qdm12 / gluetun-wiki

Home to the Markdown Wiki page for Gluetun

Quentin McGaw

[email protected]

👋 I'm Quentin, 28, a software engineer passionate about Go, cybersecurity, and familiar with React, Flutter and Rust.

Quick links

🖱 qqq.ninja/blog

📎 My updated old fashion PDF resume

Donations

• Github sponsors
• Paypal
• Donate to Kusama address: 5GxLYcBSsZTdMjbPEQGhJU4LkXFWTzeUnV1sysa467hSkEa8

Technologies I ❤️ to work with

ZFS, BTRFS

---

Technologies I want to learn more

---

Technologies I am familiar with

---

Technologies I used in the past

Additional note: which I would ideally like to avoid now!

---

Location

I am based in Luxembourg 🇱🇺 and work remotely.

I lived in Montreal ⛄️, New York 🌆, Luxembourg 🇱🇺, London 🌧 and Nice 😎 before

Work experience

Where	Dates	What
ChainSafe, Toronto	Oct'21 to Feb'23	for
DistrictM, Montreal	Since Jun'20	in Ad tech
USA Today network (SweetIQ), Montreal	Feb-Jun'20	in newspapers
SweetIQ, Montreal	Sep'19 to Feb'20	in places listing
Independent, Luxembourg	Aug'18 - Jul'19	&
Coinplus, Luxembourg	Apr'15 - Sep'16	for and cryptography
STMicro, France	Jun-Sep'14	for Android OS and app

Studies

Where	Dates	What
New York University (NYC)	Sep'16-May'18	Masters in CS
Imperial College London	Sep'12-Jul'16	Masters in EEE & Management

Open source projects

The most famous being in order:

• Gluetun
• DDNS updater
• DNS forwarding server

More recent projects:

• goservices to handle long running services in
• log a thread safe, extensible logging library in
• godevcontainer the best development container for out there!

The rest, see my 😄

Other

• I 🗣 French and English
• I have 3 nationalities
• I studied some managerial courses: corporate finance, economics, UK accouting, project management, innovation management and entrepreneurship

Random facts

• My favourite emoji is 👍
• 🐳 I develop in Docker containers
• 🏠 I like self hosting everything, I even host my 2 own servers running Arch Linux
• 〽️ I like having metrics, for everything metric-able and display them with Grafana
• 🔒 I like having a tight network security
• 🧪 I like writing tests and have them superfast! ⚡
• My reverse proxy of choice is Caddy v2
• My Docker image of choice is Alpine or Scratch if possible (who needs a shell right?)
• I use Mosh, the mobile shell
• I learnt and forgot the Shrodinger equation
• I had a horrible time reading French literature books in highscool
• My current phone in a few icons

🎉 Thanks for looking 👍

gluetun-wiki's Issues

Atlas VPN

Hello, would it be possible to use gluten with Atlas Vpn? If so what do I have do change on docker compose to make it possible? Thanks.

Gluetun in infinite crash loop after automatic update by watchtower

Hello,

Gluetun has been running perfectly for several months on my TS-364 QNAP (32GB RAM, 2x4TB in raid1, firmware 5.1.5 20240219), using wireguard by NORDVPN and shadowsocks.
On 19-03-24 watchtower updated the gluetun docker container. Following, the container entered an infinite loop of starts and crashes.

The log report:

Running version latest built on 2024-03-18T17:49:37.003Z (commit 3d16798)
🔧 Need help? https://github.com/qdm12/gluetun/discussions/new
🐛 Bug? https://github.com/qdm12/gluetun/issues/new
✨ New feature? https://github.com/qdm12/gluetun/issues/new
☕ Discussion? https://github.com/qdm12/gluetun/discussions/new
💻 Email? [email protected]
💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
2024-03-19T11:37:33+01:00 INFO [routing] default route found: interface eth0, gateway 172.29.0.1, assigned IP 172.29.0.4 and family v4
2024-03-19T11:37:33+01:00 INFO [routing] local ethernet link found: eth0
2024-03-19T11:37:33+01:00 INFO [routing] local ipnet found: 172.29.0.0/22
2024-03-19T11:37:33+01:00 INFO [firewall] enabling...
2024-03-19T11:37:33+01:00 INFO [firewall] enabled successfully
2024-03-19T11:37:34+01:00 INFO [storage] merging by most recent 17820 hardcoded servers and 17820 servers read from /gluetun/servers.json
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0x760835]
goroutine 35 [running]:
github.com/qdm12/gluetun/internal/configuration/settings.(*ServerSelection).validate(0xc0004cd130, {0xc00002c015, 0x7}, {0x1098740?, 0xc0024517a0?})
github.com/qdm12/gluetun/internal/configuration/settings/serverselection.go:149 +0xa55
github.com/qdm12/gluetun/internal/configuration/settings.(*Provider).validate(0xc0004cd128, {0xc00002a021?, 0x9?}, {0x1098740, 0xc0024517a0})
github.com/qdm12/gluetun/internal/configuration/settings/provider.go:47 +0x2fc
github.com/qdm12/gluetun/internal/configuration/settings.(*VPN).Validate(0xc0004cd118, {0x1098740, 0xc0024517a0}, 0x0?)
github.com/qdm12/gluetun/internal/configuration/settings/vpn.go:30 +0x165
github.com/qdm12/gluetun/internal/configuration/settings.(*Settings).Validate.func1()
github.com/qdm12/gluetun/internal/configuration/settings/settings.go:52 +0x2b
github.com/qdm12/gluetun/internal/configuration/settings.(*Settings).Validate(0xc0004cce00, {0x1098740?, 0xc0024517a0}, 0x0)
github.com/qdm12/gluetun/internal/configuration/settings/settings.go:57 +0x9cd
main._main({0x109d840, 0xc0004c2000}, {{0x1096954, 0x6}, {0x1096cd8, 0x7}, {0x1098470, 0x18}}, {0xc0000220a0, 0x1, ...}, ...)
./main.go:240 +0xf9d
main.main.func1()
./main.go:92 +0x12c
created by main.main in goroutine 1
./main.go:91 +0x5e5

When creating the containers manually using "docker compose up -d", resulted in following error:

Error response from daemon: failed to create shim task: OCI runtime create failed: runc create failed: unable to create new parent process: namespace path: lstat /proc/10977/ns/net: no such file or directory: unknown

I've used following docker compose file:

services:
  gluetun:
    image: qmcgaw/gluetun
    container_name: gluetun
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun     
    ports:
      - 8186:8080 # gluetun
      - 8888:8888/tcp
      - 8388:8388/tcp
      - 8388:8388/udp
      - 9091:9091 # transmission-vpn
      - 51413:51413
      - 51413:51413/udp
      - 5800:5800 # jdownloader-vpn
      - 3129:3129
      - 8181:8080 # sabnzbd-vpn
    volumes:
      - /share/CACHEDEV1_DATA/appdata/gluetun:/gluetun
    environment:
      - SHADOWSOCKS=on
      - SHADOWSOCKS_PASSWORD=xxxxxxxxxxxxxxxxx
      - VPN_SERVICE_PROVIDER=nordvpn
      - VPN_TYPE=wireguard
      - WIREGUARD_PRIVATE_KEYxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
      - SERVER_COUNTRIES=Netherlands,Belgium,Germany
      - SERVER_REGION=Europe
      - TZ=Europe/Amsterdam
    restart: unless-stopped

  transmission:
    image: ghcr.io/linuxserver/transmission:latest
    container_name: transmission-vpn
    network_mode: "service:gluetun"
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Amsterdam
      - USER=xxxxx
      - PASS=xxxxxxxxxxx
    volumes:
      - /share/CACHEDEV1_DATA/appdata/transmission:/config
      - /share/CACHEDEV1_DATA/Download/completed:/downloads
    restart: unless-stopped

  jdownloader-2-vpn:
    image: jlesage/jdownloader-2:latest
    container_name: jdownloader-2-vpn
    network_mode: "service:gluetun"
    environment:
      - MYJDOWNLOADER_EMAIL=xxxxxxxxxxxxxxxxxxxx
      - MYJDOWNLOADER_PASSWORDxxxxxxxxxxxxxxxxxxxxx
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Amsterdam
    volumes:
      - "/share/CACHEDEV1_DATA/appdata/jdownloader-2-vpn:/config:rw"
      - "/share/CACHEDEV1_DATA/Download/completed:/output:rw"
    restart: unless-stopped   

  sabnzbd:
    image: lscr.io/linuxserver/sabnzbd:latest
    container_name: sabnzbd-vpn
    network_mode: "service:gluetun"
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Amsterdam
    volumes:
      - /share/CACHEDEV1_DATA/appdata/sabnzbd/config:/config
      - /share/CACHEDEV1_DATA/Download/completed:/downloads #optional
      - /share/CACHEDEV1_DATA/Download/incomplete:/incomplete-downloads #optional
    restart: unless-stopped

What to do to resolve the issue?

Allow purevpn wireguard

I tried to configure for PureVPN WireGuard after downloading config info as per
https://support.purevpn.com/en_US/linux/how-to-setup-wireguard-on-linux
only to get the gluetun error message
2023-10-23T21:32:02-04:00 ERROR VPN settings: provider settings: VPN provider name is not valid for Wireguard: value is not one of the possible choices: purevpn must be one of airvpn, custom, ivpn, mullvad, nordvpn, surfshark or windscribe
I then changed "purevpn" to "custom" and got the error
2023-10-23T21:36:25-04:00 ERROR VPN settings: provider settings: server selection: for VPN service provider custom: the country specified is not valid: one or more values is set but there is no possible value available
which is likely true if searching in servers.json.
It looks like they have at least one endpoint at sx051007-wg.pointtoserver.com:51820.

I read elsewhere (https://www.reddit.com/r/PureVPNcom/comments/zjwrar/wireguard_configuration_requires_regeneration/) that their key expires. If that's still true, this probably wouldn't be useful.

Proton VPN not working

Hi,

I'm running TrueNAS and trying to use gluetun to add a VPN connection ontop of my applications.

I have the VPN ProtonVPN which you somewhat support but with the service provider of "custom". Whenever I do this I get this error in my console....

2024-03-05 17:41:26.893567+00:002024-03-05T17:41:26Z ERROR VPN settings: provider settings: VPN provider name is not valid for Wireguard: value is not one of the possible choices: private internet access must be one of airvpn, custom, ivpn, mullvad, nordvpn, surfshark or windscribe

Do you have any ideas on how to solve this?

I've pasted images of my config below...

Thanks

HTTP Proxy through SwitchyOmega shows local WAN IP

Something simple, so vexing... Here's my docker-compose:

version: "3"
services:
  gluetun:
    image: qmcgaw/gluetun
    container_name: gluetun
    hostname: gluetun
    cap_add:
      - NET_ADMIN
    ports:
      - 8888:8888/tcp # HTTP proxy
    environment:
      - HTTPPROXY=on

(truncated airvpn setup)

My host is 192.168.1.42, so in SwitchyOmega Proxy I used 192.168.1.42:8888 for HTTP setting (default) and set HTTPS to use default.

