck] unhealthy: dialing: dial tcp4: lookup cloudflare.com: i/o timeout
2024-01-08T23:12:36Z INFO [dns] ready
2024-01-08T23:12:38Z INFO [healthcheck] healthy!
2024-01-08T23:12:39Z INFO [vpn] You are running on the bleeding edge of latest!
2024-01-08T23:12:42Z INFO [ip getter] Public IP address is MASKED_IP (India, Delhi, New Delhi)
2024-01-08T23:12:55Z INFO [http proxy] 172.18.0.1:34774 475  POST MASKED_URL

Share your configuration

version: "3"
services:
  protonvpn-in-proxy:
    image: qmcgaw/gluetun
    container_name: in-proxy
    devices:
      - /dev/net/tun:/dev/net/tun
    cap_add:
      - NET_ADMIN
    ports:
      - 7200:8888/tcp
    volumes:
      - ./data/wg-IN-1.conf:/gluetun/wireguard/wg0.conf
    environment:
      - HTTPPROXY=ON
      - HTTPPROXY_STEALTH=on
      - HTTPPROXY_LOG=on
      - VPN_SERVICE_PROVIDER=custom
      - VPN_TYPE=wireguard
shuplenkov commented 7 months ago

Have the same issue

casudo commented 6 months ago

Same here.