Help: Windscribe and Wireguard #624

qdm12 · 2021-09-12T21:27:16Z

qdm12
Sep 12, 2021
Maintainer

From comment posted on #134 by @TheNexter

Log:

<log removed for brevity>
2021/09/12 21:04:55 ERROR vpn: cannot get version information: Get "https://api.github.com/repos/qdm12/gluetun/commits": dial tcp: lookup api.github.com on 1.1.1.1:53: read udp 100.96.45.0:35235->1.1.1.1:53: i/o timeout,
2021/09/12 21:05:01 INFO healthcheck: program has been unhealthy for 6s: restarting VPN,
2021/09/12 21:05:01 INFO vpn: stopping,
2021/09/12 21:05:01 INFO vpn: starting,
2021/09/12 21:05:01 INFO firewall: setting VPN connection through firewall...,
2021/09/12 21:05:01 INFO wireguard: Wireguard is up

Config:

docker run -d \
 --name gluetun \
 --cap-add=NET_ADMIN \
 -e VPNSP="windscribe" \
 -e VPN_TYPE="wireguard" \
 -e WIREGUARD_PRIVATE_KEY="mypersonalkeyisputhere" \
 -e WIREGUARD_ADDRESS="100.96.45.0/32" \
 -e WIREGUARD_PORT="1194" \
 -v /home/ubuntu/Documents/gluetunconfig:/gluetun \
 qmcgaw/gluetun

qdm12 · 2021-09-12T21:28:09Z

qdm12
Sep 12, 2021
Maintainer Author

@TheNexter Can you try running it with -e HEALTH_VPN_DURATION_INITIAL=100s -e LOG_LEVEL=debug and report back what errors you get in the logs?