When selecting the proxy profile and loading whatismyip on my browser, I get my local WAN address. I've tried changing the browser proxy settings as well, and using the docker container IP (172.24.05) without any change. I'm sure this is user error, but I'm stuck. Thanks for any assistance.

Torguard unable to connect

Hi, I've been setting up gluetun on a Synology Container docker following instructions from
https://drfrankenstein.co.uk/2023/04/23/qbittorrent-with-gluetun-vpn-in-container-manager-on-a-synology-nas/

My VPN provider is Torguard, but I need help getting it to connect.

Continually getting the error:

INFO [openvpn] SIGUSR1[soft,connection-reset] received, process restarting
INFO [openvpn] Connection reset, restarting [0]
INFO [openvpn] TCP_CLIENT link remote: [AF_INET]xxx.xxx.xxx.xxx:443
INFO [openvpn] TCP_CLIENT link local: (not bound)
2INFO [openvpn] TCP connection established with [AF_INET]xxx.xxx.xxx.xxx:443
INFO [openvpn] Attempting to establish TCP connection with [AF_INET]xxx.xxx.xxx.xxx:443 [nonblock]
INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]xxx.xxx.xxx.xxx:443
WARN [openvpn] --ping should normally be used with --ping-restart or --ping-exit
INFO [openvpn] library versions: OpenSSL 3.1.3 19 Sep 2023, LZO 2.10
INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov  2 2022
INFO [firewall] allowing VPN connection...
INFO [vpn] starting
INFO [firewall] removing allowed port xxxx...
INFO [vpn] stopping
INFO [healthcheck] program has been unhealthy for 31s: restarting VPN (see https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md)

Configuration:

services:
  gluetun:
    image: qmcgaw/gluetun:latest
    container_name: gluetun
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    ports:
      - 8090:8090 # port for qbittorrent
    volumes:
      - /volume1/docker/gluetun:/gluetun
    environment:
      - PUID=xxx
      - PGID=xxxxx
      - VPN_SERVICE_PROVIDER=torguard
      - VPN_ENDPOINT_PORT=443
      - VPN_ENDPOINT_IP=xxx.xxx.xxx.xxx
      - SERVER_HOSTNAMES=nl.torguard.com
      - VPN_TYPE=openvpn
      - OPENVPN_PROTOCOL=tcp
      - TZ=Europe/London
      - OPENVPN_AUTH=sha1
      - OPENVPN_CIPHER=aes-128-cbc
      - OPENVPN_USER=[Redacted]
      - OPENVPN_PASSWORD=[Redacted]
      - SERVER_COUNTRIES=Netherlands
      - HTTPPROXY=off #change to on if you wish to enable
      - SHADOWSOCKS=off #change to on if you wish to enable
      - FIREWALL_OUTBOUND_SUBNETS=172.20.0.0/16,192.168.0.0/24 #change this in line with your subnet see note on guide.
      - FIREWALL_VPN_INPUT_PORTS=xxxx #uncomment this line and change the port as per the note on the guide

    network_mode: synobridge
    labels:
      - com.centurylinklabs.watchtower.enable=false
    security_opt:
      - no-new-privileges:true
    restart: unless-stopped

What am I missing? I've redacted IPs and ports to xxx for security. I have a specific Torguard VPN IP with port forwarding setup hence my attempt to add this in.

I've also tried the guide's version of the code:

services:
  gluetun:
    image: qmcgaw/gluetun:latest
    container_name: gluetun
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    ports:
      - 8090:8090 # port for qbittorrent
    volumes:
      - /volume1/docker/gluetun:/gluetun
    environment:
      - PUID=xxxx
      - PGID=xxxx
      - VPN_SERVICE_PROVIDER=Torguard
      - VPN_TYPE=openvpn
      - OPENVPN_USER=[Redacted]
      - OPENVPN_PASSWORD=[Redacted]
      - SERVER_COUNTRIES=Netherlands
      - TZ=Europe/London
      - HTTPPROXY=off #change to on if you wish to enable
      - SHADOWSOCKS=off #change to on if you wish to enable
      - FIREWALL_OUTBOUND_SUBNETS=172.20.0.0/16,192.168.0.0/24 #change this in line with your subnet see note on guide.
    network_mode: synobridge
    labels:
      - com.centurylinklabs.watchtower.enable=false
    security_opt:
      - no-new-privileges:true
    restart: unless-stopped

Even this code produces the same error. I sometimes get a healthy container when I set the Firewall to off but it still shows the same error messages as above, and none of my linked containers see the network or can access the VPN. I've looked over the internet and this forum and cannot find any useful advice to resolve this.

I have yet to figure out what to do. I have tried every perceivable permutation of codes I can find on your wiki, but still need help getting it to work. any help would be greatly appreciated. Thank you.

custom.conf file

URL to the Wiki page

https://github.com/qdm12/gluetun-wiki/blob/main/setup/openvpn-configuration-file.md

What's missing?

I'm trying to follow the outlined steps for setting up a custom openvpn, but I cannot for the life of me find any example of a .conf file mentioned. I have the openvpn zip folder with two Security Certificates, and various .ovpn files. Do I just rename one of the .ovpn files to .conf? Do I create a new .conf file? What's the syntax / structure?

TB supports Wireguard, but I I don't believe they share or provide obvious access to the various Wireguard keys needed, so I figured I'd try the more "simple" OpenVPN method instead.

Context: I have a paid TunnelBear sub and want to try getting it setup, but TB isn't currently supported (that's fine), but I want to at least try getting the custom.md setup.

Additional instructions for Windscribe Build A Plan users

URL to the Wiki page

https://github.com/qdm12/gluetun-wiki/blob/main/setup/providers/windscribe.md

What's missing?

Currently, the SERVER_REGIONS and SERVER_CITIES environment variables are stated as optional, however Windscribe offers a custom premium plan (called build a plan) where the user can choose certain countries and regions for a different fee. These environment variables are not optional for these users since they only have access to certain regions, so these variables will need to contain the regions that the user has access to. If these variables are not utilised, there will be an auth error.

Public IP: `PUBLICIP_API` and `PUBLICIP_API_TOKEN`

URL to the Wiki page

https://github.com/qdm12/gluetun-wiki/tree/main/setup/options

What's missing?

PUBLICIP_API and PUBLICIP_API_TOKEN

OpenVpn + Surfshark error - [vpn] cannot get version information: Get "https://api.github.com/repos/qdm12/gluetun/releases": context canceled

This type of issue has been reported for wireguard, but I'm seeing the same issue with openvpn. Any ideas how this can be resolved?

Running version v3.38.0 built on 2024-03-25T15:53:33.983Z (commit b3ceece)
2024-04-10T23:09:59.673081196-04:00
🔧 Need help? https://github.com/qdm12/gluetun/discussions/new
🐛 Bug? https://github.com/qdm12/gluetun/issues/new
✨ New feature? https://github.com/qdm12/gluetun/issues/new
☕ Discussion? https://github.com/qdm12/gluetun/discussions/new
💻 Email? [email protected]
💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
2024-04-10T23:09:59-04:00 INFO [routing] default route found: interface eth0, gateway 172.16.0.1, assigned IP 172.16.0.110 and family v4
2024-04-10T23:09:59-04:00 INFO [routing] local ethernet link found: eth0
2024-04-10T23:09:59-04:00 INFO [routing] local ipnet found: 172.16.0.0/16
2024-04-10T23:09:59-04:00 INFO [routing] local ipnet found: fe80::/64
2024-04-10T23:10:00-04:00 INFO [storage] creating /gluetun/servers.json with 19476 hardcoded servers
2024-04-10T23:10:00-04:00 INFO Alpine version: 3.18.6
2024-04-10T23:10:00-04:00 INFO OpenVPN 2.5 version: 2.5.8
2024-04-10T23:10:00-04:00 INFO OpenVPN 2.6 version: 2.6.8
2024-04-10T23:10:00-04:00 INFO Unbound version: 1.19.3
2024-04-10T23:10:00-04:00 INFO IPtables version: v1.8.9
2024-04-10T23:10:00-04:00 INFO Settings summary:
├── VPN settings:
|   ├── VPN provider settings:
|   |   ├── Name: surfshark
|   |   └── Server selection settings:
|   |       ├── VPN type: openvpn
|   |       ├── Hostnames: ca-tor.prod.surfshark.com
|   |       └── OpenVPN server selection settings:
|   |           └── Protocol: UDP
|   └── OpenVPN settings:
|       ├── OpenVPN version: 2.5
|       ├── User: [set]
|       ├── Password: [set]
|       ├── Network interface: tun0
|       ├── Run OpenVPN as: root
|       └── Verbosity level: 1
├── DNS settings:
|   └── Keep existing nameserver(s): yes
├── Firewall settings:
|   └── Enabled: no
├── Log settings:
|   └── Log level: INFO
├── Health settings:
|   ├── Server listening address: 127.0.0.1:9999
|   ├── Target address: cloudflare.com:443
|   ├── Duration to wait after success: 5s
|   ├── Read header timeout: 100ms
|   ├── Read timeout: 500ms
|   └── VPN wait durations:
|       ├── Initial duration: 6s
|       └── Additional duration: 5s
├── Shadowsocks server settings:
|   └── Enabled: no
├── HTTP proxy settings:
|   └── Enabled: no
├── Control server settings:
|   ├── Listening address: :8000
|   └── Logging: yes
├── OS Alpine settings:
|   ├── Process UID: 568
|   ├── Process GID: 568
|   └── Timezone: america/toronto
├── Public IP settings:
|   ├── Fetching: every 12h0m0s
|   ├── IP file path: /tmp/gluetun/ip
|   └── Public IP data API: ipinfo
└── Version settings:
└── Enabled: yes
2024-04-10T23:10:00-04:00 INFO [routing] default route found: interface eth0, gateway 172.16.0.1, assigned IP 172.16.0.110 and family v4
2024-04-10T23:10:00-04:00 INFO [routing] adding route for 0.0.0.0/0
2024-04-10T23:10:00-04:00 INFO [firewall] firewall disabled, only updating allowed subnets internal list
2024-04-10T23:10:00-04:00 INFO [routing] default route found: interface eth0, gateway 172.16.0.1, assigned IP 172.16.0.110 and family v4
2024-04-10T23:10:00-04:00 INFO TUN device is not available: open /dev/net/tun: no such file or directory; creating it...
2024-04-10T23:10:00-04:00 WARN [dns] ⚠️⚠️⚠️  keeping the default container nameservers, this will likely leak DNS traffic outside the VPN and go through your container network DNS outside the VPN tunnel!
2024-04-10T23:10:00-04:00 INFO [http server] http server listening on [::]:8000
2024-04-10T23:10:00-04:00 INFO [firewall] firewall disabled, only updating internal VPN connection
2024-04-10T23:10:00-04:00 INFO [healthcheck] listening on 127.0.0.1:9999
2024-04-10T23:10:00-04:00 INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov  2 2022
2024-04-10T23:10:00-04:00 INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2024-04-10T23:10:00-04:00 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]37.19.211.92:1194
2024-04-10T23:10:00-04:00 INFO [openvpn] UDP link local: (not bound)
2024-04-10T23:10:00-04:00 INFO [openvpn] UDP link remote: [AF_INET]37.19.211.92:1194
2024-04-10T23:10:00-04:00 INFO [healthcheck] healthy!
2024-04-10T23:10:00-04:00 INFO [openvpn] [ca-tor-v082.prod.surfshark.com] Peer Connection Initiated with [AF_INET]37.19.211.92:1194
2024-04-10T23:10:01-04:00 ERROR [openvpn] Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:7: block-outside-dns (2.5.8)
2024-04-10T23:10:01-04:00 INFO [openvpn] TUN/TAP device tun0 opened
2024-04-10T23:10:01-04:00 INFO [openvpn] /sbin/ip link set dev tun0 up mtu 1500
2024-04-10T23:10:01-04:00 INFO [openvpn] /sbin/ip link set dev tun0 up
2024-04-10T23:10:01-04:00 INFO [openvpn] /sbin/ip addr add dev tun0 10.8.8.18/24
2024-04-10T23:10:01-04:00 INFO [openvpn] UID set to nonrootuser
2024-04-10T23:10:01-04:00 INFO [openvpn] Initialization Sequence Completed
2024-04-10T23:10:16-04:00 INFO [healthcheck] program has been unhealthy for 6s: restarting VPN
2024-04-10T23:10:16-04:00 INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md
2024-04-10T23:10:16-04:00 INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION
2024-04-10T23:10:16-04:00 INFO [vpn] stopping
2024-04-10T23:10:16-04:00 ERROR [vpn] cannot get version information: Get "https://api.github.com/repos/qdm12/gluetun/releases": context canceled
2024-04-10T23:10:16-04:00 ERROR [ip getter] Get "https://ipinfo.io/": context deadline exceeded (Client.Timeout exceeded while awaiting headers) - retrying in 5s
2024-04-10T23:10:36-04:00 ERROR [ip getter] Get "https://ipinfo.io/": context deadline exceeded (Client.Timeout exceeded while awaiting headers) - retrying in 10s
2024-04-10T23:11:01-04:00 ERROR [ip getter] Get "https://ipinfo.io/": context deadline exceeded (Client.Timeout exceeded while awaiting headers) - retrying in 20s
2024-04-10T23:11:36-04:00 ERROR [ip getter] Get "https://ipinfo.io/": context deadline exceeded (Client.Timeout exceeded while awaiting headers) - retrying in 40s
2024-04-10T23:12:31-04:00 ERROR [ip getter] Get "https://ipinfo.io/": context deadline exceeded (Client.Timeout exceeded while awaiting headers) - retrying in 1m20s
2024-04-10T23:14:06-04:00 ERROR [ip getter] Get "https://ipinfo.io/": context deadline exceeded (Client.Timeout exceeded while awaiting headers) - retrying in 2m40s

