Youtube traffic does not go through the VPN to the server

theloop

Hello, I am faced with a phenomenon that I can not explain. I have a PiHole on the local network and an external VPS that acts as an OpenVPN server. The PiHole (ubuntu) is connected to the VPS (ubuntu) as a client and the server successfully uses the PiHole as DHCP. Every other client is detected by the PiHole, pages that should be blocked, are blocked and tracked, everything as it should be. The IP addresses are also correct.

But now the problem: the traffic from computer clients (win10) is only partially routed through the VPN, or so it seems to me. The clients take the IP of the VPS, but when I open video platforms, like Youtube with a client, I see that the VPS does not handle this traffic. But when I connect an Android device as a client via OpenVPN to the VPS, everything works, both the PiHole and the Youtube traffic through the VPS.

Do you have a guess what this could be? I am grateful for any hint 😃

Greetings

theloop

TinCanTech

Sounds like Windblows is screwing with you ..

https://forums.openvpn.net/viewtopic.php?f=30&t=22603

theloop

client
dev tun
proto udp
remote xx.xxx.xxx.xx9 11xx
redirect-gateway def1
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
auth SHA512
cipher AES-256-CBC
ignore-unknown-option block-outside-dns
block-outside-dns
verb 3
script-security 2
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf
<ca>

local xx.xxx.xxx.xx9
port 11xx
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh.pem
auth SHA512
tls-crypt tc.key
topology subnet
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1 passby-dhcp passby-dns"
ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 10.8.0.2"
#push "dhcp-option DNS 192.168.0.89"
keepalive 10 120
cipher AES-256-CBC
user nobody
group nogroup
persist-key
persist-tun
verb 3
crl-verify crl.pem
explicit-exit-notify

TinCanTech wrote Sounds like Windblows is screwing with you ..

https://forums.openvpn.net/viewtopic.php?f=30&t=22603

@TinaCanTech yea, I thin so too, therefore how can i guarantee that every connection is forced togo through the vpn?

TinCanTech

theloop wrote ignore-unknown-option block-outside-dns
block-outside-dns

Maybe you should decide if you want this or not ?

theloop

you mean the duplication? i have now removed what occurs twice. it is still the case that, for example, amazon prime goes through the vpn, but youtube shows no reaction.

TinCanTech

What did you do now ?

mcdutch

In my case, it turned out Windows was defaulting to IPv6 for certain traffic, and PiHole wasn’t configured to handle that. Disabling IPv6 on the client side helped a lot, and I also forced DNS settings more aggressively in the VPN config. Still had to tweak routing tables manually a bit after connecting.

itsJames

I faced a similar issue where some traffic wasn’t routing through the VPN while accessinghttps://shayaridaily.com/rangdari-shayari/ . In my case, it was due to split tunneling or missing routes in the VPN configuration.

Make sure all traffic is forced through the VPN (redirect-gateway option) and check DNS settings as well. After adjusting the routing rules, everything started going through the VPN correctly.