0 replies

TheNexter · 2021-09-12T21:52:23Z

TheNexter
Sep 12, 2021


   |--Server address: 127.0.0.1:9999,
   |--Address to ping: github.com,
   |--VPN:,
      |--Initial duration: 1m40s,
      |--Addition duration: 5s,
|--HTTP control server:,
   |--Listening port: 8000,
   |--Logging: enabled,
|--Public IP getter:,
   |--Fetch period: 12h0m0s,
   |--IP file: /tmp/gluetun/ip,
|--Github version information: enabled,
2021/09/12 21:51:23 INFO routing: default route found: interface eth0, gateway 172.17.0.1,
2021/09/12 21:51:23 INFO routing: local ethernet link found: eth0,
2021/09/12 21:51:23 INFO routing: local ipnet found: 172.17.0.0/16,
2021/09/12 21:51:23 INFO routing: default route found: interface eth0, gateway 172.17.0.1,
2021/09/12 21:51:23 DEBUG routing: ip rule add from 172.17.0.3/32 lookup 200 pref 100,
2021/09/12 21:51:23 INFO routing: adding route for 0.0.0.0/0,
2021/09/12 21:51:23 DEBUG routing: ip route replace 0.0.0.0/0 via 172.17.0.1 dev eth0 table 200,
2021/09/12 21:51:23 INFO firewall: firewall disabled, only updating allowed subnets internal list,
2021/09/12 21:51:23 INFO routing: default route found: interface eth0, gateway 172.17.0.1,
2021/09/12 21:51:23 INFO TUN device is not available: open /dev/net/tun: no such file or directory; creating it...,
2021/09/12 21:51:23 INFO firewall: enabling...,
2021/09/12 21:51:23 DEBUG firewall: iptables --policy INPUT DROP,
2021/09/12 21:51:23 DEBUG firewall: iptables --policy OUTPUT DROP,
2021/09/12 21:51:23 DEBUG firewall: iptables --policy FORWARD DROP,
2021/09/12 21:51:23 DEBUG firewall: iptables --append INPUT -i lo -j ACCEPT,
2021/09/12 21:51:23 DEBUG firewall: iptables --append OUTPUT -o lo -j ACCEPT,
2021/09/12 21:51:23 DEBUG firewall: iptables --append OUTPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT,
2021/09/12 21:51:23 DEBUG firewall: iptables --append INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT,
2021/09/12 21:51:23 DEBUG firewall: iptables --append OUTPUT -o eth0 -s 172.17.0.3 -d 172.17.0.0/16 -j ACCEPT,
2021/09/12 21:51:23 DEBUG firewall: iptables --append INPUT -i eth0 -d 172.17.0.0/16 -j ACCEPT,
2021/09/12 21:51:23 INFO firewall: enabled successfully,
2021/09/12 21:51:23 INFO healthcheck: listening on 127.0.0.1:9999,
2021/09/12 21:51:23 INFO http server: listening on :8000,
2021/09/12 21:51:23 INFO firewall: setting VPN connection through firewall...,
2021/09/12 21:51:23 DEBUG firewall: iptables --append OUTPUT -d 31.7.57.243 -o eth0 -p udp -m udp --dport 1194 -j ACCEPT,
2021/09/12 21:51:23 INFO dns over tls: using plaintext DNS at address 1.1.1.1,
2021/09/12 21:51:23 DEBUG firewall: iptables --append OUTPUT -o wg0 -j ACCEPT,
2021/09/12 21:51:23 DEBUG wireguard: Routine: decryption worker 1 - started,
2021/09/12 21:51:23 DEBUG wireguard: Routine: handshake worker 1 - started,
2021/09/12 21:51:23 DEBUG wireguard: Routine: encryption worker 2 - started,
2021/09/12 21:51:23 DEBUG wireguard: Routine: decryption worker 2 - started,
2021/09/12 21:51:23 DEBUG wireguard: Routine: handshake worker 2 - started,
2021/09/12 21:51:23 DEBUG wireguard: Routine: TUN reader - started,
2021/09/12 21:51:23 DEBUG wireguard: Routine: event worker - started,
2021/09/12 21:51:23 DEBUG wireguard: Interface up requested,
2021/09/12 21:51:23 DEBUG wireguard: UDP bind has been updated,
2021/09/12 21:51:23 DEBUG wireguard: Interface state was Down, requested Up, now Up,
2021/09/12 21:51:23 DEBUG wireguard: Routine: receive incoming v6 - started,
2021/09/12 21:51:23 DEBUG wireguard: UAPI: Updating private key,
2021/09/12 21:51:23 DEBUG wireguard: Routine: receive incoming v4 - started,
2021/09/12 21:51:23 DEBUG wireguard: UAPI: Updating fwmark,
2021/09/12 21:51:23 DEBUG wireguard: UAPI: Removing all peers,
2021/09/12 21:51:23 DEBUG wireguard: peer(3+eh…SkxQ) - Starting,
2021/09/12 21:51:23 DEBUG wireguard: peer(3+eh…SkxQ) - UAPI: Created,
2021/09/12 21:51:23 DEBUG wireguard: peer(3+eh…SkxQ) - UAPI: Updating endpoint,
2021/09/12 21:51:23 DEBUG wireguard: peer(3+eh…SkxQ) - UAPI: Removing all allowedips,
2021/09/12 21:51:23 DEBUG wireguard: peer(3+eh…SkxQ) - UAPI: Adding allowedip,
2021/09/12 21:51:23 DEBUG wireguard: peer(3+eh…SkxQ) - UAPI: Adding allowedip,
2021/09/12 21:51:23 DEBUG wireguard: peer(3+eh…SkxQ) - Routine: sequential receiver - started,
2021/09/12 21:51:23 DEBUG wireguard: Routine: encryption worker 1 - started,
2021/09/12 21:51:23 DEBUG wireguard: peer(3+eh…SkxQ) - Routine: sequential sender - started,
2021/09/12 21:51:23 DEBUG wireguard: Interface up requested,
2021/09/12 21:51:23 INFO wireguard: Wireguard is up,
2021/09/12 21:51:23 INFO dns over tls: downloading DNS over TLS cryptographic files,
2021/09/12 21:51:23 DEBUG wireguard: peer(3+eh…SkxQ) - Sending handshake initiation,
2021/09/12 21:51:23 DEBUG wireguard: Received invalid response message from 31.7.57.243:1194,
2021/09/12 21:51:28 DEBUG wireguard: peer(3+eh…SkxQ) - Sending handshake initiation,
2021/09/12 21:51:28 DEBUG wireguard: Received invalid response message from 31.7.57.243:1194,
2021/09/12 21:51:33 DEBUG wireguard: peer(3+eh…SkxQ) - Sending handshake initiation,
2021/09/12 21:51:33 DEBUG wireguard: Received invalid response message from 31.7.57.243:1194,
2021/09/12 21:51:38 WARN dns over tls: cannot update files,
2021/09/12 21:51:38 INFO dns over tls: attempting restart in 10s,
2021/09/12 21:51:38 DEBUG wireguard: peer(3+eh…SkxQ) - Sending handshake initiation,
2021/09/12 21:51:38 DEBUG wireguard: Received invalid response message from 31.7.57.243:1194,
2021/09/12 21:51:43 DEBUG wireguard: peer(3+eh…SkxQ) - Sending handshake initiation,
2021/09/12 21:51:43 DEBUG wireguard: Received invalid response message from 31.7.57.243:1194,
2021/09/12 21:51:48 INFO dns over tls: downloading DNS over TLS cryptographic files,
2021/09/12 21:51:48 DEBUG wireguard: peer(3+eh…SkxQ) - Sending handshake initiation,
2021/09/12 21:51:48 ERROR vpn: cannot get version information: Get "https://api.github.com/repos/qdm12/gluetun/commits": dial tcp: lookup api.github.com on 1.1.1.1:53: read udp 100.96.45.0:59590->1.1.1.1:53: i/o timeout,
2021/09/12 21:51:48 DEBUG wireguard: Received invalid response message from 31.7.57.243:1194,
2021/09/12 21:51:53 ERROR ip getter: Get "https://api.ipify.org": context deadline exceeded (Client.Timeout exceeded while awaiting headers),
2021/09/12 21:51:53 INFO ip getter: retrying in 5s,
2021/09/12 21:51:53 DEBUG wireguard: peer(3+eh…SkxQ) - Handshake did not complete after 5 seconds, retrying (try 2),
2021/09/12 21:51:53 DEBUG wireguard: peer(3+eh…SkxQ) - Sending handshake initiation,
2021/09/12 21:51:53 DEBUG wireguard: Received invalid response message from 31.7.57.243:1194,
2021/09/12 21:51:58 WARN dns over tls: cannot update files,
2021/09/12 21:51:58 INFO dns over tls: attempting restart in 20s,
2021/09/12 21:51:58 DEBUG wireguard: peer(3+eh…SkxQ) - Handshake did not complete after 5 seconds, retrying (try 2),
2021/09/12 21:51:58 DEBUG wireguard: peer(3+eh…SkxQ) - Sending handshake initiation,
2021/09/12 21:51:58 DEBUG wireguard: Received invalid response message from 31.7.57.243:1194,
2021/09/12 21:52:03 DEBUG wireguard: peer(3+eh…SkxQ) - Handshake did not complete after 5 seconds, retrying (try 2),
2021/09/12 21:52:03 DEBUG wireguard: peer(3+eh…SkxQ) - Sending handshake initiation,
2021/09/12 21:52:03 DEBUG wireguard: Received invalid response message from 31.7.57.243:1194,
2021/09/12 21:52:08 ERROR ip getter: Get "https://ifconfig.me/ip": dial tcp: lookup ifconfig.me on 1.1.1.1:53: read udp 100.96.45.0:48732->1.1.1.1:53: i/o timeout,
2021/09/12 21:52:08 INFO ip getter: retrying in 5s,
2021/09/12 21:52:09 DEBUG wireguard: peer(3+eh…SkxQ) - Handshake did not complete after 5 seconds, retrying (try 2),
2021/09/12 21:52:09 DEBUG wireguard: peer(3+eh…SkxQ) - Sending handshake initiation,
2021/09/12 21:52:09 DEBUG wireguard: Received invalid response message from 31.7.57.243:1194