Mullvad wireguard protocol unhealthy / healthy

I just noticed these errors. The vpn seems to be up and stable. Just not sure what to make of these unhealthy / healthy logs.
Any thoughts?

3-09-09T23:46:32-04:00 INFO [healthcheck] healthy!
2023-09-09T23:46:50-04:00 INFO [healthcheck] unhealthy: dialing: dial tcp4: lookup cloudflare.com: i/o timeout
2023-09-09T23:46:52-04:00 INFO [healthcheck] healthy!
2023-09-10T02:42:38-04:00 INFO [healthcheck] unhealthy: dialing: dial tcp4: lookup cloudflare.com: i/o timeout
2023-09-10T02:42:39-04:00 INFO [healthcheck] healthy!
2023-09-10T06:12:35-04:00 INFO [healthcheck] unhealthy: dialing: dial tcp4: lookup cloudflare.com: i/o timeout
2023-09-10T06:12:36-04:00 INFO [healthcheck] healthy!

ERROR creating TUN device file node: file exists

URL to the Wiki page

https://github.com/qdm12/gluetun-wiki/blob/main/errors/tun.md#creating-tun-device-file-node-file-exists

What's missing?

Describe: container has been running properly for a while. Suddenly container is failing to start with above error. But already provided solution did not help.

Previous issues:

• qdm12/gluetun#884
• qdm12/gluetun#1537
• qdm12/gluetun#1594

System:

• RHEL 9: kernel: 5.14.0-362.18.1.el9_3.x86_64
• Podman + crun to manage gluetun.

Command to run the Gluetun container:

podman run -d --name=pia-vpn --ip 101.0.0.21 --pull newer --cap-add=NET_ADMIN --device=/dev/net/tun:/dev/net/tun -p 8888:8888/tcp -p 8388:8388/tcp -p 8388:8388/udp -v vpn-config:/gluetun -e HTTPPROXY=on -e VPN_SERVICE_PROVIDER="private internet access" -e OPENVPN_USER=Username -e OPENVPN_PASSWORD=Password -e SERVER_REGIONS="US East" -e PRIVATE_INTERNET_ACCESS_OPENVPN_ENCRYPTION_PRESET=strong qmcgaw/gluetun:latest

Error:

2024-03-12T17:28:00Z INFO [routing] default route found: interface eth0, gateway 10.88.0.1, assigned IP 10.88.0.21 and family v4
2024-03-12T17:28:00Z INFO [routing] deleting route for 0.0.0.0/0
2024-03-12T17:28:00Z ERROR creating TUN device file node: file exists
2024-03-12T17:28:00Z INFO Shutdown successful

Investigation done:

• Running the container as root.
• Validated the correct module and kernel version
• rebooted system
• listed the loaded module: Noticed that the tun module was not getting loaded during the boot.

Validation:

# lsmod | grep tun   <--- returned no output
# ll /dev/net/tun
crw-rw-rw-. 1 root root 10, 200 Mar 11 00:00 /dev/net/tun

manually loaded the module:

# modprob tun
# lsmod | grep tun
tun                    73728  0

Post-loading, the container started correctly.

Solution: Load the module during boot:

echo 'tun' > /etc/modules-load.d/tun.conf
cat /etc/modules-load.d/tun.conf
tun

Upgrade to v3.38, fails to start

Have been running gluetun successfully for months.
Docker container on arm64, VPN provider Mullvad.
No tags used in docker-compose.yml
Recently pulled latest image, failed repeatedly on startup.
Reverted to :v3 and :v3.37, same error as below...

Running version v3.37.0 built on 2024-01-02T00:01:06.245Z (commit c826707)

🔧 Need help? https://github.com/qdm12/gluetun/discussions/new
🐛 Bug? https://github.com/qdm12/gluetun/issues/new
✨ New feature? https://github.com/qdm12/gluetun/issues/new
☕ Discussion? https://github.com/qdm12/gluetun/discussions/new
💻 Email? [email protected]
💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
2024-04-01T12:34:00-04:00 INFO [routing] default route found: interface eth0, gateway 172.18.0.1, assigned IP 172.18.0.11 and family v4
2024-04-01T12:34:00-04:00 INFO [routing] local ethernet link found: eth0
2024-04-01T12:34:00-04:00 INFO [routing] local ethernet link found: eth1
2024-04-01T12:34:00-04:00 INFO [routing] local ipnet found: 172.18.0.0/16
2024-04-01T12:34:00-04:00 INFO [routing] local ipnet found: 192.168.92.0/24
2024-04-01T12:34:00-04:00 INFO [routing] local ipnet found: fe80::/64
2024-04-01T12:34:00-04:00 INFO [routing] local ipnet found: fe80::/64
2024-04-01T12:34:00-04:00 INFO [firewall] enabling...
2024-04-01T12:34:00-04:00 ERROR enabling firewall: accept output from fe80::42:acff:fe12:b to fe80::/64: ip6tables is required, please upgrade your kernel to support it
2024-04-01T12:34:00-04:00 INFO Shutdown successful

Base OS is Ubuntu server 20.04. I did do an apt update/upgrade before pulling the new image. There were multiple docker and docker compose updates, so perhaps one of these broke compatibility. I have no need/desire to use ipv6, so I tried disabling it in the OS, but I still got the same error message when I restarted gluetun. I have no idea what to try next, any help is appreciated.

Thanks.

Running multiple instances of the same container behind gluetun

Hello,

I want to be able to run multiple transmission containers behind a gluetun vpn to make sure all their traffic will be redirected there, but I can't find a simple way to do this, and I don't want to run one gluetun per transmission container.

Is there a simple way to get this to work?

Thanks,

New feature request: Status web page

Thank you for this wonderful project. It would be great if there would be a quick way to connect to a gluetun instance via browser to check connection status, statistics, and health. added bonus would be a web interface to manage connections(e.g., add servers, connect to servers, pause traffic).

Mention that control server OpenVPN endpoint also works for Wireguard

URL to the Wiki page

https://github.com/qdm12/gluetun-wiki/blob/29e3dee5024d82218e3f170b32f027102ff84aab/setup/advanced/control-server.md

What's missing?

Basically the title. I discovered that the /v1/openvpn/* endpoints also work for Wireguard. This should probably be documented (assuming it is intentional).

Thoughts on Mkdocs?

What is your suggestion?

Hi. I use mkdocs quite a bit and was wondering on what your thoughts are on turning this repo in to an mkdocs site?

I am happy to provide most of the leg work, as a means of giving back to this project

Bandwidth limitations and podman

URL to the Wiki page

https://github.com/qdm12/gluetun-wiki/blob/main/faq/bandwidth.md

What's missing?

I don't know if this is information you want in the wiki, but:

I had noticeably slower speeds with docker compared to native. Then I moved to podman, and started running gluetun in a pod and whatever other container i wanted to route through the VPN in the same pod. The performance impact is tiny - I am maxing out my 500mbit line and the processor isn't even working very hard. They share the network stack, so whenever gluetun goes down, the kill switch reliably triggers.

best regards
Linus

How to manually add a server for Nord VPN

I am trying to connect to uk2504.nordvpn.com. I can connect to it via the mac desktop client and everything works fine. When I create the SERVER_HOSTNAMES variable in portainer and add uk2504.nordvpn.com to it, I get an error and a list off all of the servers that Gluetun says I can connect to. However 2504 is not on that list.

I went down the road of editing the servers.json list to include that server. When I execute the container I get the same error msg but I also see where it says it is merging the lists together so it should have picked it up right? I also tried running the docker command to update servers.json but that still doesnt include the server I want to connect to.

TLDR: I want to specify a wireguard server for Nord that does not exist in the servers.json. Is this possible?

Wireguard: document /gluetun/wireguard/wg0.conf bind mount

URL to the Wiki page

https://github.com/qdm12/gluetun-wiki/blob/main/setup/wireguard.md

What's missing?

New information needed for qdm12/gluetun#1120

NordVPN Token Authentication for WireGuard

The method to extract a Private Key seems to be overly convoluted, can the image be updated to allow the use of the Token instead that NordVPN provides on the NordVPN user's account dashboard?

airvpn config

remove IPv6 from ### Wireguard config

add these lines in the fireguard section
You can get the data you need from the Config Generator in the AirVPN Client Area. Gluetun does not support IPv6 so only copy the IPv4 address into the WIREGUARD_ADDRESSES variable.

here is the modified file
airvpn.md

Docker-Compose for Private-internet-access needs modification

URL to the Wiki page

https://github.com/qdm12/gluetun-wiki/blob/main/setup/providers/private-internet-access.md

What's incorrect?

