qdm12 / gluetun

VPN client in a thin Docker container for multiple VPN providers, written in Go, and using OpenVPN or Wireguard, DNS over TLS, with a few proxy servers built-in.
https://hub.docker.com/r/qmcgaw/gluetun
MIT License
7.89k stars 366 forks source link

VPN provider support: Ivacy VPN #794

Open JonnySiHI opened 2 years ago

JonnySiHI commented 2 years ago

Hey :),

Fantastic work by the way, and I was wondering if you could add Ivacy VPN, please.

https://support.ivacy.com/vpnusecases/openvpn-files-windows-routers-ios-linux-and-mac/

Thanks :)

EDIT by qdm12: See https://github.com/qdm12/gluetun/issues/1281 for implementation details EDIT 2: list of servers : https://support.ivacy.com/servers-list/

Ferk commented 2 years ago

@JonnySiHI have you actually managed to connect using Ivacy by making use of their ovpn files and the Custom Provider configuration? I've been trying but it doesn't seem to work for me, I keep obtaining AUTH_FAIL. The username and password should be the same as when login in the Ivacy website, right?

Ferk commented 2 years ago

Ok, after contacting Ivacy support it appears there's a different username, it's not the email what we have to use (though I couldn't see any way to find that username besides contacting support).

It now works when I connect through other means (such as synology) but it's still giving an error in gluetun:

gluetun    | 2022/05/29 16:20:02 INFO vpn: starting
gluetun    | 2022/05/29 16:20:02 INFO firewall: setting VPN connection through firewall...
gluetun    | 2022/05/29 16:20:02 INFO openvpn: DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
gluetun    | 2022/05/29 16:20:02 INFO openvpn: OpenVPN 2.5.2 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on May  4 2021
gluetun    | 2022/05/29 16:20:02 INFO openvpn: library versions: OpenSSL 1.1.1l  24 Aug 2021, LZO 2.10
gluetun    | 2022/05/29 16:20:02 INFO openvpn: TCP/UDP: Preserving recently used remote address: [AF_INET]45.12.222.103:53
gluetun    | 2022/05/29 16:20:02 INFO openvpn: UDP link local: (not bound)
gluetun    | 2022/05/29 16:20:02 INFO openvpn: UDP link remote: [AF_INET]45.12.222.103:53
gluetun    | 2022/05/29 16:20:04 ERROR ip getter: Get "https://api.ipify.org": dial tcp: lookup api.ipify.org on 1.1.1.1:53: write udp 172.30.0.2:36742->1.1.1.1:53: write: operation not permitted
gluetun    | 2022/05/29 16:20:04 INFO ip getter: retrying in 5s
gluetun    | 2022/05/29 16:20:04 WARN openvpn: 'link-mtu' is used inconsistently, local='link-mtu 1557', remote='link-mtu 1550'
gluetun    | 2022/05/29 16:20:04 WARN openvpn: 'auth' is used inconsistently, local='auth SHA1', remote='auth [null-digest]'
gluetun    | 2022/05/29 16:20:04 WARN openvpn: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
gluetun    | 2022/05/29 16:20:04 INFO openvpn: [Secure-Server] Peer Connection Initiated with [AF_INET]45.12.222.103:53
gluetun    | 2022/05/29 16:20:09 ERROR ip getter: Get "http://ip1.dynupdate.no-ip.com:8245": dial tcp: lookup ip1.dynupdate.no-ip.com on 1.1.1.1:53: write udp 172.30.0.2:34888->1.1.1.1:53: write: operation not permitted
gluetun    | 2022/05/29 16:20:09 INFO ip getter: retrying in 5s
gluetun    | 2022/05/29 16:20:10 INFO openvpn: TUN/TAP device tun0 opened
gluetun    | 2022/05/29 16:20:10 INFO openvpn: /sbin/ip link set dev tun0 up mtu 1500
gluetun    | 2022/05/29 16:20:10 INFO openvpn: /sbin/ip link set dev tun0 up
gluetun    | 2022/05/29 16:20:10 INFO openvpn: /sbin/ip addr add dev tun0 172.94.74.104/27
gluetun    | 2022/05/29 16:20:10 ERROR openvpn: RTNETLINK answers: File exists
gluetun    | 2022/05/29 16:20:10 ERROR openvpn: Linux route add command failed: external program exited with error status: 2
gluetun    | 2022/05/29 16:20:10 INFO openvpn: Initialization Sequence Completed
gluetun    | 2022/05/29 16:20:19 INFO dns over tls: downloading DNS over TLS cryptographic files
gluetun    | 2022/05/29 16:20:24 ERROR ip getter: Get "https://ipinfo.io/ip": dial tcp: lookup ipinfo.io on 1.1.1.1:53: read udp 172.94.74.104:46835->1.1.1.1:53: i/o timeout
gluetun    | 2022/05/29 16:20:24 INFO ip getter: retrying in 5s
gluetun    | 2022/05/29 16:20:29 WARN dns over tls: cannot update files
gluetun    | 2022/05/29 16:20:29 INFO dns over tls: attempting restart in 5m20s
gluetun    | 2022/05/29 16:20:39 ERROR ip getter: Get "https://domains.google.com/checkip": dial tcp: lookup domains.google.com on 1.1.1.1:53: read udp 172.94.74.104:58408->1.1.1.1:53: i/o timeout
gluetun    | 2022/05/29 16:20:39 INFO ip getter: retrying in 5s
gluetun    | 2022/05/29 16:20:54 ERROR ip getter: Get "http://ip1.dynupdate.no-ip.com": dial tcp: lookup ip1.dynupdate.no-ip.com on 1.1.1.1:53: read udp 172.94.74.104:52524->1.1.1.1:53: i/o timeout
gluetun    | 2022/05/29 16:20:54 INFO ip getter: retrying in 5s
gluetun    | 2022/05/29 16:21:04 INFO healthcheck: program has been unhealthy for 56s: restarting VPN
gluetun    | 2022/05/29 16:21:04 INFO vpn: stopping
Ferk commented 2 years ago

