Does VPN leak other containers sharing network? #2732
Unanswered
duckduckbee
asked this question in
Q&A
Replies: 1 comment 10 replies
-
I just ran into the same issue (at least if I understand you correctly). I was curious how the killswitch/binding thing works and tried to test it by killing the OpenVPN process and checking my connection afterwards: docker exec transmission curl -sS "https://am.i.mullvad.net/connected"
sudo kill -9 <OpenVPN process id>
docker exec transmission curl -sS "https://am.i.mullvad.net/connected" Rather surprising, my results showed an IP leak:
After some research I found #2626 and the
|
Beta Was this translation helpful? Give feedback.
10 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
I've been curious about how the killswitch works and I've been doing a bit of testing to see it in action. I've been running with a docker compose file similar to the example provided here. I've been monitoring the containers from the host with wireshark to see what happens when the VPN dies. Perhaps the situation I've created is not realistic and isn't how the VPN is expected to fail but I've found when the openvpn process is killed within the container and the tunnel goes down (and container), there's a brief period of time in the jackett container where the network is still accessible but the tunnel is down and traffic is no longer going via VPN. The non tunnel routes still exist temporarily allowing traffic to go out. Is this behaviour expected given the way that it's failed, or is this potentially an issue? Or perhaps this behaviour is directly under the control of docker? I've ran some scenarios with iptables to stop outgoing traffic to the VPN to try and simulate a disconnect and that doesn't have the same issue, but I'm not sure if that's realistic either, if anyone has recommendations on creating a more realistic failure scenario like an actual disconnect I'd like to try it out. Thanks.
Beta Was this translation helpful? Give feedback.
All reactions