0 replies

qdm12 · 2021-09-13T16:14:16Z

qdm12
Sep 13, 2021
Maintainer Author

I see some Received invalid response message from 31.7.57.243:1194 which is odd. I tried your command with some garbage private key and I only get Sending handshake initiation messages without the invalid response messages. As far as I know, you manage to authenticate and there is a Wireguard server responding.

What do you get with uname -a, and also what's your OS?

0 replies

TheNexter · 2021-09-13T17:27:38Z

TheNexter
Sep 13, 2021

I see some Received invalid response message from 31.7.57.243:1194 which is odd. I tried your command with some garbage private key and I only get Sending handshake initiation messages without the invalid response messages. As far as I know, you manage to authenticate and there is a Wireguard server responding.

What do you get with uname -a, and also what's your OS?

Raspberry pi os 64bit

0 replies

qdm12 · 2021-09-13T18:27:34Z

qdm12
Sep 13, 2021
Maintainer Author

Looks like I broke Wireguard in a recent update, I'm investigating. Try with :v3.24.0 for now?

EDIT: never mind my subscription expired LOL! Renewing-it!

0 replies

TheNexter · 2021-09-13T19:18:15Z

TheNexter
Sep 13, 2021

Looks like I broke Wireguard in a recent update, I'm investigating. Try with :v3.24.0 for now?

EDIT: never mind my subscription expired LOL! Renewing-it!

Don't troll me 😂

Same error :)

0 replies

qdm12 · 2021-09-13T20:33:13Z

qdm12
Sep 13, 2021
Maintainer Author

Try with :latest:

docker pull qmcgaw/gluetun

I tried running gluetun with emulation on arm64 and arm/v7 (like your rpi), but it doesn't like the emulation and gluetun fiddling with IP routes so it fails no such process & operation not supported 😢. I was wondering if the Wireguard implementation wouldn't work on arm architectures, but I guess I need to dig out my old raspberry pi from my drawer.

