Client timeout

gguest64

Hi,

I've got a OpenVPN server 2.4.8 -1 on CentOS 7.

Most of connections randomly end with Inactivy timeout, even when there is traffic. Issue happen with different clients and random time.
Some clients stay connected severals hours, some other only few minutes.

Keepalive is enabled every 5 secondes. We could see theses packet in log : P_DATA_V2 kid=0 DATA len=40

For this test, a ping is done every 20 sec to an internal server : P_DATA_V2 kid=0 DATA len=108 (while true ; do ping -t 1 -c 1 10.0.0.1; sleep 20 ; done).

After few minutes (here 13 mn), we don't see any more trafic in tunnel, server kill tunnel after 120 sec and client after 4:30 mn after latest packet in tunnel.
Most of the time, client close connection 60 sec after latest packet (I don't known why here it's 4:30 mn)

Firewall on server side is not resetting connection.

There is not anti-virus on clients.

Problem happen with TCP as well.

Thank you very much for your help.

dev tun
mode server
tls-server
port 53
management 10.132.208.39 7505
proto udp
reneg-sec 36000

client-to-client
keepalive 5 60
comp-lzo no
push "explicit-exit-notify 3"

### Configuration SSL
ca /etc/openvpn/ssl/chain.crt
cert /etc/openvpn/ssl/server.crt
key /etc/openvpn/ssl/server.key
dh /etc/openvpn/ssl/dh2048.pem
tls-crypt /etc/openvpn/ssl/ta.key

### Persistance IP
ifconfig-pool-persist /var/log/openvpn/ipp-udp.txt
### Chiffrement
tls-version-min 1.2
auth SHA1
cipher AES-256-GCM
ncp-ciphers AES-256-GCM

# Parametrage reseau / DNS / Passerelle client
topology subnet
server 10.132.219.0 255.255.255.128

push "topology subnet"
push "dhcp-option DNS x.x.x.x"
push "dhcp-option DOMAIN x.interne"
push "redirect-gateway def1"

# Authentification
username-as-common-name
plugin /etc/openvpn/plugins/radiusplugin.so /etc/openvpn/plugins/radiusplugin.cnf
auth-user-pass-verify /etc/openvpn/plugins/check_auth.sh via-env
script-security 2

### Log
status /var/log/openvpn/openvpn-status-udp.log
syslog openvpn-wdw-udp
verb 4
client-connect '/etc/openvpn/plugins/connect.sh'
client-disconnect '/etc/openvpn/plugins/connect.sh'

verb 7
client
dev tun
proto udp
remote server.mydomain
port 53
reneg-sec 0
resolv-retry infinite
nobind
remote-cert-tls server
auth-nocache
comp-lzo no

script-security 2
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf

route-nopull
route 10.0.0.0 255.0.0.0

auth-user-pass
ca AC.crt
key grnatl0371.key
cert grnatl0371.crt

<tls-crypt>
#
# 2048 bit OpenVPN static key
#
XXX
</tls-crypt>

Server Log

May  8 22:29:59 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 Re-using SSL/TLS context
May  8 22:29:59 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 Control Channel MTU parms [ L:1622 D:1156 EF:94 EB:0 ET:0 EL:3 ]
May  8 22:29:59 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
May  8 22:29:59 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1550,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-server'
May  8 22:29:59 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1550,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-client'
May  8 22:29:59 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 TLS: Initial packet from [AF_INET]X.X.X.X:42147, sid=05f3ba77 2cb079a0
May  8 22:29:59 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 VERIFY OK: depth=2, XXX
May  8 22:29:59 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 VERIFY OK: depth=0, XXX
May  8 22:30:00 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 peer info: IV_VER=2.5_git_ccb636c
May  8 22:30:00 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 peer info: IV_PLAT=mac
May  8 22:30:00 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 peer info: IV_PROTO=2
May  8 22:30:00 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 peer info: IV_NCP=2
May  8 22:30:00 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 peer info: IV_LZ4=1
May  8 22:30:00 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 peer info: IV_LZ4v2=1
May  8 22:30:00 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 peer info: IV_LZO=1
May  8 22:30:00 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 peer info: IV_COMP_STUB=1
May  8 22:30:00 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 peer info: IV_COMP_STUBv2=1
May  8 22:30:00 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 peer info: IV_TCPNL=1
May  8 22:30:00 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 PLUGIN_CALL: POST /etc/openvpn/plugins/radiusplugin.so/PLUGIN_AUTH_USER_PASS_VERIFY status=2
May  8 22:30:02 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 TLS: Username/Password authentication deferred for username 'gguest64' [CN SET]
May  8 22:30:02 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1550', remote='link-mtu 1542'
May  8 22:30:02 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 WARNING: 'cipher' is used inconsistently, local='cipher AES-256-GCM', remote='cipher BF-CBC'
May  8 22:30:02 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA1'
May  8 22:30:02 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 WARNING: 'keysize' is used inconsistently, local='keysize 256', remote='keysize 128'
May  8 22:30:02 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
May  8 22:30:02 my_server openvpn-wdw-udp[31916]: 5.6.7.8:42147 [gguest64] Peer Connection Initiated with [AF_INET]X.X.X.X:42147
May  8 22:30:02 my_server openvpn-wdw-udp[31916]: gguest64/5.6.7.8:42147 MULTI_sva: pool returned IPv4=10.132.219.2, IPv6=(Not enabled)
May  8 22:30:02 my_server openvpn-wdw-udp[31916]: gguest64/5.6.7.8:42147 PLUGIN_CALL: POST /etc/openvpn/plugins/radiusplugin.so/PLUGIN_CLIENT_CONNECT status=0
May  8 22:30:02 my_server openvpn-wdw-udp[31916]: gguest64/5.6.7.8:42147 OPTIONS IMPORT: reading client specific options from: /tmp/openvpn_cc_6af20e28e9be6eb62340b5c87f2e7dc.tmp
May  8 22:30:02 my_server openvpn-wdw-udp[31916]: gguest64/5.6.7.8:42147 OPTIONS IMPORT: reading client specific options from: /tmp/openvpn_cc_78b73d6b83adb1f1409ddc89c9136d66.tmp
May  8 22:30:02 my_server openvpn-wdw-udp[31916]: gguest64/5.6.7.8:42147 MULTI: Learn: 10.132.219.2 -> gguest64/X.X.X.X:42147
May  8 22:30:02 my_server openvpn-wdw-udp[31916]: gguest64/5.6.7.8:42147 MULTI: primary virtual IP for gguest64/X.X.X.X:42147: 10.132.219.2
May  8 22:30:03 my_server openvpn-wdw-udp[31916]: gguest64/5.6.7.8:42147 PUSH: Received control message: 'PUSH_REQUEST'
May  8 22:30:03 my_server openvpn-wdw-udp[31916]: gguest64/5.6.7.8:42147 SENT CONTROL [gguest64]: 'PUSH_REPLY,explicit-exit-notify 3,topology subnet,dhcp-option DNS x.x.x.x DOMAIN domain.local,redirect-gateway def1,route-gateway 10.132.219.1,topology subnet,ping 5,ping-restart 60,ifconfig 10.132.219.2 255.255.255.128,peer-id 1,cipher AES-256-GCM' (status=1)
May  8 22:30:03 my_server openvpn-wdw-udp[31916]: gguest64/5.6.7.8:42147 Data Channel MTU parms [ L:1550 D:1450 EF:50 EB:406 ET:0 EL:3 ]
May  8 22:30:03 my_server openvpn-wdw-udp[31916]: gguest64/5.6.7.8:42147 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
May  8 22:30:03 my_server openvpn-wdw-udp[31916]: gguest64/5.6.7.8:42147 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
May  8 22:45:44 my_server openvpn-wdw-udp[31916]: gguest64/5.6.7.8:42147 [gguest64] Inactivity timeout (--ping-restart), restarting
May  8 22:45:44 my_server openvpn-wdw-udp[31916]: gguest64/5.6.7.8:42147 SIGUSR1[soft,ping-restart] received, client-instance restarting