Docker-Compose section of the providers page for Private-internet-access does not work as is and should be modified.

volumes:
- gluetun:/gluetun

Appears to be incorrect syntax for docker-compose does not work as is... suggest adding " ./ " by changing to:

volumes:
- ./gluetun:/gluetun

Creating VPN using shadow socks

Hi,
I stumbled upon the wikis but could not find how to connect to shadow socks. There are options to enable internal shadow socks but could not find one to create vpn using shadow socks.
I would like to create a vpn using shadow socks from pproxy.
Is it possible using custom.conf.

Since plain socks5 proxy to create vpn is not supported, I thought of creating shadow socks proxy using plain socks proxy and then creating docker vpn using gluetun.

Thank you

Adding pia wireguard to wiki

Not sure where to post this. But I found a rather easy way to setup PIA wireguard with help of the github below by kilegrantlucas.
Via the link below I was able to easely pull off a PIA-wg.conf file.
https://pkg.go.dev/github.com/kylegrantlucas/pia-wg-config#section-readme

Perhaps there can be a writeup for PIA wireguard in the wiki for those interested?

• VPN_SERVICE_PROVIDER=custom
• VPN_TYPE=wireguard
• VPN_ENDPOINT_IP=1.2.3.4
• VPN_ENDPOINT_PORT=51820
• WIREGUARD_PUBLIC_KEY=wAUaJMhAq3NFutLHIdF8AN0B5WG8RndfQKLPTEDHal0=
• WIREGUARD_PRIVATE_KEY=wOEI9rqqbDwnN8/Bpp22sVz48T71vJ4fYmFWujulwUU=
• WIREGUARD_ADDRESSES=10.64.222.21/32

It can either be done by entering the enviromental variables from the conf fill required by following the link above.
Or... you can also bind mount this wireguard configuration file (ini format) to /gluetun/wireguard/wg0.conf.

Constantly getting "Your credentials might be wrong" with protonVPN whenever container is restarted.

glueten log file.txt

URL to the Wiki page

https://github.com/qdm12/gluetun-wiki/blob/main/setup/providers/protonvpn.md

What's missing?

Hi

I have looked through the discussions and found only one other discussion which didn't resolve my issue. The suggestion there was to check the username & password as they could be wrong.

I have done that. The username & password works but only after a few tries. The log shows that after it gets an error, it keeps reattempting multiple times and after like 4-5 attempts, it works.

2024-03-02T14:43:40Z INFO [openvpn] SIGUSR1[soft,auth-failure] received, process restarting
2024-03-02T14:43:50Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]185.107.56.229:1194
2024-03-02T14:43:50Z INFO [openvpn] UDP link local: (not bound)
2024-03-02T14:43:50Z INFO [openvpn] UDP link remote: [AF_INET]185.107.56.229:1194
2024-03-02T14:43:51Z WARN [openvpn] 'link-mtu' is used inconsistently, local='link-mtu 1633', remote='link-mtu 1634'
2024-03-02T14:43:51Z WARN [openvpn] 'tun-mtu' is used inconsistently, local='tun-mtu 1532', remote='tun-mtu 1500'
2024-03-02T14:43:51Z WARN [openvpn] 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
2024-03-02T14:43:51Z INFO [openvpn] [node-nl-168.protonvpn.net] Peer Connection Initiated with [AF_INET]185.107.56.229:1194
2024-03-02T14:43:54Z INFO [healthcheck] program has been unhealthy for 21s: restarting VPN
2024-03-02T14:43:54Z INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md
2024-03-02T14:43:54Z INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION
2024-03-02T14:43:54Z INFO [vpn] stopping
2024-03-02T14:43:54Z INFO [vpn] starting
2024-03-02T14:43:54Z INFO [firewall] allowing VPN connection...
2024-03-02T14:43:54Z INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov 2 2022
2024-03-02T14:43:54Z INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2024-03-02T14:43:54Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]185.159.158.135:1194
2024-03-02T14:43:54Z INFO [openvpn] UDP link local: (not bound)
2024-03-02T14:43:54Z INFO [openvpn] UDP link remote: [AF_INET]185.159.158.135:1194
2024-03-02T14:44:21Z INFO [healthcheck] program has been unhealthy for 26s: restarting VPN
2024-03-02T14:44:21Z INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md
2024-03-02T14:44:21Z INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION
2024-03-02T14:44:21Z INFO [vpn] stopping
2024-03-02T14:44:21Z INFO [vpn] starting
2024-03-02T14:44:21Z INFO [firewall] allowing VPN connection...
2024-03-02T14:44:21Z INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov 2 2022
2024-03-02T14:44:21Z INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2024-03-02T14:44:21Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]190.2.132.139:1194
2024-03-02T14:44:21Z INFO [openvpn] UDP link local: (not bound)
2024-03-02T14:44:21Z INFO [openvpn] UDP link remote: [AF_INET]190.2.132.139:1194
2024-03-02T14:44:22Z WARN [openvpn] 'link-mtu' is used inconsistently, local='link-mtu 1633', remote='link-mtu 1634'
2024-03-02T14:44:22Z WARN [openvpn] 'tun-mtu' is used inconsistently, local='tun-mtu 1532', remote='tun-mtu 1500'
2024-03-02T14:44:22Z WARN [openvpn] 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
2024-03-02T14:44:22Z INFO [openvpn] [node-nl-28.protonvpn.net] Peer Connection Initiated with [AF_INET]190.2.132.139:1194
2024-03-02T14:44:29Z ERROR [openvpn] AUTH: Received control message: AUTH_FAILED
Your credentials might be wrong 🤨
2024-03-02T14:44:29Z INFO [openvpn] SIGUSR1[soft,auth-failure] received, process restarting
2024-03-02T14:44:39Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]190.2.132.139:1194
2024-03-02T14:44:39Z INFO [openvpn] UDP link local: (not bound)
2024-03-02T14:44:39Z INFO [openvpn] UDP link remote: [AF_INET]190.2.132.139:1194
2024-03-02T14:44:40Z WARN [openvpn] 'link-mtu' is used inconsistently, local='link-mtu 1633', remote='link-mtu 1634'
2024-03-02T14:44:40Z WARN [openvpn] 'tun-mtu' is used inconsistently, local='tun-mtu 1532', remote='tun-mtu 1500'
2024-03-02T14:44:40Z WARN [openvpn] 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
2024-03-02T14:44:40Z INFO [openvpn] [node-nl-28.protonvpn.net] Peer Connection Initiated with [AF_INET]190.2.132.139:1194
2024-03-02T14:44:47Z ERROR [openvpn] AUTH: Received control message: AUTH_FAILED
Your credentials might be wrong 🤨
2024-03-02T14:44:47Z INFO [openvpn] SIGUSR1[soft,auth-failure] received, process restarting
2024-03-02T14:44:52Z INFO [healthcheck] program has been unhealthy for 31s: restarting VPN
2024-03-02T14:44:52Z INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md
2024-03-02T14:44:52Z INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION
2024-03-02T14:44:52Z INFO [vpn] stopping
2024-03-02T14:44:52Z INFO [vpn] starting
2024-03-02T14:44:52Z INFO [firewall] allowing VPN connection...
2024-03-02T14:44:52Z INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov 2 2022
2024-03-02T14:44:52Z INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2024-03-02T14:44:52Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]192.40.57.231:1194
2024-03-02T14:44:52Z INFO [openvpn] UDP link local: (not bound)
2024-03-02T14:44:52Z INFO [openvpn] UDP link remote: [AF_INET]192.40.57.231:1194
2024-03-02T14:45:28Z INFO [healthcheck] program has been unhealthy for 36s: restarting VPN
2024-03-02T14:45:28Z INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md
2024-03-02T14:45:28Z INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION
2024-03-02T14:45:28Z INFO [vpn] stopping
2024-03-02T14:45:28Z INFO [vpn] starting
2024-03-02T14:45:28Z INFO [firewall] allowing VPN connection...
2024-03-02T14:45:28Z INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov 2 2022
2024-03-02T14:45:28Z INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2024-03-02T14:45:28Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]185.177.124.84:1194
2024-03-02T14:45:28Z INFO [openvpn] UDP link local: (not bound)
2024-03-02T14:45:28Z INFO [openvpn] UDP link remote: [AF_INET]185.177.124.84:1194
2024-03-02T14:45:29Z WARN [openvpn] 'link-mtu' is used inconsistently, local='link-mtu 1633', remote='link-mtu 1634'
2024-03-02T14:45:29Z WARN [openvpn] 'tun-mtu' is used inconsistently, local='tun-mtu 1532', remote='tun-mtu 1500'
2024-03-02T14:45:29Z WARN [openvpn] 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
2024-03-02T14:45:29Z INFO [openvpn] [node-nl-108.protonvpn.net] Peer Connection Initiated with [AF_INET]185.177.124.84:1194
2024-03-02T14:45:30Z INFO [openvpn] setsockopt TCP_NODELAY=1 failed
2024-03-02T14:45:30Z INFO [openvpn] TUN/TAP device tun0 opened
2024-03-02T14:45:30Z INFO [openvpn] /sbin/ip link set dev tun0 up mtu 1500
2024-03-02T14:45:30Z INFO [openvpn] /sbin/ip link set dev tun0 up
2024-03-02T14:45:30Z INFO [openvpn] /sbin/ip addr add dev tun0 10.24.0.15/16
2024-03-02T14:45:30Z INFO [openvpn] UID set to nonrootuser
2024-03-02T14:45:30Z INFO [openvpn] Initialization Sequence Completed
2024-03-02T14:45:30Z INFO [dns] downloading DNS over TLS cryptographic files
2024-03-02T14:45:31Z INFO [healthcheck] healthy!
2024-03-02T14:45:35Z INFO [dns] downloading hostnames and IP block lists
2024-03-02T14:45:45Z INFO [dns] init module 0: validator
2024-03-02T14:45:45Z INFO [dns] init module 1: iterator
2024-03-02T14:45:45Z INFO [dns] start of service (unbound 1.19.1).
2024-03-02T14:45:46Z INFO [dns] generate keytag query _ta-4a5c-4f66. NULL IN
2024-03-02T14:45:46Z INFO [dns] generate keytag query _ta-4a5c-4f66. NULL IN
2024-03-02T14:45:48Z INFO [dns] ready
2024-03-02T14:45:48Z INFO [healthcheck] healthy!
2024-03-02T14:45:50Z INFO [vpn] You are running 1 commit behind the most recent latest
2024-03-02T14:45:50Z INFO [ip getter] Public IP address is 185.177.124.97 (Netherlands, South Holland, Naaldwijk)

Here is my docker-compose.yml

version: '3'

services:
gluetun:
image: qmcgaw/gluetun
container_name: gluetun
restart: always
cap_add:
- NET_ADMIN
environment:
- VPN_SERVICE_PROVIDER=protonvpn
- OPENVPN_USER=xxxxxxxx
- OPENVPN_PASSWORD=xxxxxxxxxx
- SERVER_COUNTRIES=Netherlands
#- PORT=443
#- PORT=1194
volumes:
- ./config:/gluetun
ports:
- 9117:9117
- 9696:9696
- 8191:8191

Since it connected at 3rd attempt, the issue isn't with my credentials.