If it still doesn't work with the latest image, try with:

docker run -it --rm --cap-add=NET_ADMIN -e VPNSP=custom -e VPN_TYPE=wireguard \
-e WIREGUARD_ENDPOINT_IP=86.106.143.67 -e WIREGUARD_PORT=1194 \
-e WIREGUARD_PUBLIC_KEY="5FXy0/tMXj/TYKVj9PHJ42lCpbWP4qLAOpLZa6FnsRw="  \
-e WIREGUARD_ADDRESS="11.48.216.37/32" \
-e WIREGUARD_PRIVATE_KEY="OFf8G73HKurisHXAUmrXxU5C0VD50EMn3N9KAbut/1k=" \
qmcgaw/gluetun

Replacing your values in there. If this still does not work, and you can change/revoke your Wireguard keys, feel free to shoot a Wireguard configuration file at [email protected] so I can find the problem faster. No obligation of course though.

0 replies

TheNexter · 2021-09-13T21:55:37Z

TheNexter
Sep 13, 2021

Try with :latest:
docker pull qmcgaw/gluetun
I tried running gluetun with emulation on arm64 and arm/v7 (like your rpi), but it doesn't like the emulation and gluetun fiddling with IP routes so it fails no such process & operation not supported 😢. I was wondering if the Wireguard implementation wouldn't work on arm architectures, but I guess I need to dig out my old raspberry pi from my drawer.

If it still doesn't work with the latest image, try with:
docker run -it --rm --cap-add=NET_ADMIN -e VPNSP=custom -e VPN_TYPE=wireguard \
-e WIREGUARD_ENDPOINT_IP=86.106.143.67 -e WIREGUARD_PORT=1194 \
-e WIREGUARD_PUBLIC_KEY="5FXy0/tMXj/TYKVj9PHJ42lCpbWP4qLAOpLZa6FnsRw="  \
-e WIREGUARD_ADDRESS="11.48.216.37/32" \
-e WIREGUARD_PRIVATE_KEY="OFf8G73HKurisHXAUmrXxU5C0VD50EMn3N9KAbut/1k=" \
qmcgaw/gluetun
Replacing your values in there. If this still does not work, and you can change/revoke your Wireguard keys, feel free to shoot a Wireguard configuration file at [email protected] so I can find the problem faster. No obligation of course though.

Still dont work :(
When i use my file in linuxserver/wireguard it's work amazing :(

0 replies

qdm12 · 2021-09-13T23:01:27Z

qdm12
Sep 13, 2021
Maintainer Author

Still dont work :(

You need to pull the latest image as I mentioned, your image is outdated.

Also the WIREGUARD_ENDPOINT_IP must be an IP address, not a hostname. You can set it to 37.120.213.164 or 185.156.175.180 which I got from resolving zrh-112-wg.whiskergalaxy.com.

0 replies

TheNexter · 2021-09-13T23:16:01Z

TheNexter
Sep 13, 2021

Same with latest :(

0 replies

qdm12 · 2021-09-13T23:36:20Z

qdm12
Sep 13, 2021
Maintainer Author

One last tiny suggestion, maybe it does a difference, try without double quotes around the private and public keys?

I also asked Windscribe users on #134 if it still works for them with the latest image so we can nail down if it's a program bug or a configuration issue.

0 replies

TheNexter · 2021-09-13T23:45:25Z

TheNexter
Sep 13, 2021

Same :(

0 replies

qdm12 · 2021-09-14T14:40:08Z

qdm12
Sep 14, 2021
Maintainer Author

Same with latest :(

Please share your run command you use now (remove private key)
Please share your logs with the latest image

@blckwhtx confirmed it's still working for Windscribe with the latest image, so this is likely a configuration error. See #134 (comment)

0 replies

jathek · 2021-09-15T05:23:04Z

jathek
Sep 15, 2021

fwiw I tested on a Raspberry Pi 3 Model B and the below compose works fine if I disable unbound. With unbound enabled I get the below log.