Client Log

Fri May  8 22:29:31 2020 NOTE: debug verbosity (--verb 7) is enabled but this build lacks debug support.
Fri May  8 22:29:31 2020 us=836105 Current Parameter Settings:
Fri May  8 22:29:31 2020 us=836118   config = 'OpenVPN.conf'
Fri May  8 22:29:31 2020 us=836133   mode = 0
Fri May  8 22:29:31 2020 us=836137   show_ciphers = DISABLED
Fri May  8 22:29:31 2020 us=836140   show_digests = DISABLED
Fri May  8 22:29:31 2020 us=836143   show_engines = DISABLED
Fri May  8 22:29:31 2020 us=836147   genkey = DISABLED
Fri May  8 22:29:31 2020 us=836159   key_pass_file = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836163   show_tls_ciphers = DISABLED
Fri May  8 22:29:31 2020 us=836166   connect_retry_max = 0
Fri May  8 22:29:31 2020 us=836170 Connection profiles [0]:
Fri May  8 22:29:31 2020 us=836175   proto = udp
Fri May  8 22:29:31 2020 us=836179   local = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836182   local_port = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836186   remote = 'server.hide.com'
Fri May  8 22:29:31 2020 us=836189   remote_port = '53'
Fri May  8 22:29:31 2020 us=836192   remote_float = DISABLED
Fri May  8 22:29:31 2020 us=836196   bind_defined = DISABLED
Fri May  8 22:29:31 2020 us=836199   bind_local = DISABLED
Fri May  8 22:29:31 2020 us=836203   bind_ipv6_only = DISABLED
Fri May  8 22:29:31 2020 us=836206   connect_retry_seconds = 5
Fri May  8 22:29:31 2020 us=836210   connect_timeout = 120
Fri May  8 22:29:31 2020 us=836213   xormethod = 0
Fri May  8 22:29:31 2020 us=836217   xormask = ''
Fri May  8 22:29:31 2020 us=836220   xormasklen = 0
Fri May  8 22:29:31 2020 us=836224   socks_proxy_server = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836228   socks_proxy_port = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836232   tun_mtu = 1500
Fri May  8 22:29:31 2020 us=836235   tun_mtu_defined = ENABLED
Fri May  8 22:29:31 2020 us=836238   link_mtu = 1500
Fri May  8 22:29:31 2020 us=836242   link_mtu_defined = DISABLED
Fri May  8 22:29:31 2020 us=836245   tun_mtu_extra = 0
Fri May  8 22:29:31 2020 us=836249   tun_mtu_extra_defined = DISABLED
Fri May  8 22:29:31 2020 us=836252   mtu_discover_type = -1
Fri May  8 22:29:31 2020 us=836256   fragment = 0
Fri May  8 22:29:31 2020 us=836259   mssfix = 1450
Fri May  8 22:29:31 2020 us=836263   explicit_exit_notification = 0
Fri May  8 22:29:31 2020 us=836266   tls_auth_file = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836271   key_direction = not set
Fri May  8 22:29:31 2020 us=836274   tls_crypt_file = '[[INLINE]]'
Fri May  8 22:29:31 2020 us=836278   tls_crypt_v2_file = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836281 Connection profiles END
Fri May  8 22:29:31 2020 us=836285   remote_random = DISABLED
Fri May  8 22:29:31 2020 us=836288   ipchange = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836291   dev = 'tun'
Fri May  8 22:29:31 2020 us=836295   dev_type = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836298   dev_node = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836301   lladdr = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836305   topology = 1
Fri May  8 22:29:31 2020 us=836308   ifconfig_local = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836311   ifconfig_remote_netmask = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836418   ifconfig_noexec = DISABLED
Fri May  8 22:29:31 2020 us=836428   ifconfig_nowarn = DISABLED
Fri May  8 22:29:31 2020 us=836433   ifconfig_ipv6_local = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836436   ifconfig_ipv6_netbits = 0
Fri May  8 22:29:31 2020 us=836440   ifconfig_ipv6_remote = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836444   shaper = 0
Fri May  8 22:29:31 2020 us=836447   mtu_test = 0
Fri May  8 22:29:31 2020 us=836451   mlock = DISABLED
Fri May  8 22:29:31 2020 us=836455   keepalive_ping = 0
Fri May  8 22:29:31 2020 us=836458   keepalive_timeout = 0
Fri May  8 22:29:31 2020 us=836462   inactivity_timeout = 0
Fri May  8 22:29:31 2020 us=836465   ping_send_timeout = 0
Fri May  8 22:29:31 2020 us=836468   ping_rec_timeout = 0
Fri May  8 22:29:31 2020 us=836472   ping_rec_timeout_action = 0
Fri May  8 22:29:31 2020 us=836475   ping_timer_remote = DISABLED
Fri May  8 22:29:31 2020 us=836479   remap_sigusr1 = 0
Fri May  8 22:29:31 2020 us=836482   persist_tun = DISABLED
Fri May  8 22:29:31 2020 us=836486   persist_local_ip = DISABLED
Fri May  8 22:29:31 2020 us=836489   persist_remote_ip = DISABLED
Fri May  8 22:29:31 2020 us=836492   persist_key = DISABLED
Fri May  8 22:29:31 2020 us=836496   passtos = DISABLED
Fri May  8 22:29:31 2020 us=836499   resolve_retry_seconds = 1000000000
Fri May  8 22:29:31 2020 us=836503   resolve_in_advance = DISABLED
Fri May  8 22:29:31 2020 us=836506   username = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836593   groupname = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836603   chroot_dir = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836607   cd_dir = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836611   writepid = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836618   up_script = '/etc/openvpn/update-resolv-conf'
Fri May  8 22:29:31 2020 us=836623   down_script = '/etc/openvpn/update-resolv-conf'
Fri May  8 22:29:31 2020 us=836626   down_pre = DISABLED
Fri May  8 22:29:31 2020 us=836630   up_restart = DISABLED
Fri May  8 22:29:31 2020 us=836633   up_delay = DISABLED
Fri May  8 22:29:31 2020 us=836637   daemon = DISABLED
Fri May  8 22:29:31 2020 us=836640   inetd = 0
Fri May  8 22:29:31 2020 us=836644   log = DISABLED
Fri May  8 22:29:31 2020 us=836647   suppress_timestamps = DISABLED
Fri May  8 22:29:31 2020 us=836651   machine_readable_output = DISABLED
Fri May  8 22:29:31 2020 us=836654   nice = 0
Fri May  8 22:29:31 2020 us=836658   verbosity = 7
Fri May  8 22:29:31 2020 us=836661   mute = 0
Fri May  8 22:29:31 2020 us=836664   status_file = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836668   status_file_version = 1
Fri May  8 22:29:31 2020 us=836671   status_file_update_freq = 60
Fri May  8 22:29:31 2020 us=836675   occ = ENABLED
Fri May  8 22:29:31 2020 us=836678   rcvbuf = 0
Fri May  8 22:29:31 2020 us=836681   sndbuf = 0
Fri May  8 22:29:31 2020 us=836685   sockflags = 0
Fri May  8 22:29:31 2020 us=836689   fast_io = DISABLED
Fri May  8 22:29:31 2020 us=836837   comp.alg = 1
Fri May  8 22:29:31 2020 us=836850   comp.flags = 0
Fri May  8 22:29:31 2020 us=836856   route_script = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836860   route_default_gateway = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836864   route_default_metric = 0