I also have to restart every other container that depends on this so it they connect successfully.

PureVPN WireGuard

Hello I like your project.
So firstly thank you !
I don't know if its better to create "issue" or trying to find answer elsewhere, I hope I am not going something I shouldn't ?

I am github, dockerhub and docker enthusiast but beginner ... :(

The project seems very complete but I am missing some information PureVPN WireGuard is "straight forward" on my host !
All I have to do is :
sudo wg-quick up wg0
And one sec later I am connected.
Of course I had to insert their conf file on my host :
sudo nano /etc/wireguard/wg0.conf
Which is a this moment

[Interface]
PrivateKey=**_myprivatekey_**
Address=**_theserveripaddr_**
DNS=9.9.9.9,1.1.1.1
[Peer]
PublicKey=**_mypublickey_**
AllowedIPs=0.0.0.0/0
Endpoint=sx**_SERVERNAME_**-wg.pointtoserver.com:51820
PersistentKeepalive=21

So when I have run

sudo docker run -it \ 
--rm \
--cap-add=NET_ADMIN \
-e VPN_SERVICE_PROVIDER=purevpn \
-v /Docker/gluetun/wg0.conf:/gluetun/wireguard/wg0.conf \
-v gluetunvpn_data:/data \
-e SERVER_COUNTRIES=**_Mine_** \
qmcgaw/gluetun:latest

It asks me the parameters but in the documentation I have read that I only needed a conf file mounted to /gluetun/wireguard/wg0.conf.
ERROR reading from files: provider: server selection: wireguard: parsing peer section: endpoint host is not an IP: ParseAddr("sx**_SERVERNAME_**-wg.pointtoserver.com"): unexpected character (at "sx**_SERVERNAME_**-wg.pointtoserver.com")
Where is my mistake ?
By the way its not a problem for me to give the variables ...
Thanks again :)

Edit1 : if i give the variables :

-e WIREGUARD_PRIVATE_KEY=prikey \
-e WIREGUARD_ADDRESSES=ipaddr \
-e WIREGUARD_PUBLIC_KEY=pubkey \

ERROR reading from environment variables: wireguard: environment variable WIREGUARD_ADDRESSES: netip.ParsePrefix("**_X.X.X.X_**"): no '/'

So welcome to edit2 I guess ...

Edit2 : didnt see the container is waiting the CIDR for the variable "WIREGUARD_ADDRESSES" the so I added the /32
Edit3 : the container doesn't resolve the endpoint address which is sxXXXXXXX-wg.pointtoserver.com as an IP address so I pinged it and it returned an IP which I used to replace the "VPN_ENDPOINT_IP".
Edit 4 : Now the container starts but can't establish connection to PureVPN

Error (I only have modified X.X.X.X:51820 and Y.Y.Y.Y:44550) :

2023-08-24T06:34:35+02:00 INFO [routing] default route found: interface eth0, gateway 172.17.0.1, assigned IP 172.17.0.3 and family v4
2023-08-24T06:34:35+02:00 INFO [routing] adding route for 0.0.0.0/0
2023-08-24T06:34:35+02:00 INFO [firewall] setting allowed subnets...
2023-08-24T06:34:35+02:00 INFO [routing] default route found: interface eth0, gateway 172.17.0.1, assigned IP 172.17.0.3 and family v4
2023-08-24T06:34:35+02:00 INFO TUN device is not available: open /dev/net/tun: no such file or directory; creating it...
2023-08-24T06:34:35+02:00 INFO [dns] using plaintext DNS at address 1.1.1.1
2023-08-24T06:34:35+02:00 INFO [http server] http server listening on [::]:8000
2023-08-24T06:34:35+02:00 INFO [firewall] allowing VPN connection...
2023-08-24T06:34:35+02:00 INFO [healthcheck] listening on 127.0.0.1:9999
2023-08-24T06:34:35+02:00 INFO [wireguard] Using userspace implementation since Kernel support does not exist
2023-08-24T06:34:35+02:00 INFO [wireguard] Connecting to **_X.X.X.X_**:51820
2023-08-24T06:34:35+02:00 INFO [wireguard] Wireguard setup is complete. Note Wireguard is a silent protocol and it may or may not work, without giving any error message. Typically i/o timeout errors indicate the Wireguard connection is not working.
2023-08-24T06:34:35+02:00 INFO [dns] downloading DNS over TLS cryptographic files
2023-08-24T06:34:43+02:00 INFO [healthcheck] program has been unhealthy for 6s: restarting VPN (see https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md)
2023-08-24T06:34:43+02:00 INFO [vpn] stopping
2023-08-24T06:34:43+02:00 ERROR [vpn] cannot get version information: Get "https://api.github.com/repos/qdm12/gluetun/commits": context canceled
2023-08-24T06:34:43+02:00 INFO [vpn] starting
2023-08-24T06:34:43+02:00 INFO [firewall] allowing VPN connection...
2023-08-24T06:34:43+02:00 INFO [wireguard] Using available kernelspace implementation
2023-08-24T06:34:43+02:00 INFO [wireguard] Connecting to _**_X.X.X.X_**:51820_
2023-08-24T06:34:43+02:00 INFO [wireguard] Wireguard setup is complete. Note Wireguard is a silent protocol and it may or may not work, without giving any error message. Typically i/o timeout errors indicate the Wireguard connection is not working.
2023-08-24T06:34:45+02:00 WARN [dns] cannot update files: Get "https://www.internic.net/domain/named.root": dial tcp: lookup www.internic.net on 1.1.1.1:53: read udp **Y.Y.Y.Y**:44550->1.1.1.1:53: i/o timeout
2023-08-24T06:34:45+02:00 INFO [dns] attempting restart in 10s
2023-08-24T06:34:54+02:00 INFO [healthcheck] program has been unhealthy for 11s: restarting VPN (see https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md)
2023-08-24T06:34:54+02:00 INFO [vpn] stopping

There is the complete Docker Run :

docker run -it \ 
--cap-add=NET_ADMIN \
--rm \
--cap-add=NET_ADMIN \
-v gluetunvpn_data:/data \
-e TZ=Europe/**_MyCountry_** \
-e VPN_SERVICE_PROVIDER=custom -e VPN_TYPE=wireguard \
-e VPN_ENDPOINT_IP=**_Y.Y.Y.Y_** \
-e VPN_ENDPOINT_PORT=51820 \
-e WIREGUARD_PUBLIC_KEY= **_mypublickey_** \
-e WIREGUARD_PRIVATE_KEY= **_myprivatekey_** \
-e WIREGUARD_ADDRESSES=**_"X.X.X.X/32"_** \
qmcgaw/gluetun

Nordvpn - Obtain your Wireguard private key via docker no longer work

URL to the Wiki page

https://github.com/qdm12/gluetun-wiki/blob/main/setup/providers/nordvpn.md#obtain-your-wireguard-private-key

What's incorrect?

Nordvpn - Obtain your Wireguard private key via docker no longer work
https://github.com/qdm12/gluetun-wiki/blob/main/setup/providers/nordvpn.md#obtain-your-wireguard-private-key
If you need TOKEN to test it, please let me know, I am happy to help.

docker run --rm --cap-add=NET_ADMIN
-e TOKEN='e9fxxxxx' ghcr.io/bubuntux/nordlynx:get_private_key
Waiting for daemon to start up...
A new version of NordVPN is available! Please update the application.
Welcome to NordVPN! You can now connect to VPN by using 'nordvpn connect'.
A new version of NordVPN is available! Please update the application.
Technology is already set to 'NORDLYNX'.
A new version of NordVPN is available! Please update the application.
Connecting to Singapore #514 (sg514.nordvpn.com)
Whoops! Connection failed. Please try again. If the problem persists, contact our customer support.
############################################################
Device "nordlynx" does not exist.
IP:
Unable to access interface: No such device
Private Key:
＼(＾O＾)／
############################################################

Https

Forgive my ignorance - is there some reason why Https wouldn't be supported for the proxy options?

ping within the gluetun network stack

Should i be able to ping around the various containers under the network stack for all the service/containers in the same docker compose file.

eg if I have the sonarr service running under gluetun in the same docker-compose file should I be able to perform:

docker exec -it gluetun ping sonarr

and get a result?

all I get right now is "ping: bad address 'sonarr'"

PIA Port Forwarding

When I set the env variable:
VPN_PORT_FORWARDING = on

I get this error in the Gluetun logs:
INFO [port forwarding] port forwarded is 0

Is there any way to fix that issue? I noticed PIA has this scripts available for port forwarding:
https://helpdesk.privateinternetaccess.com/kb/articles/manual-connection-and-port-forwarding-scripts-for-linux

Thank you,

Feature requests: astrill vpn + shadowsocks client

Hello,
I just have seen your project and I really like it. I'm just wondering if it is possible to add a config for astrill Vpn.
I'm also running a shadowsocksr server and I would like to ask if it might be possible to connect from my unraid to this serve
Means can I use your project as an client as well. I just checked and for the Shadowsocks client, I'm using on my phone there are are several additional "fields" to fill in such a serve, remote port, local port encrypt method and protocol to connect to thia server. I believe you can see from my message I live in a country with a famous "wall".
Thank you

Canada Servers for IVPN has been renamed.

Hi,

IVPN seems to be switching the naming of their servers for Toronto.