  gluetun:
    cap_add:
    - NET_ADMIN
    container_name: gluetun
    environment:
      BLOCK_ADS: "off"
      BLOCK_MALICIOUS: "on"
      BLOCK_SURVEILLANCE: "off"
      CITY: Los Angeles
      DNS_UPDATE_PERIOD: '0'
      DOT: "on" <--- switch to "off" to make this work
      HTTPPROXY: "on"
      HTTPPROXY_LOG: "off"
      HTTPPROXY_PASSWORD: $HTTPPROXY_PASSWORD
      HTTPPROXY_PORT: 1080
      HTTPPROXY_STEALTH: "on"
      HTTPPROXY_USERNAME: $HTTPPROXY_USERNAME
      HTTP_CONTROL_SERVER_LOG: "on"
      HTTP_CONTROL_SERVER_PORT: 8000
      PGID: '1000'
      PUBLICIP_FILE: /gluetun/ip
      PUBLICIP_PERIOD: 12h
      PUID: '1000'
      TZ: America/Chicago
      UPDATER_PERIOD: '0'
      VERSION_INFORMATION: "off"
      VPNSP: windscribe
      VPN_TYPE: wireguard
      WIREGUARD_ADDRESS: $WIREGUARD_ADDRESS
      WIREGUARD_PRESHARED_KEY: $WIREGUARD_PRESHARED_KEY
      WIREGUARD_PRIVATE_KEY: $WIREGUARD_PRIVATE_KEY
    image: qmcgaw/gluetun:latest
    ports:
    - 1080:1080/tcp
    restart: unless-stopped
    tmpfs:
    - /tmp
    volumes:
    - /home/root/gluetun:/gluetun:rw