Fri May  8 22:29:31 2020 us=836867   route_noexec = DISABLED
Fri May  8 22:29:31 2020 us=836871   route_delay = 0
Fri May  8 22:29:31 2020 us=836875   route_delay_window = 30
Fri May  8 22:29:31 2020 us=836878   route_delay_defined = DISABLED
Fri May  8 22:29:31 2020 us=836882   route_nopull = ENABLED
Fri May  8 22:29:31 2020 us=836886   route_gateway_via_dhcp = DISABLED
Fri May  8 22:29:31 2020 us=836889   allow_pull_fqdn = DISABLED
Fri May  8 22:29:31 2020 us=836906   route 10.0.0.0/255.0.0.0/default (not set)/default (not set)
Fri May  8 22:29:31 2020 us=836910   management_addr = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836914   management_port = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836917   management_user_pass = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836921   management_log_history_cache = 250
Fri May  8 22:29:31 2020 us=836925   management_echo_buffer_size = 100
Fri May  8 22:29:31 2020 us=836928   management_write_peer_info_file = '[UNDEF]'
Fri May  8 22:29:31 2020 us=836932   management_client_user = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837020   management_client_group = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837030   management_flags = 0
Fri May  8 22:29:31 2020 us=837035   shared_secret_file = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837039   key_direction = not set
Fri May  8 22:29:31 2020 us=837042   ciphername = 'BF-CBC'
Fri May  8 22:29:31 2020 us=837046   ncp_enabled = ENABLED
Fri May  8 22:29:31 2020 us=837050   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Fri May  8 22:29:31 2020 us=837054   authname = 'SHA1'
Fri May  8 22:29:31 2020 us=837057   prng_hash = 'SHA1'
Fri May  8 22:29:31 2020 us=837061   prng_nonce_secret_len = 16
Fri May  8 22:29:31 2020 us=837065   keysize = 0
Fri May  8 22:29:31 2020 us=837068   engine = DISABLED
Fri May  8 22:29:31 2020 us=837072   replay = ENABLED
Fri May  8 22:29:31 2020 us=837075   mute_replay_warnings = DISABLED
Fri May  8 22:29:31 2020 us=837079   replay_window = 64
Fri May  8 22:29:31 2020 us=837082   replay_time = 15
Fri May  8 22:29:31 2020 us=837086   packet_id_file = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837090   test_crypto = DISABLED
Fri May  8 22:29:31 2020 us=837096   tls_server = DISABLED
Fri May  8 22:29:31 2020 us=837100   tls_client = ENABLED
Fri May  8 22:29:31 2020 us=837104   key_method = 2
Fri May  8 22:29:31 2020 us=837107   ca_file = 'xxx'
Fri May  8 22:29:31 2020 us=837185   ca_path = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837195   dh_file = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837200   cert_file = 'VPN1.crt'
Fri May  8 22:29:31 2020 us=837204   extra_certs_file = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837209   priv_key_file = 'VPN1.key'
Fri May  8 22:29:31 2020 us=837213   pkcs12_file = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837217   cipher_list = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837220   cipher_list_tls13 = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837224   tls_cert_profile = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837227   tls_verify = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837231   tls_export_cert = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837234   verify_x509_type = 0
Fri May  8 22:29:31 2020 us=837238   verify_x509_name = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837241   crl_file = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837245   ns_cert_type = 0
Fri May  8 22:29:31 2020 us=837248   remote_cert_ku[i] = 65535
Fri May  8 22:29:31 2020 us=837252   remote_cert_ku[i] = 0
Fri May  8 22:29:31 2020 us=837255   remote_cert_ku[i] = 0
Fri May  8 22:29:31 2020 us=837259   remote_cert_ku[i] = 0
Fri May  8 22:29:31 2020 us=837262   remote_cert_ku[i] = 0
Fri May  8 22:29:31 2020 us=837266   remote_cert_ku[i] = 0
Fri May  8 22:29:31 2020 us=837269   remote_cert_ku[i] = 0
Fri May  8 22:29:31 2020 us=837272   remote_cert_ku[i] = 0
Fri May  8 22:29:31 2020 us=837276   remote_cert_ku[i] = 0
Fri May  8 22:29:31 2020 us=837357   remote_cert_ku[i] = 0
Fri May  8 22:29:31 2020 us=837367   remote_cert_ku[i] = 0
Fri May  8 22:29:31 2020 us=837372   remote_cert_ku[i] = 0
Fri May  8 22:29:31 2020 us=837375   remote_cert_ku[i] = 0
Fri May  8 22:29:31 2020 us=837379   remote_cert_ku[i] = 0
Fri May  8 22:29:31 2020 us=837386   remote_cert_ku[i] = 0
Fri May  8 22:29:31 2020 us=837390   remote_cert_ku[i] = 0
Fri May  8 22:29:31 2020 us=837394   remote_cert_eku = 'TLS Web Server Authentication'
Fri May  8 22:29:31 2020 us=837398   ssl_flags = 0
Fri May  8 22:29:31 2020 us=837402   tls_timeout = 2
Fri May  8 22:29:31 2020 us=837405   renegotiate_bytes = -1
Fri May  8 22:29:31 2020 us=837409   renegotiate_packets = 0
Fri May  8 22:29:31 2020 us=837412   renegotiate_seconds = 0
Fri May  8 22:29:31 2020 us=837416   handshake_window = 60
Fri May  8 22:29:31 2020 us=837419   transition_window = 3600
Fri May  8 22:29:31 2020 us=837423   single_session = DISABLED
Fri May  8 22:29:31 2020 us=837426   push_peer_info = DISABLED
Fri May  8 22:29:31 2020 us=837430   tls_exit = DISABLED
Fri May  8 22:29:31 2020 us=837433   tls_crypt_v2_genkey_type = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837437   tls_crypt_v2_genkey_file = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837440   tls_crypt_v2_metadata = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837538   server_network = 0.0.0.0
Fri May  8 22:29:31 2020 us=837548   server_netmask = 0.0.0.0
Fri May  8 22:29:31 2020 us=837562   server_network_ipv6 = ::
Fri May  8 22:29:31 2020 us=837566   server_netbits_ipv6 = 0
Fri May  8 22:29:31 2020 us=837570   server_bridge_ip = 0.0.0.0
Fri May  8 22:29:31 2020 us=837575   server_bridge_netmask = 0.0.0.0
Fri May  8 22:29:31 2020 us=837579   server_bridge_pool_start = 0.0.0.0
Fri May  8 22:29:31 2020 us=837583   server_bridge_pool_end = 0.0.0.0
Fri May  8 22:29:31 2020 us=837587   ifconfig_pool_defined = DISABLED
Fri May  8 22:29:31 2020 us=837591   ifconfig_pool_start = 0.0.0.0
Fri May  8 22:29:31 2020 us=837595   ifconfig_pool_end = 0.0.0.0
Fri May  8 22:29:31 2020 us=837599   ifconfig_pool_netmask = 0.0.0.0
Fri May  8 22:29:31 2020 us=837603   ifconfig_pool_persist_filename = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837607   ifconfig_pool_persist_refresh_freq = 600
Fri May  8 22:29:31 2020 us=837611   ifconfig_ipv6_pool_defined = DISABLED
