On iOS (iPhone or iPad), under wifi network (Airport Express), OpenVPN seems to be stuck at at "Looking up DNS name". However on all my OSX machines I'm able to connect to my OpenVPN servers which have DuckDNS hostnames using Tunnelblick as the client (latest version). I've tried connecting to the same server with iOS Safari and can get to webpages fine, so it doesn't appear to be a DNS look-up problem with iOS and the DuckDNS service. Adding to the wrinkle, if I switch to a 3G connection (no longer wifi), OpenVPN Connect is able to connect immediately. I'm at a loss to pinpoint the source problem, any ideas? Below is the log file while connected to wifi: [code] 2016-02-15 00:44:47 LZO-ASYM init swap=0 asym=0 2016-02-15 00:44:47 EVENT: RESOLVE 2016-02-15 00:44:57 Server poll timeout, trying next remote entry... 2016-02-15 00:44:57 EVENT: RECONNECTING 2016-02-15 00:44:57 LZO-ASYM init swap=0 asym=0 2016-02-15 00:44:57 EVENT: RESOLVE 2016-02-15 00:45:07 Server poll timeout, trying next remote entry... 2016-02-15 00:45:07 EVENT: RECONNECTING 2016-02-15 00:45:07 LZO-ASYM init swap=0 asym=0 2016-02-15 00:45:07 EVENT: RESOLVE 2016-02-15 00:45:17 Server poll timeout, trying next remote entry... 2016-02-15 00:45:17 EVENT: RECONNECTING 2016-02-15 00:45:17 LZO-ASYM init swap=0 asym=0 2016-02-15 00:45:17 EVENT: RESOLVE[/code]

Add to this, took my iPad to a restaurant that had free wifi. Was able to connect fine and get on Google and Facebook. OpenVPN Connect was not able to connect to my servers, but again switching to 3G, it immediately connected. Seems like there's handling differences when the connection source is changed.

Some free wifi block you from using VPN in order to steal your information ..

That's a reasonable assumption, though it was a small family restaurant so I doubt they have a "network admin" working on their payroll. It first happened on my home wifi which is not restricted either.

Perhaps [i]their[/i] ISP does not offer full services ..

I'm not sure you can buy those kinds of internet services in my city :)

My home internet I can connect fine on Mac using Tunnelblick as a client. The same configuration files imported verbatim fail on all iOS devices (iPad, iPhone, iPad Pro)

Can you [b]ping[/b] your duckdns-name [u]without[/u] using openvpn from all your different devices ?

Yep I can, even downloaded a ping app for iOS

Which means [b]all[/b] of your devices have working DNS .. and can locate IP address for your DNS name. Which probably indicates that some of the places you try to connect to your VPN from block you. Try running your VPN server with: [code]proto tcp port 443[/code]and try from those places again.

haha, I've repeated this a couple times, but I'll do it one more time! My Macs & Windows PCs, on the same networks, can connect to OpenVPN servers fine. Only iOS devices cannot. On the same networks. So it's not the network blocking.

DuckDNS - unable to resolve

superdx

10.0.1.1 is the router's DNS. It would make sense that you may not be able to connect to it after connecting to VPN, but not before. Before is when OpenVPN Connect is trying to look up the hostname.

superdx

I think we've found the bug.

superdx

My Mac uses the same DNS 10.0.1.1 and Tunneblick works fine. Avoiding screenshot spam, Windows and Android are using identical DNS settings and they also connect fine.

superdx

The OpenVPN Connect app has an issue with how the server (host) DNS is resolved from wifi routers, at least consumer grade offerings.

For reference, Android and OSX devices on the same wifi networks do not have this problem. DNS resolution is immediate.

The test
Three routers: Airport Extreme (6th gen 2013), Linksys WRT54g, and a Lifetrons Air travel portable router.

I setup all 3 routers to use Google DNS 8.8.8.8 and 8.8.4.4 primary & secondary respectively. The connection to the internet is PPoE.

Airport Extreme DNS: 10.0.1.1
Linksys DNS: 196.168.16.1
Lifetrons Air DNS: 10.10.10.254

Result: Safari iOS, a Ping app and all other applications were able to use the internet perfectly.

However when OpenVPN tries to resolve DNS of the server (in this case, all my servers were using DuckDNS) using the router, it fails.

Current workaround
If a DNS server is typed directly into the iOS Network settings, bypassing the router, OpenVPN Connect can connect immediately without delay i.e. typing in 8.8.8.8 into the DNS server has an immediate effect. This was repeatable on all 3 routers.

« Previous Page