2021-09-15T04:55:48.873563430Z ========================================
2021-09-15T04:55:48.873946553Z ========================================
2021-09-15T04:55:48.874200613Z =============== gluetun ================
2021-09-15T04:55:48.874440559Z ========================================
2021-09-15T04:55:48.874673995Z =========== Made with ❤️ by ============
2021-09-15T04:55:48.874909983Z ======= https://github.com/qdm12 =======
2021-09-15T04:55:48.875154825Z ========================================
2021-09-15T04:55:48.875391907Z ========================================
2021-09-15T04:55:48.875624666Z
2021-09-15T04:55:48.875867528Z Running version latest built on 2021-09-14T19:31:13Z (commit 61677fb)
2021-09-15T04:55:48.876099766Z
2021-09-15T04:55:48.876338098Z 📣 Wireguard is now supported for Mullvad, IVPN and Windscribe!
2021-09-15T04:55:48.876572680Z
2021-09-15T04:55:48.876808928Z 🔧 Need help? https://github.com/qdm12/gluetun/discussions/new
2021-09-15T04:55:48.877042989Z 🐛 Bug? https://github.com/qdm12/gluetun/issues/new
2021-09-15T04:55:48.877277518Z ✨ New feature? https://github.com/qdm12/gluetun/issues/new
2021-09-15T04:55:48.877524756Z ☕ Discussion? https://github.com/qdm12/gluetun/discussions/new
2021-09-15T04:55:48.877759338Z 💻 Email? [email protected]
2021-09-15T04:55:48.877996107Z 💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
2021-09-15T04:55:48.878604644Z 2021/09/14 23:55:48 INFO Alpine version: 3.14.2
2021-09-15T04:55:48.885891728Z 2021/09/14 23:55:48 INFO OpenVPN 2.4 version: 2.4.11
2021-09-15T04:55:48.898827626Z 2021/09/14 23:55:48 INFO OpenVPN 2.5 version: 2.5.2
2021-09-15T04:55:48.905532422Z 2021/09/14 23:55:48 INFO Unbound version: 1.13.2
2021-09-15T04:55:48.908871930Z 2021/09/14 23:55:48 INFO IPtables version: v1.8.7
2021-09-15T04:55:48.909250052Z 2021/09/14 23:55:48 INFO Settings summary below:
2021-09-15T04:55:48.909314583Z |--VPN:
2021-09-15T04:55:48.909345051Z    |--Type: wireguard
2021-09-15T04:55:48.909374270Z    |--Wireguard:
2021-09-15T04:55:48.909403436Z       |--Network interface: wg0
2021-09-15T04:55:48.909432186Z       |--Private key is set
2021-09-15T04:55:48.909460519Z       |--Pre-shared key is set
2021-09-15T04:55:48.909488904Z       |--Addresses:
2021-09-15T04:55:48.909517290Z          |--xxx.xxx.xxx.xxx/32
2021-09-15T04:55:48.909545571Z    |--Windscribe settings:
2021-09-15T04:55:48.909572758Z       |--Cities: los angeles
2021-09-15T04:55:48.909600362Z       |--Wireguard selection:
2021-09-15T04:55:48.909666195Z |--DNS:
2021-09-15T04:55:48.909693903Z    |--Plaintext address: 1.1.1.1
2021-09-15T04:55:48.909722601Z    |--DNS over TLS:
2021-09-15T04:55:48.909749944Z       |--Unbound:
2021-09-15T04:55:48.909777080Z           |--DNS over TLS providers:
2021-09-15T04:55:48.909805308Z               |--Cloudflare
2021-09-15T04:55:48.909832027Z           |--Listening port: 53
2021-09-15T04:55:48.909858902Z           |--Access control:
2021-09-15T04:55:48.909887079Z               |--Allowed:
2021-09-15T04:55:48.909914006Z                   |--0.0.0.0/0
2021-09-15T04:55:48.909941453Z                   |--::/0
2021-09-15T04:55:48.909969109Z           |--Caching: enabled
2021-09-15T04:55:48.909996036Z           |--IPv4 resolution: enabled
2021-09-15T04:55:48.910023536Z           |--IPv6 resolution: disabled
2021-09-15T04:55:48.910050307Z           |--Verbosity level: 1/5
2021-09-15T04:55:48.910078223Z           |--Verbosity details level: 0/4
2021-09-15T04:55:48.910108119Z           |--Validation log level: 0/2
2021-09-15T04:55:48.910136504Z           |--Username:
2021-09-15T04:55:48.910164264Z       |--Blacklist:
2021-09-15T04:55:48.910192024Z          |--Blocked categories: malicious
2021-09-15T04:55:48.910220306Z          |--Additional IP networks blocked: 13
2021-09-15T04:55:48.910248274Z |--Firewall:
2021-09-15T04:55:48.910275982Z |--Log:
2021-09-15T04:55:48.910303482Z    |--Level: INFO
2021-09-15T04:55:48.910331346Z |--System:
2021-09-15T04:55:48.910359419Z    |--Process user ID: 1000
2021-09-15T04:55:48.910387492Z    |--Process group ID: 1000
2021-09-15T04:55:48.910417075Z    |--Timezone: america/chicago
2021-09-15T04:55:48.910444783Z |--HTTP proxy:
2021-09-15T04:55:48.910472179Z    |--Port: 1080
2021-09-15T04:55:48.910499887Z    |--Stealth: enabled
2021-09-15T04:55:48.910528116Z |--Health:
2021-09-15T04:55:48.910555928Z    |--Server address: 127.0.0.1:9999
2021-09-15T04:55:48.910584001Z    |--Address to ping: github.com
2021-09-15T04:55:48.910611865Z    |--VPN:
2021-09-15T04:55:48.910639417Z       |--Initial duration: 6s
2021-09-15T04:55:48.910667229Z       |--Addition duration: 5s
2021-09-15T04:55:48.910695198Z |--HTTP control server:
2021-09-15T04:55:48.910722958Z    |--Listening port: 8000
2021-09-15T04:55:48.910751083Z    |--Logging: enabled
2021-09-15T04:55:48.910778947Z |--Public IP getter:
2021-09-15T04:55:48.910806656Z    |--Fetch period: 12h0m0s
2021-09-15T04:55:48.910834312Z    |--IP file: /gluetun/ip
2021-09-15T04:55:48.945159537Z 2021/09/14 23:55:48 INFO routing: default route found: interface eth0, gateway 172.22.0.1
2021-09-15T04:55:48.946046926Z 2021/09/14 23:55:48 INFO routing: local ethernet link found: eth0
2021-09-15T04:55:48.946630203Z 2021/09/14 23:55:48 INFO routing: local ipnet found: 172.22.0.0/16
2021-09-15T04:55:48.955769149Z 2021/09/14 23:55:48 INFO routing: default route found: interface eth0, gateway 172.22.0.1
2021-09-15T04:55:48.957818718Z 2021/09/14 23:55:48 INFO routing: adding route for 0.0.0.0/0
2021-09-15T04:55:48.958531629Z 2021/09/14 23:55:48 INFO firewall: firewall disabled, only updating allowed subnets internal list
2021-09-15T04:55:48.959465269Z 2021/09/14 23:55:48 INFO routing: default route found: interface eth0, gateway 172.22.0.1
2021-09-15T04:55:48.959672507Z 2021/09/14 23:55:48 INFO TUN device is not available: open /dev/net/tun: no such file or directory; creating it...
2021-09-15T04:55:48.959900578Z 2021/09/14 23:55:48 INFO firewall: enabling...
2021-09-15T04:55:49.021064207Z 2021/09/14 23:55:49 INFO firewall: enabled successfully
2021-09-15T04:55:49.023383513Z 2021/09/14 23:55:49 INFO dns over tls: using plaintext DNS at address 1.1.1.1
2021-09-15T04:55:49.023725073Z 2021/09/14 23:55:49 INFO http proxy: listening on :1080
2021-09-15T04:55:49.025072095Z 2021/09/14 23:55:49 INFO http server: listening on :8000
2021-09-15T04:55:49.025708080Z 2021/09/14 23:55:49 INFO healthcheck: listening on 127.0.0.1:9999
2021-09-15T04:55:49.027366714Z 2021/09/14 23:55:49 INFO firewall: setting VPN connection through firewall...