Oh, it works if I use the TCP servers, instead of UDP. Great!

qdm12 commented 2 years ago

Since I have a rather long backlog of providers to add support for, I spent a good amount of time refactoring the code and writing guides on adding a VPN provider. You need a bit of programming experience but you could also learn as you go. The relevant pages are:

I'll comment here again if I start implementing the provider to avoid any potential duplicate work, but it should not be anytime soon I think.

Zoobdude commented 10 months ago

I recently discovered that Ivacy actually resells PureVPN and all of the PureVPN configuration files can be used with Ivacy credentials. Therefore, I'm not sure if it is necessary to implement Ivacy separately. Not to mention the OpenVPN configuration files are now only provided in .rar form (the .zip link mentioned in #1281 seems to be out of date). Maybe something about this could be included in the wiki?

marcocunha commented 6 months ago

I recently discovered that Ivacy actually resells PureVPN and all of the PureVPN configuration files can be used with Ivacy credentials. Therefore, I'm not sure if it is necessary to implement Ivacy separately. Not to mention the OpenVPN configuration files are now only provided in .rar form (the .zip link mentioned in #1281 seems to be out of date). Maybe something about this could be included in the wiki?

@Zoobdude I just found this thread now, but what was the username you used? The email you use to log into your Ivacy account?

Zoobdude commented 6 months ago

I recently discovered that Ivacy actually resells PureVPN and all of the PureVPN configuration files can be used with Ivacy credentials. Therefore, I'm not sure if it is necessary to implement Ivacy separately. Not to mention the OpenVPN configuration files are now only provided in .rar form (the .zip link mentioned in #1281 seems to be out of date). Maybe something about this could be included in the wiki?

@Zoobdude I just found this thread now, but what was the username you used? The email you use to log into your Ivacy account?

@marcocunha I seem to remember I had to ask support (on live chat) for my username. It's definitely not your email, mine is "ivacy0s" followed by 8 numbers.

Zoobdude commented 1 month ago

Ivacy will be merging with PureVPN - https://www.technadu.com/ivacy-merges-with-purevpn/546417/

So I'm assuming this issue can be closed now?

marcocunha commented 1 month ago

Ivacy will be merging with PureVPN - https://www.technadu.com/ivacy-merges-with-purevpn/546417/

So I'm assuming this issue can be closed now?

I've just finished migrating from IvacyVPN to PureVPN and tried the gluetun with my PureVPN account and it works fine, so we can close this issue.