Fri May  8 22:29:31 2020 us=837615   ifconfig_ipv6_pool_base = ::
Fri May  8 22:29:31 2020 us=837619   ifconfig_ipv6_pool_netbits = 0
Fri May  8 22:29:31 2020 us=837687   n_bcast_buf = 256
Fri May  8 22:29:31 2020 us=837697   tcp_queue_limit = 64
Fri May  8 22:29:31 2020 us=837702   real_hash_size = 256
Fri May  8 22:29:31 2020 us=837706   virtual_hash_size = 256
Fri May  8 22:29:31 2020 us=837710   client_connect_script = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837714   learn_address_script = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837718   client_disconnect_script = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837723   client_config_dir = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837727   ccd_exclusive = DISABLED
Fri May  8 22:29:31 2020 us=837731   tmp_dir = '/tmp'
Fri May  8 22:29:31 2020 us=837735   push_ifconfig_defined = DISABLED
Fri May  8 22:29:31 2020 us=837740   push_ifconfig_local = 0.0.0.0
Fri May  8 22:29:31 2020 us=837744   push_ifconfig_remote_netmask = 0.0.0.0
Fri May  8 22:29:31 2020 us=837748   push_ifconfig_ipv6_defined = DISABLED
Fri May  8 22:29:31 2020 us=837752   push_ifconfig_ipv6_local = ::/0
Fri May  8 22:29:31 2020 us=837756   push_ifconfig_ipv6_remote = ::
Fri May  8 22:29:31 2020 us=837759   enable_c2c = DISABLED
Fri May  8 22:29:31 2020 us=837763   duplicate_cn = DISABLED
Fri May  8 22:29:31 2020 us=837767   cf_max = 0
Fri May  8 22:29:31 2020 us=837770   cf_per = 0
Fri May  8 22:29:31 2020 us=837774   max_clients = 1024
Fri May  8 22:29:31 2020 us=837778   max_routes_per_client = 256
Fri May  8 22:29:31 2020 us=837893   auth_user_pass_verify_script = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837902   auth_user_pass_verify_script_via_file = DISABLED
Fri May  8 22:29:31 2020 us=837917   auth_token_generate = DISABLED
Fri May  8 22:29:31 2020 us=837921   auth_token_lifetime = 0
Fri May  8 22:29:31 2020 us=837925   port_share_host = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837929   port_share_port = '[UNDEF]'
Fri May  8 22:29:31 2020 us=837932   client = ENABLED
Fri May  8 22:29:31 2020 us=837936   pull = ENABLED
Fri May  8 22:29:31 2020 us=837939   auth_user_pass_file = 'stdin'
Fri May  8 22:29:31 2020 us=837944 OpenVPN 2.5_git_ccb636c x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [LZ4] [MH/RECVDA] [AEAD] built on Jul 19 2019
Fri May  8 22:29:31 2020 us=837964 library versions: OpenSSL 1.1.1b  26 Feb 2019, LZO 2.10
Enter Auth Username:gguest64
Enter Auth Password:
Fri May  8 22:29:59 2020 us=824428 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri May  8 22:29:59 2020 us=826175 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Fri May  8 22:29:59 2020 us=826206 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri May  8 22:29:59 2020 us=826215 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Fri May  8 22:29:59 2020 us=826225 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri May  8 22:29:59 2020 us=826231 tls_crypt_adjust_frame_parameters: Adjusting frame parameters for tls-crypt by 56 bytes
Fri May  8 22:29:59 2020 us=826350 Control Channel MTU parms [ L:1622 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Fri May  8 22:29:59 2020 us=833713 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Fri May  8 22:29:59 2020 us=833739 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 40 bytes
Fri May  8 22:29:59 2020 us=833745 calc_options_string_link_mtu: link-mtu 1622 -> 1542
Fri May  8 22:29:59 2020 us=833758 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 40 bytes
Fri May  8 22:29:59 2020 us=833765 calc_options_string_link_mtu: link-mtu 1622 -> 1542
Fri May  8 22:29:59 2020 us=833771 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Fri May  8 22:29:59 2020 us=833776 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Fri May  8 22:29:59 2020 us=833804 TCP/UDP: Preserving recently used remote address: [AF_INET]1.2.3.4:53
Fri May  8 22:29:59 2020 us=833888 Socket Buffers: R=[786896->786896] S=[9216->9216]
Fri May  8 22:29:59 2020 us=833897 UDP link local: (not bound)
Fri May  8 22:29:59 2020 us=833905 UDP link remote: [AF_INET]1.2.3.4:53
Fri May  8 22:29:59 2020 us=833970 UDP WRITE [54] to [AF_INET]1.2.3.4:53: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=350 DATA len=40
Fri May  8 22:29:59 2020 us=867018 UDP READ [66] from [AF_INET]1.2.3.4:53: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=350 DATA len=52
Fri May  8 22:29:59 2020 us=867056 TLS: Initial packet from [AF_INET]1.2.3.4:53, sid=d4ad7883 85e66936
Fri May  8 22:29:59 2020 us=867108 UDP WRITE [62] to [AF_INET]1.2.3.4:53: P_ACK_V1 kid=0 [ ]
Fri May  8 22:29:59 2020 us=867211 UDP WRITE [331] to [AF_INET]1.2.3.4:53: P_CONTROL_V1 kid=0 [ ] pid=862 DATA len=317
Fri May  8 22:29:59 2020 us=906030 UDP READ [1128] from [AF_INET]1.2.3.4:53: P_CONTROL_V1 kid=0 [ ] pid=606 DATA len=1114
Fri May  8 22:29:59 2020 us=906178 UDP WRITE [62] to [AF_INET]1.2.3.4:53: P_ACK_V1 kid=0 [ ]
Fri May  8 22:29:59 2020 us=906265 UDP READ [1116] from [AF_INET]1.2.3.4:53: P_CONTROL_V1 kid=0 [ ] pid=862 DATA len=1102
Fri May  8 22:29:59 2020 us=906341 UDP WRITE [62] to [AF_INET]1.2.3.4:53: P_ACK_V1 kid=0 [ ]
Fri May  8 22:29:59 2020 us=908703 UDP READ [1116] from [AF_INET]1.2.3.4:53: P_CONTROL_V1 kid=0 [ ] pid=1118 DATA len=1102
Fri May  8 22:29:59 2020 us=908824 UDP WRITE [62] to [AF_INET]1.2.3.4:53: P_ACK_V1 kid=0 [ ]
Fri May  8 22:29:59 2020 us=908913 UDP READ [1116] from [AF_INET]1.2.3.4:53: P_CONTROL_V1 kid=0 [ ] pid=1374 DATA len=1102
Fri May  8 22:29:59 2020 us=908987 UDP WRITE [62] to [AF_INET]1.2.3.4:53: P_ACK_V1 kid=0 [ ]
Fri May  8 22:29:59 2020 us=941979 UDP READ [1116] from [AF_INET]1.2.3.4:53: P_CONTROL_V1 kid=0 [ ] pid=1630 DATA len=1102
Fri May  8 22:29:59 2020 us=942074 UDP WRITE [62] to [AF_INET]1.2.3.4:53: P_ACK_V1 kid=0 [ ]
Fri May  8 22:29:59 2020 us=942149 UDP READ [1040] from [AF_INET]1.2.3.4:53: P_CONTROL_V1 kid=0 [ ] pid=1886 DATA len=1026
Fri May  8 22:29:59 2020 us=942636 VERIFY OK: depth=2, xxx
Fri May  8 22:29:59 2020 us=943250 VERIFY OK: depth=1, xxx
Fri May  8 22:29:59 2020 us=943822 VERIFY KU OK
Fri May  8 22:29:59 2020 us=943833 Validating certificate extended key usage
Fri May  8 22:29:59 2020 us=943839 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Fri May  8 22:29:59 2020 us=943844 VERIFY EKU OK
Fri May  8 22:29:59 2020 us=943848 VERIFY OK: CN=server.hide.com
Fri May  8 22:29:59 2020 us=952065 UDP WRITE [1128] to [AF_INET]1.2.3.4:53: P_CONTROL_V1 kid=0 [ ] pid=2398 DATA len=1114