2021-09-15T04:55:49.076320064Z 2021/09/14 23:55:49 INFO wireguard: Wireguard is up
2021-09-15T04:55:49.142172201Z 2021/09/14 23:55:49 INFO dns over tls: downloading DNS over TLS cryptographic files
2021-09-15T04:55:50.275960457Z 2021/09/14 23:55:50 INFO healthcheck: healthy!
2021-09-15T04:55:50.474976649Z 2021/09/14 23:55:50 INFO dns over tls: downloading hostnames and IP block lists
2021-09-15T04:56:12.178016148Z 2021/09/14 23:56:12 INFO dns over tls: [22083433345843200] unbound[51:0] notice: init module 0: validator
2021-09-15T04:56:12.235120741Z 2021/09/14 23:56:12 INFO dns over tls: [22083433345843200] unbound[51:0] notice: init module 1: iterator
2021-09-15T04:56:14.595970498Z 2021/09/14 23:56:14 INFO dns over tls: [22083433345843200] unbound[51:0] info: start of service (unbound 1.13.2).
2021-09-15T04:56:14.745585891Z 2021/09/14 23:56:14 INFO dns over tls: [22083433345843200] unbound[51:0] error: ssl handshake failed crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
2021-09-15T04:56:15.719478489Z 2021/09/14 23:56:14 INFO dns over tls: [22083433345843200] unbound[51:0] error: and additionally crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
2021-09-15T04:56:15.719578175Z 2021/09/14 23:56:14 INFO dns over tls: [22083433345843200] unbound[51:0] error: and additionally crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
2021-09-15T04:56:15.719619269Z 2021/09/14 23:56:14 INFO dns over tls: [22083433345843200] unbound[51:0] error: and additionally crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
2021-09-15T04:56:15.719714945Z 2021/09/14 23:56:14 INFO dns over tls: [22083433345843200] unbound[51:0] error: and additionally crypto error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
2021-09-15T04:56:15.719765987Z 2021/09/14 23:56:14 INFO dns over tls: [22083433345843200] unbound[51:0] notice: ssl handshake failed 1.0.0.1 port 853
2021-09-15T04:56:15.719834163Z 2021/09/14 23:56:14 INFO dns over tls: [22083433345843200] unbound[51:1] error: ssl handshake failed crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
2021-09-15T04:56:15.719867809Z 2021/09/14 23:56:14 INFO dns over tls: [22083433345843200] unbound[51:1] error: and additionally crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
2021-09-15T04:56:15.719901715Z 2021/09/14 23:56:14 INFO dns over tls: [22083433345843200] unbound[51:1] error: and additionally crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
2021-09-15T04:56:15.719933642Z 2021/09/14 23:56:14 INFO dns over tls: [22083433345843200] unbound[51:1] error: and additionally crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
2021-09-15T04:56:15.719965464Z 2021/09/14 23:56:14 INFO dns over tls: [22083433345843200] unbound[51:1] error: and additionally crypto error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
2021-09-15T04:56:15.719997079Z 2021/09/14 23:56:14 INFO dns over tls: [22083433345843200] unbound[51:1] notice: ssl handshake failed 1.0.0.1 port 853
2021-09-15T04:56:15.720028745Z 2021/09/14 23:56:14 INFO dns over tls: [22083433345843200] unbound[51:1] error: ssl handshake failed crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
2021-09-15T04:56:15.720060828Z 2021/09/14 23:56:14 INFO dns over tls: [22083433345843200] unbound[51:1] error: and additionally crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
2021-09-15T04:56:15.720092651Z 2021/09/14 23:56:14 INFO dns over tls: [22083433345843200] unbound[51:1] error: and additionally crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
2021-09-15T04:56:15.720124682Z 2021/09/14 23:56:14 INFO dns over tls: [22083433345843200] unbound[51:1] error: and additionally crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
2021-09-15T04:56:15.720156869Z 2021/09/14 23:56:14 INFO dns over tls: [22083433345843200] unbound[51:1] error: and additionally crypto error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
2021-09-15T04:56:15.720188640Z 2021/09/14 23:56:14 INFO dns over tls: [22083433345843200] unbound[51:1] notice: ssl handshake failed 1.0.0.1 port 853
[....]
2021-09-15T04:56:17.389243212Z 2021/09/14 23:56:17 INFO dns over tls: [22083433345843200] unbound[51:1] error: ssl handshake failed crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
2021-09-15T04:56:17.389410190Z 2021/09/14 23:56:17 INFO dns over tls: [22083433345843200] unbound[51:1] error: and additionally crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
2021-09-15T04:56:17.389574043Z 2021/09/14 23:56:17 INFO dns over tls: [22083433345843200] unbound[51:1] error: and additionally crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
2021-09-15T04:56:17.390289976Z 2021/09/14 23:56:17 INFO dns over tls: [22083433345843200] unbound[51:1] error: and additionally crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
2021-09-15T04:56:17.390765441Z 2021/09/14 23:56:17 INFO dns over tls: [22083433345843200] unbound[51:1] error: and additionally crypto error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
2021-09-15T04:56:17.391987776Z 2021/09/14 23:56:17 INFO dns over tls: [22083433345843200] unbound[51:1] notice: ssl handshake failed 1.0.0.1 port 853
2021-09-15T04:56:18.494854400Z 2021/09/14 23:56:18 INFO dns over tls: falling back on plaintext DNS at address 1.1.1.1
2021-09-15T04:56:18.496688293Z 2021/09/14 23:56:18 WARN dns over tls: DNS is not working: after 10 tries: lookup github.com on 127.0.0.1:53: server misbehaving
2021-09-15T04:56:18.496807511Z 2021/09/14 23:56:18 INFO dns over tls: attempting restart in 10s
[....]
2021-09-15T05:03:48.910919869Z 2021/09/15 00:03:48 INFO dns over tls: falling back on plaintext DNS at address 1.1.1.1
2021-09-15T05:03:52.902695059Z 2021/09/15 00:03:52 WARN dns over tls: DNS is not working: after 10 tries: lookup github.com on 127.0.0.1:53: server misbehaving
2021-09-15T05:03:52.902861048Z 2021/09/15 00:03:52 INFO dns over tls: attempting restart in 5m20s
2021-09-15T05:09:12.904584622Z 2021/09/15 00:09:12 INFO dns over tls: downloading DNS over TLS cryptographic files
2021-09-15T05:09:13.927068487Z 2021/09/15 00:09:13 INFO dns over tls: downloading hostnames and IP block lists
2021-09-15T05:09:24.785896499Z 2021/09/15 00:09:24 INFO dns over tls: falling back on plaintext DNS at address 1.1.1.1
2021-09-15T05:09:24.786958210Z 2021/09/15 00:09:24 WARN dns over tls: DNS is not working: after 10 tries: lookup github.com on 127.0.0.1:53: read udp 127.0.0.1:40535->127.0.0.1:53: read: connection refused
2021-09-15T05:09:24.787045501Z 2021/09/15 00:09:24 INFO dns over tls: attempting restart in 10m40s