https://www.ivpn.net/status/

2024-03-18T11:49:35-04:00 INFO [storage] merging by most recent 17820 hardcoded servers and 17820 servers read from /gluetun/servers.json
2024-03-18T11:49:35-04:00 ERROR VPN settings: provider settings: server selection: for VPN service provider ivpn: the hostname specified is not valid: value is not one of the possible choices: value ca-on1.wg.ivpn.net, choices available are at1.gw.ivpn.net, at1.wg.ivpn.net, au-nsw1.gw.ivpn.net, au-nsw1.wg.ivpn.net, au-nsw2.gw.ivpn.net, au-nsw2.wg.ivpn.net, be1.gw.ivpn.net, be1.wg.ivpn.net, bg1.gw.ivpn.net, bg1.wg.ivpn.net, br1.gw.ivpn.net, br1.wg.ivpn.net, ca-qc1.gw.ivpn.net, ca-qc1.wg.ivpn.net, ca01.wg.ivpn.net, ca1.gw.ivpn.net, ca1.wg.ivpn.net, ca2.gw.ivpn.net, ca2.wg.ivpn.net, ch01.wg.ivpn.net, ch1.gw.ivpn.net, ch1.wg.ivpn.net, ch3.gw.ivpn.net, ch3.wg.ivpn.net, cz1.gw.ivpn.net, cz1.wg.ivpn.net, de01.wg.ivpn.net, de1.gw.ivpn.net, de1.wg.ivpn.net, de2.gw.ivpn.net, de2.wg.ivpn.net, dk1.gw.ivpn.net, dk1.wg.ivpn.net, es1.gw.ivpn.net, es1.wg.ivpn.net, fi1.gw.ivpn.net, fi1.wg.ivpn.net, fr1.gw.ivpn.net, fr1.wg.ivpn.net, gb-man1.gw.ivpn.net, gb-man1.wg.ivpn.net, gb01.wg.ivpn.net, gb1.gw.ivpn.net, gb1.wg.ivpn.net, gb2.gw.ivpn.net, gb2.wg.ivpn.net, hk1.gw.ivpn.net, hk1.wg.ivpn.net, hk2.gw.ivpn.net, hk2.wg.ivpn.net, hk3.gw.ivpn.net, hk3.wg.ivpn.net, hu1.gw.ivpn.net, hu1.wg.ivpn.net, il1.gw.ivpn.net, il1.wg.ivpn.net, is1.gw.ivpn.net, is1.wg.ivpn.net, it01.wg.ivpn.net, it1.gw.ivpn.net, it1.wg.ivpn.net, jp1.gw.ivpn.net, jp1.wg.ivpn.net, jp2.gw.ivpn.net, jp2.wg.ivpn.net, lu1.gw.ivpn.net, lu1.wg.ivpn.net, my1.gw.ivpn.net, my1.wg.ivpn.net, nl1.wg.ivpn.net, nl3.gw.ivpn.net, nl3.wg.ivpn.net, nl4.gw.ivpn.net, nl4.wg.ivpn.net, nl5.gw.ivpn.net, nl5.wg.ivpn.net, nl6.gw.ivpn.net, nl6.wg.ivpn.net, nl7.gw.ivpn.net, nl7.wg.ivpn.net, nl8.gw.ivpn.net, nl8.wg.ivpn.net, no1.gw.ivpn.net, no1.wg.ivpn.net, pl1.gw.ivpn.net, pl1.wg.ivpn.net, pt1.gw.ivpn.net, pt1.wg.ivpn.net, ro1.gw.ivpn.net, ro1.wg.ivpn.net, rs1.gw.ivpn.net, rs1.wg.ivpn.net, se01.wg.ivpn.net, se1.gw.ivpn.net, se1.wg.ivpn.net, sg01.wg.ivpn.net, sg1.gw.ivpn.net, sg1.wg.ivpn.net, sk1.gw.ivpn.net, sk1.wg.ivpn.net, tw1.gw.ivpn.net, tw1.wg.ivpn.net, ua1.gw.ivpn.net, ua1.wg.ivpn.net, us-az1.gw.ivpn.net, us-az1.wg.ivpn.net, us-ca01.wg.ivpn.net, us-ca1.gw.ivpn.net, us-ca1.wg.ivpn.net, us-ca2.gw.ivpn.net, us-ca2.wg.ivpn.net, us-ca3.gw.ivpn.net, us-ca3.wg.ivpn.net, us-ca4.gw.ivpn.net, us-ca4.wg.ivpn.net, us-fl1.gw.ivpn.net, us-fl1.wg.ivpn.net, us-ga01.wg.ivpn.net, us-ga1.gw.ivpn.net, us-ga1.wg.ivpn.net, us-ga2.gw.ivpn.net, us-ga2.wg.ivpn.net, us-il01.wg.ivpn.net, us-il1.gw.ivpn.net, us-il1.wg.ivpn.net, us-il2.gw.ivpn.net, us-il2.wg.ivpn.net, us-nj3.gw.ivpn.net, us-nj3.wg.ivpn.net, us-nj4.gw.ivpn.net, us-nj4.wg.ivpn.net, us-nv1.gw.ivpn.net, us-nv1.wg.ivpn.net, us-ny1.wg.ivpn.net, us-ny2.gw.ivpn.net, us-ny2.wg.ivpn.net, us-ny3.gw.ivpn.net, us-ny3.wg.ivpn.net, us-tx01.wg.ivpn.net, us-tx1.gw.ivpn.net, us-tx1.wg.ivpn.net, us-tx2.gw.ivpn.net, us-tx2.wg.ivpn.net, us-ut1.gw.ivpn.net, us-ut1.wg.ivpn.net, us-va1.gw.ivpn.net, us-va1.wg.ivpn.net, us-wa2.gw.ivpn.net, us-wa2.wg.ivpn.net

Prowlarr cannot connect to Radarr/Sonarr when behind gluetun

Today I was connecting Radarr/Sonarr to Prowlarr, which is using gluetun, and it wouldn't work. So I tried running Prowlarr in a compose file with no connection to gluetun, and it connected just fine. I am on the latest release of all images.

P.S. I am relatively new to this stuff, so the less complicated the solution, the better.

Thanks

NordVPN WireGuard: ERROR VPN settings: Wireguard settings: private key is not valid: wgtypes: incorrect key size: 48

Hi@all,

today I was trying to start my previously working NordVPN WireGuard setup, but I now get this error:
ERROR VPN settings: Wireguard settings: private key is not valid: wgtypes: incorrect key size: 48

I created a new access token on NordVPN’s website but the problem persists.
Seems like someone at NordVPN felt the need to mess with the WireGuard configuration again...

Any ideas how to regain compatibility?

Cheers 🤙

Access network applications from gluetun

Help me figure it out. I have an application running through gluetun. I can't access it on 192.168.1.100:3333.
But the application running in gluetun cannot access other applications (for example, for data synchronization) at subnet addresses 192.168.1.100
What can be configured in the gluetun configuration so that applications have connectivity between all subnets?

Your credentials might be wrong with protonVPN

URL to the Wiki page

https://github.com/qdm12/gluetun-wiki/blob/main/setup/providers/protonvpn.md

What's misleading?

I follow the wiki on how to implement the protonVPN into gluetun. After the container starts running it gets me the error message ERROR [openvpn] AUTH: Received control message: AUTH_FAILED. can someone help me? I attach below my docker-compose.yml

version: "3"
services:
  gluetun:
    image: qmcgaw/gluetun
    cap_add:
      - NET_ADMIN
    environment:
      - VPN_SERVICE_PROVIDER=protonvpn
      - OPENVPN_USER='username_from_protonvpn_account'
      - OPENVPN_PASSWORD='password_from_protonvpn_account'
      - SERVER_COUNTRIES=Netherlands

How to run multiple gluetun instances ?

URL to the Wiki page

https://github.com/qdm12/gluetun-wiki/blob/main/setup/advanced/multiple-gluetun.md

What's missing?

In this doc, it says that we can run a shared DNS server for multiple gluetun instances. However, I am unable to find out how to point these instances to that server.

Possible to configure port forwarding for custom VPN setup?

Hi, I'm one of those guys who uses a custom Open VPN setup. I'm running a gluetun and a qbittorrent docker containers. Qbittorrent container uses gluetun container for network. One of the private torrent trackers I use requires its users to use a specific range of ports. And so I configured port forwarding on my VPS and added a custom listening port in qbittorrent, however, I couldn't find any info on setting up port forwarding in a gluetun container. I saw the settings only for PIA and Proton.
So I was wondering, is it possible to set up a port forwarding in my case?

Auth_FAIL | NordVPN - OpenVPN

sorry i noticed that i have created this issue in wrong repo. I will create another one there.
###################################
Hi there,
I've noticed that over the past few months, other people have experienced the same issue. It seems to be related to NordVPN, possibly due to changes in encrypted passwords. However in my case I jus copied and paste the username and password from my account and I am sure that they're valid.

I am using gluetun as a service my downloader compose like this:

gluetun:
  container_name: gluetun
  image: qmcgaw/gluetun:latest
  cap_add:
    - NET_ADMIN
  ports:
    - 6880:6880 #aria-ng
    - 6800:6800 #aria2pro
    - 6888:6888 #aria2pro
    - 6888:6888/udp #aria2pro
  environment:
    - VPN_SERVICE_PROVIDER=nordvpn
    - OPENVPN_USER=valid-username
    - OPENVPN_PASSWORD=valid-password
    - SERVER_COUNTRIES=Austria,Germany,Netherlands
    - TZ=Europe/Berlin
  restart: unless-stopped 

and here are my logs:

2023-12-01T19:47:35+01:00 INFO [openvpn] SIGUSR1[soft,auth-failure] received, process restarting
2023-12-01T19:47:45+01:00 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]37.19.195.208:1194
2023-12-01T19:47:45+01:00 INFO [openvpn] UDP link local: (not bound)
2023-12-01T19:47:45+01:00 INFO [openvpn] UDP link remote: [AF_INET]37.19.195.208:1194
2023-12-01T19:48:02+01:00 INFO [healthcheck] program has been unhealthy for 31s: restarting VPN (see https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md)
2023-12-01T19:48:02+01:00 INFO [vpn] stopping
2023-12-01T19:48:02+01:00 INFO [vpn] starting
2023-12-01T19:48:02+01:00 INFO [firewall] allowing VPN connection...
2023-12-01T19:48:02+01:00 INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov  2 2022
2023-12-01T19:48:02+01:00 INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2023-12-01T19:48:02+01:00 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]5.253.207.195:1194
2023-12-01T19:48:02+01:00 INFO [openvpn] UDP link local: (not bound)
2023-12-01T19:48:02+01:00 INFO [openvpn] UDP link remote: [AF_INET]5.253.207.195:1194
2023-12-01T19:48:05+01:00 INFO [openvpn] TLS Error: Unroutable control packet received from [AF_INET]5.253.207.195:1194 (si=3 op=P_ACK_V1)
2023-12-01T19:48:05+01:00 INFO [openvpn] [at108.nordvpn.com] Peer Connection Initiated with [AF_INET]5.253.207.195:1194
2023-12-01T19:48:06+01:00 ERROR [openvpn] AUTH: Received control message: AUTH_FAILED
Your credentials might be wrong 🤨
2023-12-01T19:48:06+01:00 INFO [openvpn] SIGUSR1[soft,auth-failure] received, process restarting
2023-12-01T19:48:16+01:00 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]5.253.207.195:1194
2023-12-01T19:48:16+01:00 INFO [openvpn] UDP link local: (not bound)
2023-12-01T19:48:16+01:00 INFO [openvpn] UDP link remote: [AF_INET]5.253.207.195:1194
2023-12-01T19:48:39+01:00 INFO [healthcheck] program has been unhealthy for 36s: restarting VPN (see https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md)
2023-12-01T19:48:39+01:00 INFO [vpn] stopping
2023-12-01T19:48:39+01:00 INFO [vpn] starting
2023-12-01T19:48:39+01:00 INFO [firewall] allowing VPN connection...
2023-12-01T19:48:39+01:00 INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov  2 2022
2023-12-01T19:48:39+01:00 INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2023-12-01T19:48:39+01:00 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]185.196.22.2:1194
2023-12-01T19:48:39+01:00 INFO [openvpn] UDP link local: (not bound)
2023-12-01T19:48:39+01:00 INFO [openvpn] UDP link remote: [AF_INET]185.196.22.2:1194
2023-12-01T19:48:39+01:00 INFO [openvpn] [de1028.nordvpn.com] Peer Connection Initiated with [AF_INET]185.196.22.2:1194
2023-12-01T19:48:45+01:00 ERROR [openvpn] AUTH: Received control message: AUTH_FAILED
Your credentials might be wrong 🤨
2023-12-01T19:48:45+01:00 INFO [openvpn] SIGUSR1[soft,auth-failure] received, process restarting
2023-12-01T19:48:55+01:00 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]185.196.22.2:1194
2023-12-01T19:48:55+01:00 INFO [openvpn] UDP link local: (not bound)
2023-12-01T19:48:55+01:00 INFO [openvpn] UDP link remote: [AF_INET]185.196.22.2:1194
2023-12-01T19:49:01+01:00 INFO [openvpn] [de1028.nordvpn.com] Peer Connection Initiated with [AF_INET]185.196.22.2:1194
2023-12-01T19:49:02+01:00 ERROR [openvpn] AUTH: Received control message: AUTH_FAILED
Your credentials might be wrong 🤨
2023-12-01T19:49:02+01:00 INFO [openvpn] SIGUSR1[soft,auth-failure] received, process restarting
2023-12-01T19:49:12+01:00 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]185.196.22.2:1194
2023-12-01T19:49:12+01:00 INFO [openvpn] UDP link local: (not bound)
2023-12-01T19:49:12+01:00 INFO [openvpn] UDP link remote: [AF_INET]185.196.22.2:1194
2023-12-01T19:49:20+01:00 INFO [healthcheck] program has been unhealthy for 41s: restarting VPN (see https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md)
2023-12-01T19:49:20+01:00 INFO [vpn] stopping
2023-12-01T19:49:20+01:00 INFO [vpn] starting
2023-12-01T19:49:20+01:00 INFO [firewall] allowing VPN connection...
2023-12-01T19:49:20+01:00 INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov  2 2022
2023-12-01T19:49:20+01:00 INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2023-12-01T19:49:20+01:00 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]37.19.195.12:1194
2023-12-01T19:49:20+01:00 INFO [openvpn] UDP link local: (not bound)
2023-12-01T19:49:20+01:00 INFO [openvpn] UDP link remote: [AF_INET]37.19.195.12:1194
2023-12-01T19:49:26+01:00 INFO [openvpn] TLS Error: Unroutable control packet received from [AF_INET]37.19.195.12:1194 (si=3 op=P_ACK_V1)
2023-12-01T19:49:27+01:00 INFO [openvpn] [at124.nordvpn.com] Peer Connection Initiated with [AF_INET]37.19.195.12:1194
2023-12-01T19:49:28+01:00 INFO [openvpn] TUN/TAP device tun0 opened
2023-12-01T19:49:28+01:00 INFO [openvpn] /sbin/ip link set dev tun0 up mtu 1500
2023-12-01T19:49:28+01:00 INFO [openvpn] /sbin/ip link set dev tun0 up
2023-12-01T19:49:28+01:00 INFO [openvpn] /sbin/ip addr add dev tun0 10.8.3.5/24
2023-12-01T19:49:28+01:00 INFO [openvpn] UID set to nonrootuser
2023-12-01T19:49:28+01:00 INFO [openvpn] Initialization Sequence Completed
2023-12-01T19:49:28+01:00 INFO [healthcheck] healthy!
2023-12-01T19:49:28+01:00 INFO [ip getter] Public IP address is 212.103.60.120 (Austria, Vienna, Vienna)
2023-12-01T19:49:41+01:00 INFO [healthcheck] unhealthy: dialing: dial tcp4: lookup cloudflare.com: i/o timeout
2023-12-01T19:49:49+01:00 INFO [healthcheck] program has been unhealthy for 6s: restarting VPN (see https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md)
2023-12-01T19:49:49+01:00 INFO [vpn] stopping
2023-12-01T19:49:49+01:00 INFO [vpn] starting
2023-12-01T19:49:49+01:00 INFO [firewall] allowing VPN connection...
2023-12-01T19:49:49+01:00 INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov  2 2022
2023-12-01T19:49:49+01:00 INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2023-12-01T19:49:49+01:00 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]5.180.62.48:1194
2023-12-01T19:49:49+01:00 INFO [openvpn] UDP link local: (not bound)
2023-12-01T19:49:49+01:00 INFO [openvpn] UDP link remote: [AF_INET]5.180.62.48:1194
2023-12-01T19:49:51+01:00 INFO [openvpn] [de964.nordvpn.com] Peer Connection Initiated with [AF_INET]5.180.62.48:1194
2023-12-01T19:49:52+01:00 ERROR [openvpn] AUTH: Received control message: AUTH_FAILED
Your credentials might be wrong 🤨
2023-12-01T19:49:52+01:00 INFO [openvpn] SIGUSR1[soft,auth-failure] received, process restarting
2023-12-01T19:50:00+01:00 INFO [healthcheck] program has been unhealthy for 11s: restarting VPN (see https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md)
2023-12-01T19:50:00+01:00 INFO [vpn] stopping
2023-12-01T19:50:00+01:00 INFO [vpn] starting
2023-12-01T19:50:00+01:00 INFO [firewall] allowing VPN connection...
2023-12-01T19:50:00+01:00 INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov  2 2022
2023-12-01T19:50:00+01:00 INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2023-12-01T19:50:00+01:00 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]5.180.62.176:1194
2023-12-01T19:50:00+01:00 INFO [openvpn] UDP link local: (not bound)
2023-12-01T19:50:00+01:00 INFO [openvpn] UDP link remote: [AF_INET]5.180.62.176:1194

best regards and thank you for your great work.
Shahram

Private Internet Access isn't being recognized by gluetun

Hi all,

This is my first time posting to any Github community, but I think I found a bug and wanted to just report in. I was trying to install qbittorrent-gluetun, and this error kept coming back:

ERROR updater settings: VPN provider name is not valid: value is not one of the possible choices: vpn_service_provider=private internet access must be one of airvpn, cyberghost, expressvpn, fastestvpn, hidemyass, ipvanish, ivpn, mullvad, nordvpn, perfect privacy, privado, private internet access, privatevpn, protonvpn, purevpn, slickvpn, surfshark, torguard, vpnsecure, vpn unlimited, vyprvpn, wevpn or windscribe

You can see that private internet access (PIA) is not valid, but it is also one of the possible choices. Is there a workaround for this, or is there something I'm missing?

Docker Hub image qmcgaw/gluetun:latest

Hello,

After updating to qmcgaw/gluetun:latest - breaks integration with SOCKS5 serjs/go-socks5-proxy

SOCKS5 proxy error. Address: 10.1.8.37:1080. Message: "Connection reset by peer".

qmcgaw/gluetun:latest
DIGEST:sha256:63220ec07e40bdf5fdbfe0a6d39d0468ee25c93bd2b31b0e12005cd230b44b8e

My current compose file, had to switch to
qmcgaw/gluetun:v3
DIGEST:sha256:e15ede3ce007e3f6e3f6532c7d8d6051f4bb0dca4bb3c5edd7aa3316916e9990

for it to work again.

version: "3"
services:
  gluetun:
    image: qmcgaw/gluetun:v3
    container_name: gluetun
    # line above must be uncommented to allow external containers to connect.
    # See https://github.com/qdm12/gluetun-wiki/blob/main/setup/connect-a-container-to-gluetun.md#external-container-to-gluetun
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    ports:
    # Specify ports to access other containers inside glutun network.
      - 8888:8888/tcp # HTTP proxy
    # - 8388:8388/tcp # Shadowsocks
    # - 8388:8388/udp # Shadowsocks
      - 1080:1080 #socks5 proxy
    volumes:
      - glutun_data:/gluetun
    restart: unless-stopped
    environment:
      # See https://github.com/qdm12/gluetun-wiki/tree/main/setup#setup
      # providers https://github.com/qdm12/gluetun/blob/master/internal/constants/providers/providers.go
      - VPN_SERVICE_PROVIDER=${VPN_SERVICE_PROVIDER}
      - VPN_TYPE=${VPN_TYPE}
      # OpenVPN:
      - OPENVPN_USER=${OPENVPN_USER}
      - OPENVPN_PASSWORD=${OPENVPN_PASSWORD}
      # update manually with glutun_update 
      # docker run --rm -v gluton_gluton_data:/gluetun qmcgaw/gluetun update -enduser -providers "private internet access"
      - SERVER_REGIONS=${SERVER_REGIONS}
      # Wireguard:
      # - WIREGUARD_PRIVATE_KEY=wOEI9rqqbDwnN8/Bpp22sVz48T71vJ4fYmFWujulwUU=
      # - WIREGUARD_ADDRESSES=10.64.222.21/32
      # Timezone for accurate log times
      - TZ=${TZ}
      # Server list updater
      # See https://github.com/qdm12/gluetun-wiki/blob/main/setup/servers.md#update-the-vpn-servers-list
      # default is 24h
      - UPDATER_PERIOD=${UPDATER_PERIOD}
      - HTTPPROXY=${HTTPPROXY}
    env_file:
      - stack.env
  socks5:
    image: serjs/go-socks5-proxy:latest
    depends_on:
      - gluetun
    network_mode: "service:gluetun"
    restart: unless-stopped
  #xyz:
  #  image: xyz
  #  container_name: xyz
  #  network_mode: "service:gluetun"
  # Add the following to another docker-compose.yaml 
  #  network_mode: "container:gluetun"

volumes:
  glutun_data:

I didn't have more time to review this repo to blame anything yet.

Where to get privatekey & publickey for custom Wireguard connections from?

Hi there,

I can't seem to find any info about how to generate publickey and privatekey. Would I have to do so outside docker / gluetun?

Cannot get setup

I have Ivacy VPN and I just cannot figure out how to set up Gluetun with it. I'm using docker-compose in Portainer in a linux container in proxmox.

My closest attempt seemed to be with Wireguard but the resulting container is reported as Unhealthy in Portainer due to many errors which look like
ERROR [ip getter] Get "https://ipinfo.io/": context deadline exceeded (Client.Timeout exceeded while awaiting headers) - retrying in 40s
when I try to map to a wg0.conf. When I try to just use env vars I get these
ERROR [vpn] cannot get version information: Get "https://api.github.com/repos/qdm12/gluetun/commits": context canceled ERROR [ip getter] Get "https://ipinfo.io/": dial tcp: lookup ipinfo.io on 1.1.1.1:53: write udp 172.28.0.9:38576->1.1.1.1:53: write: operation not permitted - retrying in 5s

I've also tried using openvpn but I get failures when I try to resolve the domain name to an ipaddress.

Any help is appreciated, thanks.

Any way to add manual DNS?

URL to the Wiki page

https://github.com/qdm12/gluetun-wiki/blob/main/setup/options/wireguard.md

What's missing?

No way to add manual DNS for use other DNS

Thanks Nico

Unraid Nordvpn wireguard error

Hello,

I've set everything for gluetun to use wireguard but I am getting this error and I do not understand it, could someone please help.

ERROR VPN settings: provider settings: server selection: Wireguard server selection settings: endpoint port is set

Gluetun container unhealthy NordVPN

Hi,

I have looked up this issue as best I could but I kept finding unrelated topics. Basically I have unraid and have tried setting up the gluetun container under wireguard for Nord. I followed the instructions of inputting the IP I receive from Nord on my Ubuntu VM into the assigned field. I got my private and shared key from there as well. I believe I have everything set up the way it should be. But if you can see anything in my config that is not properly set up, please let me know. I have attached the logs. Below is the error I'm receiving over and over. I of course tried the website it gives me, but did not solve my problem.