Fri May  8 22:29:59 2020 us=952223 UDP WRITE [1116] to [AF_INET]1.2.3.4:53: P_CONTROL_V1 kid=0 [ ] pid=2654 DATA len=1102
Fri May  8 22:29:59 2020 us=952298 UDP WRITE [298] to [AF_INET]1.2.3.4:53: P_CONTROL_V1 kid=0 [ ] pid=2910 DATA len=284
Fri May  8 22:29:59 2020 us=984797 UDP READ [62] from [AF_INET]1.2.3.4:53: P_ACK_V1 kid=0 [ ]
Fri May  8 22:29:59 2020 us=985410 UDP READ [62] from [AF_INET]1.2.3.4:53: P_ACK_V1 kid=0 [ ]
Fri May  8 22:29:59 2020 us=985784 UDP READ [117] from [AF_INET]1.2.3.4:53: P_CONTROL_V1 kid=0 [ ] pid=2654 DATA len=103
Fri May  8 22:29:59 2020 us=985900 UDP WRITE [498] to [AF_INET]1.2.3.4:53: P_CONTROL_V1 kid=0 [ ] pid=3166 DATA len=484
Fri May  8 22:30:01 2020 us=177757 UDP WRITE [486] to [AF_INET]1.2.3.4:53: P_CONTROL_V1 kid=0 [ ] pid=3422 DATA len=472
Fri May  8 22:30:02 2020 us=534988 UDP READ [310] from [AF_INET]1.2.3.4:53: P_CONTROL_V1 kid=0 [ ] pid=2910 DATA len=296
Fri May  8 22:30:02 2020 us=535090 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1550'
Fri May  8 22:30:02 2020 us=535126 WARNING: 'cipher' is used inconsistently, local='cipher BF-CBC', remote='cipher AES-256-GCM'
Fri May  8 22:30:02 2020 us=535145 WARNING: 'auth' is used inconsistently, local='auth SHA1', remote='auth [null-digest]'
Fri May  8 22:30:02 2020 us=535164 WARNING: 'keysize' is used inconsistently, local='keysize 128', remote='keysize 256'
Fri May  8 22:30:02 2020 us=535272 UDP WRITE [62] to [AF_INET]1.2.3.4:53: P_ACK_V1 kid=0 [ ]
Fri May  8 22:30:02 2020 us=535338 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Fri May  8 22:30:02 2020 us=535368 [server.hide.com] Peer Connection Initiated with [AF_INET]1.2.3.4:53
Fri May  8 22:30:02 2020 us=535402 UDP READ [62] from [AF_INET]1.2.3.4:53: P_ACK_V1 kid=0 [ ]
Fri May  8 22:30:03 2020 us=727510 SENT CONTROL [server.hide.com]: 'PUSH_REQUEST' (status=1)
Fri May  8 22:30:03 2020 us=727603 UDP WRITE [96] to [AF_INET]1.2.3.4:53: P_CONTROL_V1 kid=0 [ ] pid=3934 DATA len=82
Fri May  8 22:30:03 2020 us=762100 UDP READ [62] from [AF_INET]1.2.3.4:53: P_ACK_V1 kid=0 [ ]
Fri May  8 22:30:03 2020 us=762182 UDP READ [445] from [AF_INET]1.2.3.4:53: P_CONTROL_V1 kid=0 [ ] pid=3678 DATA len=431
Fri May  8 22:30:03 2020 us=762262 PUSH: Received control message: 'PUSH_REPLY,explicit-exit-notify 3,topology subnet,dhcp-option DNS 192.196.84.53,dhcp-option DNS 10.133.8.77,dhcp-option DOMAIN bureau.si.interne,dhcp-option DOMAIN grovsdma,dhcp-option DOMAIN rte-france.com,redirect-gateway def1,route-gateway 10.132.219.1,topology subnet,ping 5,ping-restart 60,ifconfig 10.132.219.2 255.255.255.128,peer-id 1,cipher AES-256-GCM'
Fri May  8 22:30:03 2020 us=762298 Options error: option 'dhcp-option' cannot be used in this context ([PUSH-OPTIONS])
Fri May  8 22:30:03 2020 us=762310 Options error: option 'dhcp-option' cannot be used in this context ([PUSH-OPTIONS])
Fri May  8 22:30:03 2020 us=762320 Options error: option 'dhcp-option' cannot be used in this context ([PUSH-OPTIONS])
Fri May  8 22:30:03 2020 us=762329 Options error: option 'dhcp-option' cannot be used in this context ([PUSH-OPTIONS])
Fri May  8 22:30:03 2020 us=762339 Options error: option 'dhcp-option' cannot be used in this context ([PUSH-OPTIONS])
Fri May  8 22:30:03 2020 us=762349 Options error: option 'redirect-gateway' cannot be used in this context ([PUSH-OPTIONS])
Fri May  8 22:30:03 2020 us=762402 OPTIONS IMPORT: timers and/or timeouts modified
Fri May  8 22:30:03 2020 us=762410 OPTIONS IMPORT: explicit notify parm(s) modified
Fri May  8 22:30:03 2020 us=762416 OPTIONS IMPORT: --ifconfig/up options modified
Fri May  8 22:30:03 2020 us=762422 OPTIONS IMPORT: route-related options modified
Fri May  8 22:30:03 2020 us=762428 OPTIONS IMPORT: peer-id set
Fri May  8 22:30:03 2020 us=762434 OPTIONS IMPORT: adjusting link_mtu to 1625
Fri May  8 22:30:03 2020 us=762440 OPTIONS IMPORT: data channel crypto options modified
Fri May  8 22:30:03 2020 us=762448 Data Channel: using negotiated cipher 'AES-256-GCM'
Fri May  8 22:30:03 2020 us=762461 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 48 bytes
Fri May  8 22:30:03 2020 us=762472 Data Channel MTU parms [ L:1553 D:1450 EF:53 EB:406 ET:0 EL:3 ]
Fri May  8 22:30:03 2020 us=762596 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri May  8 22:30:03 2020 us=762610 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri May  8 22:30:03 2020 us=766585 Opening utun (connect(AF_SYS_CONTROL)): Resource busy (errno=16)
Fri May  8 22:30:03 2020 us=766604 Opening utun (connect(AF_SYS_CONTROL)): Resource busy (errno=16)
Fri May  8 22:30:03 2020 us=766722 Opened utun device utun2
Fri May  8 22:30:03 2020 us=766736 do_ifconfig, ipv4=1, ipv6=0
Fri May  8 22:30:03 2020 us=766756 /sbin/ifconfig utun2 delete
ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
Fri May  8 22:30:03 2020 us=770981 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
Fri May  8 22:30:03 2020 us=771049 /sbin/ifconfig utun2 10.132.219.2 10.132.219.2 netmask 255.255.255.128 mtu 1500 up
Fri May  8 22:30:03 2020 us=773760 /sbin/route add -net 10.132.219.0 10.132.219.2 255.255.255.128
add net 10.132.219.0: gateway 10.132.219.2
Fri May  8 22:30:03 2020 us=777498 /etc/openvpn/update-resolv-conf utun2 1500 1553 10.132.219.2 255.255.255.128 init
updating dns for Wi-Fi
updating dns for Thunderbolt Bridge
updating dns for Bluetooth PAN
updating dns for PureVPN
Fri May  8 22:30:03 2020 us=800055 /sbin/route add -net 10.0.0.0 10.132.219.1 255.0.0.0
add net 10.0.0.0: gateway 10.132.219.1
Fri May  8 22:30:03 2020 us=802344 /sbin/route add -net 163.104.0.0 10.132.219.1 255.255.0.0
add net 163.104.0.0: gateway 10.132.219.1
Fri May  8 22:30:03 2020 us=804289 Initialization Sequence Completed
Fri May  8 22:30:03 2020 us=804344 UDP WRITE [62] to [AF_INET]1.2.3.4:53: P_ACK_V1 kid=0 [ ]
Fri May  8 22:30:04 2020 us=778606 UDP READ [109] from [AF_INET]1.2.3.4:53: P_DATA_V2 kid=0 DATA len=108
Fri May  8 22:30:04 2020 us=778910 UDP WRITE [109] to [AF_INET]1.2.3.4:53: P_DATA_V2 kid=0 DATA len=108
Fri May  8 22:30:05 2020 us=613264 UDP READ [109] from [AF_INET]1.2.3.4:53: P_DATA_V2 kid=0 DATA len=108
Fri May  8 22:30:05 2020 us=613422 UDP WRITE [109] to [AF_INET]1.2.3.4:53: P_DATA_V2 kid=0 DATA len=108
Fri May  8 22:30:05 2020 us=663613 UDP READ [85] from [AF_INET]1.2.3.4:53: P_DATA_V2 kid=0 DATA len=84
Fri May  8 22:30:05 2020 us=663859 UDP WRITE [65] to [AF_INET]1.2.3.4:53: P_DATA_V2 kid=0 DATA len=64
Fri May  8 22:30:08 2020 us=378001 UDP WRITE [109] to [AF_INET]1.2.3.4:53: P_DATA_V2 kid=0 DATA len=108
Fri May  8 22:30:08 2020 us=414506 UDP READ [109] from [AF_INET]1.2.3.4:53: P_DATA_V2 kid=0 DATA len=108