2 replies

qdm12 Sep 15, 2021
Maintainer Author

Ha usually Openvpn complains about that first 😄 Well now that's it's wireguard it's the turn of Unbound I Guess! See https://github.com/qdm12/gluetun/wiki/32-bit-setup how to fix it. Also #137 is coming soon so we will be finally free of stupid openssl and all the weird operating system things 😉 (as long as we use wireguard though haha)

jathek Sep 15, 2021

Yep, that was it. Updated libseccomp2 and now gluetun works fine even with Unbound enabled. So I would agree with above that it's likely a configuration issue, since RPi3 Model B is fairly old these days but gluetun still works on it for me.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Help: Windscribe and Wireguard #624

{{title}}

Replies: 14 comments 2 replies

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

Select a reply

Help: Windscribe and Wireguard #624

qdm12 Sep 12, 2021 Maintainer

Replies: 14 comments · 2 replies

qdm12 Sep 12, 2021 Maintainer Author

qdm12 Sep 13, 2021 Maintainer Author

qdm12 Sep 13, 2021 Maintainer Author

qdm12 Sep 13, 2021 Maintainer Author

qdm12 Sep 13, 2021 Maintainer Author

qdm12 Sep 13, 2021 Maintainer Author

qdm12 Sep 14, 2021 Maintainer Author

qdm12 Sep 15, 2021 Maintainer Author

qdm12
Sep 12, 2021
Maintainer

Replies: 14 comments 2 replies

qdm12
Sep 12, 2021
Maintainer Author

qdm12
Sep 13, 2021
Maintainer Author

qdm12
Sep 13, 2021
Maintainer Author

qdm12
Sep 13, 2021
Maintainer Author

qdm12
Sep 13, 2021
Maintainer Author

qdm12
Sep 13, 2021
Maintainer Author

qdm12
Sep 14, 2021
Maintainer Author

qdm12 Sep 15, 2021
Maintainer Author