_GluetunVPN_logs(1).txt

2024-03-04T05:17:38-05:00 INFO [wireguard] Wireguard setup is complete. Note Wireguard is a silent protocol and it may or may not work, without giving any error message. Typically i/o timeout errors indicate the Wireguard connection is not working. 2024-03-04T05:17:38-05:00 INFO [dns] downloading DNS over TLS cryptographic files 2024-03-04T05:17:46-05:00 INFO [healthcheck] program has been unhealthy for 6s: restarting VPN 2024-03-04T05:17:46-05:00 INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md 2024-03-04T05:17:46-05:00 INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION 2024-03-04T05:17:46-05:00 INFO [vpn] stopping 2024-03-04T05:17:46-05:00 ERROR [vpn] cannot get version information: Get "https://api.github.com/repos/qdm12/gluetun/commits": context canceled 2024-03-04T05:17:46-05:00 ERROR [ip getter] Get "https://ipinfo.io/": dial tcp: lookup ipinfo.io on 1.1.1.1:53: write udp 172.17.0.9:59207->1.1.1.1:53: write: operation not permitted - retrying in 5s

OPENVPN errors with SlickVPN provider

I have been trying to setup gluetun with slickVPN for a little while and I keep getting errors preventing connection to this provider.

I have read this issue: qdm12/gluetun#961 (comment) but failed to fix my problem which seems a bit different.

2024-02-05T11:02:22-05:00 WARN OpenVPN 2.5 uses OpenSSL 3 which prohibits the usage of weak security in today's standards. slickvpn uses weak security which is out of Gluetun's control so the only workaround is to allow such weaknesses using the OpenVPN option tls-cipher "DEFAULT:@SECLEVEL=0". You might want to reach to your provider so they upgrade their certificates. Once this is done, you will have to let the Gluetun maintainers know by creating an issue, attaching the new certificate and we will update Gluetun.
2024-02-05T11:02:22-05:00 INFO [routing] default route found: interface eth0, gateway 172.19.0.1, assigned IP 172.19.0.2 and family v4
2024-02-05T11:02:22-05:00 INFO [routing] adding route for 0.0.0.0/0
2024-02-05T11:02:22-05:00 INFO [firewall] setting allowed subnets...
2024-02-05T11:02:22-05:00 INFO [routing] default route found: interface eth0, gateway 172.19.0.1, assigned IP 172.19.0.2 and family v4
2024-02-05T11:02:22-05:00 INFO [dns] using plaintext DNS at address 1.1.1.1
2024-02-05T11:02:22-05:00 INFO [http server] http server listening on [::]:8000
2024-02-05T11:02:22-05:00 INFO [healthcheck] listening on 127.0.0.1:9999
2024-02-05T11:02:22-05:00 INFO [firewall] allowing VPN connection...
2024-02-05T11:02:22-05:00 INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov 2 2022
2024-02-05T11:02:22-05:00 INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2024-02-05T11:02:22-05:00 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]67.215.7.10:443
2024-02-05T11:02:22-05:00 INFO [openvpn] UDP link local: (not bound)
2024-02-05T11:02:22-05:00 INFO [openvpn] UDP link remote: [AF_INET]67.215.7.10:443
2024-02-05T11:02:22-05:00 WARN [openvpn] 'link-mtu' is used inconsistently, local='link-mtu 1549', remote='link-mtu 1557'
2024-02-05T11:02:22-05:00 WARN [openvpn] 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA1'
2024-02-05T11:02:22-05:00 INFO [openvpn] [VPN] Peer Connection Initiated with [AF_INET]67.215.7.10:443
2024-02-05T11:02:23-05:00 INFO [openvpn] TUN/TAP device tun0 opened
2024-02-05T11:02:23-05:00 INFO [openvpn] /sbin/ip link set dev tun0 up mtu 1500
2024-02-05T11:02:23-05:00 INFO [openvpn] /sbin/ip link set dev tun0 up
2024-02-05T11:02:23-05:00 INFO [openvpn] /sbin/ip addr add dev tun0 local 10.10.8.10 peer 10.10.8.9
2024-02-05T11:02:23-05:00 INFO [openvpn] UID set to nonrootuser
2024-02-05T11:02:23-05:00 INFO [openvpn] Initialization Sequence Completed
2024-02-05T11:02:23-05:00 INFO [dns] downloading DNS over TLS cryptographic files
2024-02-05T11:02:28-05:00 INFO [healthcheck] program has been unhealthy for 6s: restarting VPN
2024-02-05T11:02:28-05:00 INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md
2024-02-05T11:02:28-05:00 INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION
2024-02-05T11:02:28-05:00 INFO [vpn] stopping
2024-02-05T11:02:28-05:00 ERROR [vpn] cannot get version information: Get "https://api.github.com/repos/qdm12/gluetun/commits": context canceled
2024-02-05T11:02:28-05:00 INFO [vpn] starting
2024-02-05T11:02:28-05:00 INFO [firewall] allowing VPN connection...
2024-02-05T11:02:28-05:00 INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov 2 2022
2024-02-05T11:02:28-05:00 INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2024-02-05T11:02:28-05:00 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]67.215.7.10:443
2024-02-05T11:02:28-05:00 INFO [openvpn] UDP link local: (not bound)
2024-02-05T11:02:28-05:00 INFO [openvpn] UDP link remote: [AF_INET]67.215.7.10:443
2024-02-05T11:02:28-05:00 WARN [openvpn] 'link-mtu' is used inconsistently, local='link-mtu 1549', remote='link-mtu 1557'
2024-02-05T11:02:28-05:00 WARN [openvpn] 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA1'
2024-02-05T11:02:28-05:00 INFO [openvpn] [VPN] Peer Connection Initiated with [AF_INET]67.215.7.10:443
2024-02-05T11:02:28-05:00 WARN [dns] cannot update files: Get "https://www.internic.net/domain/named.root": dial tcp: lookup www.internic.net on 1.1.1.1:53: dial udp 1.1.1.1:53: connect: network is unreachable
2024-02-05T11:02:28-05:00 INFO [dns] attempting restart in 10s
2024-02-05T11:02:30-05:00 INFO [openvpn] TUN/TAP device tun0 opened
2024-02-05T11:02:30-05:00 INFO [openvpn] /sbin/ip link set dev tun0 up mtu 1500
2024-02-05T11:02:30-05:00 INFO [openvpn] /sbin/ip link set dev tun0 up
2024-02-05T11:02:30-05:00 INFO [openvpn] /sbin/ip addr add dev tun0 local 10.10.8.26 peer 10.10.8.25
2024-02-05T11:02:30-05:00 ERROR [openvpn] RTNETLINK answers: No such device
2024-02-05T11:02:30-05:00 WARN [openvpn] Previous error details: Linux route add command failed: external program exited with error status: 2
2024-02-05T11:02:30-05:00 ERROR [openvpn] RTNETLINK answers: No such process
2024-02-05T11:02:30-05:00 ERROR [openvpn] Linux route delete command failed: external program exited with error status: 2
2024-02-05T11:02:30-05:00 INFO [openvpn] UID set to nonrootuser
2024-02-05T11:02:30-05:00 INFO [openvpn] Initialization Sequence Completed
2024-02-05T11:02:38-05:00 INFO [dns] downloading DNS over TLS cryptographic files
2024-02-05T11:02:40-05:00 INFO [openvpn] Authenticate/Decrypt packet error: packet HMAC authentication failed
2024-02-05T11:02:41-05:00 INFO [healthcheck] program has been unhealthy for 11s: restarting VPN
2024-02-05T11:02:41-05:00 INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md
2024-02-05T11:02:41-05:00 INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION
2024-02-05T11:02:41-05:00 INFO [vpn] stopping
2024-02-05T11:02:41-05:00 INFO [vpn] starting
2024-02-05T11:02:41-05:00 INFO [firewall] allowing VPN connection...
2024-02-05T11:02:41-05:00 INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov 2 2022
2024-02-05T11:02:41-05:00 INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2024-02-05T11:02:41-05:00 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]173.209.62.178:443
2024-02-05T11:02:41-05:00 INFO [openvpn] UDP link local: (not bound)
2024-02-05T11:02:41-05:00 INFO [openvpn] UDP link remote: [AF_INET]173.209.62.178:443
2024-02-05T11:02:41-05:00 INFO [openvpn] Network unreachable, restarting
2024-02-05T11:02:41-05:00 INFO [openvpn] SIGUSR1[soft,network-unreachable] received, process restarting
2024-02-05T11:02:43-05:00 ERROR [ip getter] Get "https://ipinfo.io/": context deadline exceeded (Client.Timeout exceeded while awaiting headers) - retrying in 5s
2024-02-05T11:02:43-05:00 WARN [dns] cannot update files: Get "https://www.internic.net/domain/named.root": dial tcp: lookup www.internic.net on 1.1.1.1:53: dial udp 1.1.1.1:53: connect: network is unreachable
2024-02-05T11:02:43-05:00 INFO [dns] attempting restart in 20s
2024-02-05T11:02:48-05:00 ERROR [ip getter] Get "https://ipinfo.io/": dial tcp: lookup ipinfo.io on 1.1.1.1:53: dial udp 1.1.1.1:53: connect: network is unreachable - retrying in 10s

I am not competent enough to pinpoint the source of the problem or to see if the openvpn errors are related or are different issues.

Any help resolving my issues would be greatly appreciated

ERROR [ip getter] and WARN [dns]

I see that others are having the same issue with other VPN's, but it seems I can't get Gluetun past these I/O errors. Also the server list for Surfshark needs to be updated, a few locations have changed names.

2024-03-22T13:31:01-04:00 INFO [vpn] starting
2024-03-22T13:31:01-04:00 INFO [firewall] allowing VPN connection...
2024-03-22T13:31:01-04:00 INFO [wireguard] Using available kernelspace implementation
2024-03-22T13:31:01-04:00 INFO [wireguard] Connecting to 37.19.211.29:51820
2024-03-22T13:31:01-04:00 INFO [wireguard] Wireguard setup is complete. Note Wireguard is a silent protocol and it may or may not work, without giving any error message. Typically i/o timeout errors indicate the Wireguard connection is not working.
2024-03-22T13:31:02-04:00 INFO [dns] downloading DNS over TLS cryptographic files
2024-03-22T13:31:05-04:00 ERROR [ip getter] Get "https://ipinfo.io/": dial tcp: lookup ipinfo.io on 1.1.1.1:53: read udp 10.14.0.2:33315->1.1.1.1:53: i/o timeout - retrying in 10s
2024-03-22T13:31:12-04:00 WARN [dns] cannot update files: Get "https://www.internic.net/domain/named.root": dial tcp: lookup www.internic.net on 1.1.1.1:53: read udp 10.14.0.2:46009->1.1.1.1:53: i/o timeout
2024-03-22T13:31:12-04:00 INFO [dns] attempting restart in 20s
2024-03-22T13:31:17-04:00 INFO [healthcheck] program has been unhealthy for 16s: restarting VPN
2024-03-22T13:31:17-04:00 INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md
2024-03-22T13:31:17-04:00 INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION
2024-03-22T13:31:17-04:00 INFO [vpn] stopping

"You are running 1 commit behind the most recent latest"

No matter how many times i repull the image it always says "You are running 1 commit behind the most recent latest".