[...]

Fri May  8 22:43:24 2020 us=485729 UDP READ [41] from [AF_INET]1.2.3.4:53: P_DATA_V2 kid=0 DATA len=40
Fri May  8 22:43:29 2020 us=456961 UDP READ [41] from [AF_INET]1.2.3.4:53: P_DATA_V2 kid=0 DATA len=40
Fri May  8 22:43:29 2020 us=457034 UDP WRITE [41] to [AF_INET]1.2.3.4:53: P_DATA_V2 kid=0 DATA len=40
Fri May  8 22:43:34 2020 us=370389 UDP READ [41] from [AF_INET]1.2.3.4:53: P_DATA_V2 kid=0 DATA len=40
Fri May  8 22:43:34 2020 us=370456 UDP WRITE [41] to [AF_INET]1.2.3.4:53: P_DATA_V2 kid=0 DATA len=40
Fri May  8 22:43:39 2020 us=323685 UDP WRITE [109] to [AF_INET]1.2.3.4:53: P_DATA_V2 kid=0 DATA len=108
Fri May  8 22:43:39 2020 us=386597 UDP READ [41] from [AF_INET]1.2.3.4:53: P_DATA_V2 kid=0 DATA len=40
Fri May  8 22:43:39 2020 us=420389 UDP READ [109] from [AF_INET]1.2.3.4:53: P_DATA_V2 kid=0 DATA len=108
Fri May  8 22:43:44 2020 us=581275 UDP WRITE [41] to [AF_INET]1.2.3.4:53: P_DATA_V2 kid=0 DATA len=40
Fri May  8 22:43:44 2020 us=714057 UDP READ [41] from [AF_INET]1.2.3.4:53: P_DATA_V2 kid=0 DATA len=40
Fri May  8 22:48:29 2020 us=1172 [server.hide.com] Inactivity timeout (--ping-restart), restarting
Fri May  8 22:48:29 2020 us=1539 TCP/UDP: Closing socket
Fri May  8 22:48:29 2020 us=1617 /sbin/route delete -net 10.0.0.0 10.132.219.1 255.0.0.0
delete net 10.0.0.0: gateway 10.132.219.1
Fri May  8 22:48:29 2020 us=12043 Closing TUN/TAP interface

TinCanTech

gguest64 wrote Client Config

route-nopull

Do not use this.

gguest64

TinCanTech wrote Do not use this.

Thanks for your reply TinCanTech.

It was only a test for reducing traffic in tunnel and limit log.
Problem occur without route-nopull.

For my information, why client route overridding could be an issue ?

gguest64

Hello,

I didn't solve my issue, some clients are randomly disconnected.

Suddendly, in log below, from 25 07:36:05, there is no more TUN WRITE/UDP READ. Other clients connected to server does not see any problem.

Internet client connection seem to be ok (wire connection) and it could reconnect to server immediately after server timeout.

Someone have ideas or areas of investigations ?

Thank you very much.

*** Client Log (verb=6)

Mon May 25 07:26:41 2020 us=481195 OpenVPN 2.4.8 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Nov  1 2019
Mon May 25 07:26:41 2020 us=481223 library versions: OpenSSL 1.1.1d FIPS  10 Sep 2019, LZO 2.08
Mon May 25 07:26:58 2020 us=797770 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Mon May 25 07:26:58 2020 us=797793 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Mon May 25 07:26:58 2020 us=797799 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Mon May 25 07:26:58 2020 us=797808 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Mon May 25 07:26:58 2020 us=797896 Control Channel MTU parms [ L:1622 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Mon May 25 07:26:58 2020 us=845549 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Mon May 25 07:26:58 2020 us=845595 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon May 25 07:26:58 2020 us=845601 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon May 25 07:26:58 2020 us=845609 TCP/UDP: Preserving recently used remote address: [AF_INET]X.8.31.43:53
Mon May 25 07:26:58 2020 us=845628 Socket Buffers: R=[212992->212992] S=[212992->212992]
Mon May 25 07:26:58 2020 us=845633 UDP link local: (not bound)
Mon May 25 07:26:58 2020 us=845638 UDP link remote: [AF_INET]X.8.31.43:53
Mon May 25 07:26:58 2020 us=845673 UDP WRITE [54] to [AF_INET]X.8.31.43:53: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=350 DATA len=40
Mon May 25 07:26:58 2020 us=883310 UDP READ [66] from [AF_INET]X.8.31.43:53: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=350 DATA len=52
Mon May 25 07:26:58 2020 us=883392 TLS: Initial packet from [AF_INET]X.8.31.43:53, sid=d0f3eb1f 44cceb5f
Mon May 25 07:26:58 2020 us=883446 UDP WRITE [62] to [AF_INET]X.8.31.43:53: P_ACK_V1 kid=0 [ ]
Mon May 25 07:26:58 2020 us=883523 UDP WRITE [333] to [AF_INET]X.8.31.43:53: P_CONTROL_V1 kid=0 [ ] pid=862 DATA len=319
Mon May 25 07:26:58 2020 us=923524 UDP READ [1128] from [AF_INET]X.8.31.43:53: P_CONTROL_V1 kid=0 [ ] pid=606 DATA len=1114
Mon May 25 07:26:58 2020 us=923640 UDP WRITE [62] to [AF_INET]X.8.31.43:53: P_ACK_V1 kid=0 [ ]
Mon May 25 07:26:58 2020 us=923903 UDP READ [1116] from [AF_INET]X.8.31.43:53: P_CONTROL_V1 kid=0 [ ] pid=862 DATA len=1102
Mon May 25 07:26:58 2020 us=923959 UDP WRITE [62] to [AF_INET]X.8.31.43:53: P_ACK_V1 kid=0 [ ]
Mon May 25 07:26:58 2020 us=924006 UDP READ [1116] from [AF_INET]X.8.31.43:53: P_CONTROL_V1 kid=0 [ ] pid=1118 DATA len=1102
Mon May 25 07:26:58 2020 us=924043 UDP WRITE [62] to [AF_INET]X.8.31.43:53: P_ACK_V1 kid=0 [ ]
Mon May 25 07:26:58 2020 us=924089 UDP READ [1116] from [AF_INET]X.8.31.43:53: P_CONTROL_V1 kid=0 [ ] pid=1374 DATA len=1102
Mon May 25 07:26:58 2020 us=924127 UDP WRITE [62] to [AF_INET]X.8.31.43:53: P_ACK_V1 kid=0 [ ]
Mon May 25 07:26:58 2020 us=962899 UDP READ [1116] from [AF_INET]X.8.31.43:53: P_CONTROL_V1 kid=0 [ ] pid=1630 DATA len=1102
Mon May 25 07:26:58 2020 us=963000 UDP WRITE [62] to [AF_INET]X.8.31.43:53: P_ACK_V1 kid=0 [ ]
Mon May 25 07:26:58 2020 us=963345 UDP READ [1040] from [AF_INET]X.8.31.43:53: P_CONTROL_V1 kid=0 [ ] pid=1886 DATA len=1026
Mon May 25 07:26:58 2020 us=963727 VERIFY OK: depth=2, XXX
Mon May 25 07:26:58 2020 us=964035 VERIFY OK: depth=1, XXX
Mon May 25 07:26:58 2020 us=964342 VERIFY KU OK
Mon May 25 07:26:58 2020 us=964369 Validating certificate extended key usage
Mon May 25 07:26:58 2020 us=964386 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Mon May 25 07:26:58 2020 us=964401 VERIFY EKU OK
Mon May 25 07:26:58 2020 us=964416 VERIFY OK: depth=0, XXX
Mon May 25 07:26:58 2020 us=966952 UDP WRITE [1128] to [AF_INET]X.8.31.43:53: P_CONTROL_V1 kid=0 [ ] pid=2398 DATA len=1114
Mon May 25 07:26:58 2020 us=967050 UDP WRITE [1116] to [AF_INET]X.8.31.43:53: P_CONTROL_V1 kid=0 [ ] pid=2654 DATA len=1102
Mon May 25 07:26:58 2020 us=967103 UDP WRITE [188] to [AF_INET]X.8.31.43:53: P_CONTROL_V1 kid=0 [ ] pid=2910 DATA len=174
Mon May 25 07:26:59 2020 us=7079 UDP READ [62] from [AF_INET]X.8.31.43:53: P_ACK_V1 kid=0 [ ]
Mon May 25 07:26:59 2020 us=9018 UDP READ [62] from [AF_INET]X.8.31.43:53: P_ACK_V1 kid=0 [ ]
Mon May 25 07:26:59 2020 us=9254 UDP READ [117] from [AF_INET]X.8.31.43:53: P_CONTROL_V1 kid=0 [ ] pid=2654 DATA len=103
Mon May 25 07:26:59 2020 us=9353 UDP WRITE [488] to [AF_INET]X.8.31.43:53: P_CONTROL_V1 kid=0 [ ] pid=3166 DATA len=474
Mon May 25 07:26:59 2020 us=627402 UDP READ [310] from [AF_INET]X.8.31.43:53: P_CONTROL_V1 kid=0 [ ] pid=2910 DATA len=296
Mon May 25 07:26:59 2020 us=627536 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1550'
Mon May 25 07:26:59 2020 us=627599 WARNING: 'cipher' is used inconsistently, local='cipher BF-CBC', remote='cipher AES-256-GCM'
Mon May 25 07:26:59 2020 us=627669 WARNING: 'auth' is used inconsistently, local='auth SHA1', remote='auth [null-digest]'
Mon May 25 07:26:59 2020 us=627724 WARNING: 'keysize' is used inconsistently, local='keysize 128', remote='keysize 256'
Mon May 25 07:26:59 2020 us=627872 UDP WRITE [62] to [AF_INET]X.8.31.43:53: P_ACK_V1 kid=0 [ ]
Mon May 25 07:26:59 2020 us=627987 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon May 25 07:26:59 2020 us=628055 [vpn.mydomain.com] Peer Connection Initiated with [AF_INET]X.8.31.43:53
Mon May 25 07:27:00 2020 us=640179 SENT CONTROL [vpn.mydomain.com]: 'PUSH_REQUEST' (status=1)
Mon May 25 07:27:00 2020 us=640217 UDP WRITE [96] to [AF_INET]X.8.31.43:53: P_CONTROL_V1 kid=0 [ ] pid=3678 DATA len=82
Mon May 25 07:27:00 2020 us=679282 UDP READ [62] from [AF_INET]X.8.31.43:53: P_ACK_V1 kid=0 [ ]
Mon May 25 07:27:05 2020 us=706448 SENT CONTROL [vpn.mydomain.com]: 'PUSH_REQUEST' (status=1)
Mon May 25 07:27:05 2020 us=706568 UDP WRITE [96] to [AF_INET]X.8.31.43:53: P_CONTROL_V1 kid=0 [ ] pid=3934 DATA len=82
Mon May 25 07:27:05 2020 us=742982 UDP READ [62] from [AF_INET]X.8.31.43:53: P_ACK_V1 kid=0 [ ]
Mon May 25 07:27:05 2020 us=743168 UDP READ [445] from [AF_INET]X.8.31.43:53: P_CONTROL_V1 kid=0 [ ] pid=3678 DATA len=431
Mon May 25 07:27:05 2020 us=743297 PUSH: Received control message: 'PUSH_REPLY,explicit-exit-notify 3,topology subnet,dhcp-option DNS XXX,dhcp-option DOMAIN XXX,redirect-gateway def1,route-gateway 10.0.0.1,topology subnet,ping 5,ping-restart 60,ifconfig 10.0.0.6 255.255.255.128,peer-id 2,cipher AES-256-GCM'
Mon May 25 07:27:05 2020 us=743585 OPTIONS IMPORT: timers and/or timeouts modified
Mon May 25 07:27:05 2020 us=743614 OPTIONS IMPORT: explicit notify parm(s) modified
Mon May 25 07:27:05 2020 us=743628 OPTIONS IMPORT: --ifconfig/up options modified
Mon May 25 07:27:05 2020 us=743641 OPTIONS IMPORT: route options modified
Mon May 25 07:27:05 2020 us=743653 OPTIONS IMPORT: route-related options modified
Mon May 25 07:27:05 2020 us=743666 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon May 25 07:27:05 2020 us=743680 OPTIONS IMPORT: peer-id set
Mon May 25 07:27:05 2020 us=743699 OPTIONS IMPORT: adjusting link_mtu to 1625
Mon May 25 07:27:05 2020 us=743719 OPTIONS IMPORT: data channel crypto options modified
Mon May 25 07:27:05 2020 us=743742 Data Channel: using negotiated cipher 'AES-256-GCM'
Mon May 25 07:27:05 2020 us=743783 Data Channel MTU parms [ L:1553 D:1450 EF:53 EB:406 ET:0 EL:3 ]
Mon May 25 07:27:05 2020 us=743986 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Mon May 25 07:27:05 2020 us=744015 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Mon May 25 07:27:05 2020 us=744363 ROUTE_GATEWAY 130.98.38.1/255.255.255.0 IFACE=enp62s0u1 HWADDR=a4:4c:c8:fc:1f:8f
Mon May 25 07:27:05 2020 us=744992 TUN/TAP device tun0 opened
Mon May 25 07:27:05 2020 us=745147 TUN/TAP TX queue length set to 100
Mon May 25 07:27:05 2020 us=745324 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Mon May 25 07:27:05 2020 us=745450 /sbin/ip link set dev tun0 up mtu 1500
Mon May 25 07:27:05 2020 us=759055 /sbin/ip addr add dev tun0 10.0.0.6/25 broadcast 10.0.0.127
Mon May 25 07:27:05 2020 us=766566 /sbin/ip route add X.8.31.43/32 via 130.98.38.1
Mon May 25 07:27:05 2020 us=775323 /sbin/ip route add 0.0.0.0/1 via 10.0.0.1
Mon May 25 07:27:05 2020 us=778683 /sbin/ip route add 128.0.0.0/1 via 10.0.0.1
Mon May 25 07:27:05 2020 us=781896 Initialization Sequence Completed
Mon May 25 07:27:05 2020 us=781986 UDP WRITE [62] to [AF_INET]X.8.31.43:53: P_ACK_V1 kid=0 [ ]
Mon May 25 07:27:05 2020 us=782087 TUN READ [48]
Mon May 25 07:27:05 2020 us=782137 UDP WRITE [73] to [AF_INET]X.8.31.43:53: P_DATA_V2 kid=0 DATA len=72
Mon May 25 07:27:05 2020 us=819447 TUN READ [60]
[...]
Mon May 25 07:36:05 2020 us=90183 UDP WRITE [77] to [AF_INET]X.8.31.43:53: P_DATA_V2 kid=0 DATA len=76
Mon May 25 07:36:05 2020 us=90304 TUN READ [52]
Mon May 25 07:36:05 2020 us=90365 UDP WRITE [77] to [AF_INET]X.8.31.43:53: P_DATA_V2 kid=0 DATA len=76
Mon May 25 07:36:05 2020 us=98768 UDP READ [1422] from [AF_INET]X.8.31.43:53: P_DATA_V2 kid=0 DATA len=1421
Mon May 25 07:36:05 2020 us=98869 TUN WRITE [1397]
Mon May 25 07:36:05 2020 us=98993 TUN READ [52]
Mon May 25 07:36:05 2020 us=99059 UDP WRITE [77] to [AF_INET]X.8.31.43:53: P_DATA_V2 kid=0 DATA len=76
Mon May 25 07:36:05 2020 us=102578 UDP READ [1422] from [AF_INET]X.8.31.43:53: P_DATA_V2 kid=0 DATA len=1421
Mon May 25 07:36:05 2020 us=102663 TUN WRITE [1397]
Mon May 25 07:36:05 2020 us=102790 UDP READ [1422] from [AF_INET]X.8.31.43:53: P_DATA_V2 kid=0 DATA len=1421
Mon May 25 07:36:05 2020 us=102852 TUN WRITE [1397]
Mon May 25 07:36:05 2020 us=102936 UDP READ [1422] from [AF_INET]X.8.31.43:53: P_DATA_V2 kid=0 DATA len=1421
Mon May 25 07:36:05 2020 us=103034 TUN WRITE [1397]
Mon May 25 07:36:05 2020 us=103136 TUN READ [52]
Mon May 25 07:36:05 2020 us=103221 UDP WRITE [77] to [AF_INET]X.8.31.43:53: P_DATA_V2 kid=0 DATA len=76
Mon May 25 07:36:05 2020 us=103328 UDP READ [1306] from [AF_INET]X.8.31.43:53: P_DATA_V2 kid=0 DATA len=1305
Mon May 25 07:36:05 2020 us=103375 TUN WRITE [1281]

-- ISSUE ---

Mon May 25 07:36:05 2020 us=103465 TUN READ [52]
Mon May 25 07:36:05 2020 us=103542 UDP WRITE [77] to [AF_INET]X.8.31.43:53: P_DATA_V2 kid=0 DATA len=76
Mon May 25 07:36:05 2020 us=103642 TUN READ [52]
Mon May 25 07:36:05 2020 us=103706 UDP WRITE [77] to [AF_INET]X.8.31.43:53: P_DATA_V2 kid=0 DATA len=76
Mon May 25 07:36:05 2020 us=104964 TUN READ [52]
Mon May 25 07:36:05 2020 us=105079 UDP WRITE [77] to [AF_INET]X.8.31.43:53: P_DATA_V2 kid=0 DATA len=76
Mon May 25 07:36:05 2020 us=105298 TUN READ [60]
Mon May 25 07:36:05 2020 us=105384 UDP WRITE [85] to [AF_INET]X.8.31.43:53: P_DATA_V2 kid=0 DATA len=84
Mon May 25 07:36:05 2020 us=348429 TUN READ [52]
[...]
Mon May 25 07:37:04 2020 us=508352 UDP WRITE [85] to [AF_INET]X.8.31.43:53: P_DATA_V2 kid=0 DATA len=84
Mon May 25 07:37:04 2020 us=508443 TUN READ [60]
Mon May 25 07:37:04 2020 us=508521 UDP WRITE [85] to [AF_INET]X.8.31.43:53: P_DATA_V2 kid=0 DATA len=84
Mon May 25 07:37:05 2020 us=648948 [vpn.mydomain.com] Inactivity timeout (--ping-restart), restarting
Mon May 25 07:37:05 2020 us=649554 TCP/UDP: Closing socket

*** Server log (verb=4)

May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 Re-using SSL/TLS context
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 Control Channel MTU parms [ L:1622 D:1156 EF:94 EB:0 ET:0 EL:3 ]
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1550,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-server'
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1550,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-client'
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 TLS: Initial packet from [AF_INET]X.207.31.37:54806, sid=8fcfe2b8 5dd398c0
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 VERIFY OK: depth=2, XXX
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 VERIFY OK: depth=1, XXX
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 VERIFY OK: depth=0, XXX
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 peer info: IV_VER=2.4.8
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 peer info: IV_PLAT=linux
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 peer info: IV_PROTO=2
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 peer info: IV_NCP=2
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 peer info: IV_LZ4=1
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 peer info: IV_LZ4v2=1
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 peer info: IV_LZO=1
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 peer info: IV_COMP_STUB=1
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 peer info: IV_COMP_STUBv2=1
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 peer info: IV_TCPNL=1
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 PLUGIN_CALL: POST /etc/openvpn/plugins/radiusplugin.so/PLUGIN_AUTH_USER_PASS_VERIFY status=2
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 TLS: Username/Password authentication deferred for username 'user_vpn' [CN SET]
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1550', remote='link-mtu 1542'
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 WARNING: 'cipher' is used inconsistently, local='cipher AES-256-GCM', remote='cipher BF-CBC'
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 WARNING: 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA1'
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 WARNING: 'keysize' is used inconsistently, local='keysize 256', remote='keysize 128'
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
May 25 07:26:59 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 [user_vpn] Peer Connection Initiated with [AF_INET]X.207.31.37:54806
May 25 07:27:00 myserver01 openvpn-wdw-udp[974]: X.207.31.37:54806 PUSH: Received control message: 'PUSH_REQUEST'
May 25 07:27:02 myserver01 openvpn-wdw-udp[974]: user_vpn/X.207.31.37:54806 MULTI_sva: pool returned IPv4=10.0.0.6, IPv6=(Not enabled)
May 25 07:27:02 myserver01 openvpn-wdw-udp[974]: user_vpn/X.207.31.37:54806 PLUGIN_CALL: POST /etc/openvpn/plugins/radiusplugin.so/PLUGIN_CLIENT_CONNECT status=0
May 25 07:27:02 myserver01 openvpn-wdw-udp[974]: user_vpn/X.207.31.37:54806 OPTIONS IMPORT: reading client specific options from: /tmp/openvpn_cc_258f895890034ba88d5ee87bea307.tmp
May 25 07:27:02 myserver01 openvpn-wdw-udp[974]: user_vpn/X.207.31.37:54806 OPTIONS IMPORT: reading client specific options from: /tmp/openvpn_cc_3cf69f39095b7c036a4b2a49f6961ba3.tmp
May 25 07:27:02 myserver01 openvpn-wdw-udp[974]: user_vpn/X.207.31.37:54806 MULTI: Learn: 10.0.0.6 -> user_vpn/X.207.31.37:54806
May 25 07:27:02 myserver01 openvpn-wdw-udp[974]: user_vpn/X.207.31.37:54806 MULTI: primary virtual IP for user_vpn/X.207.31.37:54806: 10.0.0.6
May 25 07:27:05 myserver01 openvpn-wdw-udp[974]: user_vpn/X.207.31.37:54806 PUSH: Received control message: 'PUSH_REQUEST'
May 25 07:27:05 myserver01 openvpn-wdw-udp[974]: user_vpn/X.207.31.37:54806 SENT CONTROL [user_vpn]: 'PUSH_REPLY,explicit-exit-notify 3,topology subnet,dhcp-option DNS XXX,redirect-gateway def1,route-gateway 10.0.0.1,topology subnet,ping 5,ping-restart 60,ifconfig 10.132.219.6 255.255.255.128,peer-id 2,cipher AES-256-GCM' (status=1)
May 25 07:27:05 myserver01 openvpn-wdw-udp[974]: user_vpn/X.207.31.37:54806 Data Channel MTU parms [ L:1550 D:1450 EF:50 EB:406 ET:0 EL:3 ]
May 25 07:27:05 myserver01 openvpn-wdw-udp[974]: user_vpn/X.207.31.37:54806 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
May 25 07:27:05 myserver01 openvpn-wdw-udp[974]: user_vpn/X.207.31.37:54806 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key

-- ISSUE --

May 25 07:39:05 myserver01 openvpn-wdw-udp[974]: user_vpn/X.207.31.37:54806 [user_vpn] Inactivity timeout (--ping-restart), restarting
May 25 07:39:05 myserver01 openvpn-wdw-udp[974]: user_vpn/X.207.31.37:54806 SIGUSR1[soft,ping-restart] received, client-instance restarting

TinCanTech

Why is your server pushing "route-gateway 10.0.0.1" ?

gguest64

TinCanTech wrote Why is your server pushing "route-gateway 10.0.0.1" ?

Internals IP have been randomomized in second post.

When client is connected, there is no routing issue, LAN and Internet are reachables. There is no subnet overlap and each client have dedicated certificate.

Thank you very much.