Hello folks ! I'm new at OpenVPN and I, probably, do something wrong with my configuration. My use case: [list] [*] I want my GitHub Actions to use OpenVPN to be seen connected from Paris with a public IP address which is NOT GitHub ones. [/list] I have already configured OpenVPN Cloud (once connection at a time is great enough) as following: [list] [*]a user [i]github-actions[/i], belonging to a [i]github-actions-group[/i], whose default Region is Paris. [*]a Network with: [list] [*]a domain on ipify.org (to use [url=https://api.ipify.org/]api.ipify.org[/url] and check if my public IP has changed before/after the use of OpenVPN) [*]a service allowing all Protocol to call ipify.org (https is used to call ipify.org) [/list] [/list] Whatever I use user [b]OR[/b] Network's connector profile to connect to OpenVPN, I have always the same behavior: [list] [*] if I allow all Internet traffic on (Split Tunnel On) on Group, my public IP is the same before and after the use of OpenVPN [*] if I refuse all Internet traffic (Restricted Internet) on Group, my call to ipify.org AFTER the use of OpenVPN is refused: [code]curl: (7) Failed to connect to api.ipify.org port 443: Connection refused[/code] [/list] In my mind / understanding, it is as if the User & Group configurations are well taken into account, but the trusted domain is not linked to the group, or taken into account. To complete what I did / did not: [list] [*] I did NOT change VPN Subnets configurations, whatever on Group or Network. [*] I did NOT configure a Hosts. [*] I did use this [url=https://github.com/kota65535/github-openvpn-connect-action]GitHub Action[/url] to connect, and configure config.ovpn following [url=https://grrr.tech/posts/2021/github-actions-openvpn/]this article[/url]. [/list] I surely miss something really basic in configuration, or in OpenVPN concept. Thanks for your help. HawkBlade

Hello again, I've just made new tests, on my own computer using MacOS's OpenVPN Connect Client, and using my User Profile. [list] [*] When configured in "Split Tunnel On", untrusted traffic [b]is[/b] reachable, but trusted domains are not : [code]ping ipify.org PING ipify.org (100.81.41.118): 56 data bytes Request timeout for icmp_seq 0 Request timeout for icmp_seq 1 Request timeout for icmp_seq 2[/code] [*] When configured as "Restricted Internet", untrustred traffic is [b]not[/b] reachable (connection refused), and trusted domains are also [b]timed out[/b]. [/list] I do not understand why the behavior is a little bit different from my GitHub Actions Installation than for my local OpenVPN Connect Client but, whatever, there is still an issue even on a full OpenVPN installation... Thx for your help.

Trusted Domain is not used, and so not reachable

hawkblade

Hello folks !
I'm new at OpenVPN and I, probably, do something wrong with my configuration.

My use case:

I want my GitHub Actions to use OpenVPN to be seen connected from Paris with a public IP address which is NOT GitHub ones.

I have already configured OpenVPN Cloud (once connection at a time is great enough) as following:

a user github-actions, belonging to a github-actions-group, whose default Region is Paris.
a Network with:
- a domain on ipify.org (to use api.ipify.org and check if my public IP has changed before/after the use of OpenVPN)
- a service allowing all Protocol to call ipify.org (https is used to call ipify.org)

Whatever I use user OR Network's connector profile to connect to OpenVPN, I have always the same behavior:

if I allow all Internet traffic on (Split Tunnel On) on Group, my public IP is the same before and after the use of OpenVPN

if I refuse all Internet traffic (Restricted Internet) on Group, my call to ipify.org AFTER the use of OpenVPN is refused:

curl: (7) Failed to connect to api.ipify.org port 443: Connection refused

In my mind / understanding, it is as if the User & Group configurations are well taken into account, but the trusted domain is not linked to the group, or taken into account.

To complete what I did / did not:

I did NOT change VPN Subnets configurations, whatever on Group or Network.
I did NOT configure a Hosts.
I did use this GitHub Action to connect, and configure config.ovpn following this article.

I surely miss something really basic in configuration, or in OpenVPN concept.

Thanks for your help.
HawkBlade

hawkblade

Hello again,
I've just made new tests, on my own computer using MacOS's OpenVPN Connect Client, and using my User Profile.

When configured in "Split Tunnel On", untrusted traffic is reachable, but trusted domains are not :

ping ipify.org
PING ipify.org (100.81.41.118): 56 data bytes
Request timeout for icmp_seq 0
Request timeout for icmp_seq 1
Request timeout for icmp_seq 2

When configured as "Restricted Internet", untrustred traffic is not reachable (connection refused), and trusted domains are also timed out.

I do not understand why the behavior is a little bit different from my GitHub Actions Installation than for my local OpenVPN Connect Client but, whatever, there is still an issue even on a full OpenVPN installation...

Thx for your help.

hawkblade

OK, so reading this documentation https://openvpn.net/cloud-docs/user-guide-configuring-a-vpn-for-secure-access-to-internet/?_ga=2.98015834.47584206.1648581891-11331020.1647380979, I understand that a connector installed on a server of mine is required. I thought that OpenVPN provided this server / feature. Please tell me if my last sentence is right or wrong.

hawkblade

I made a new test using OpenVPN client (closely the same configuration I used) to a ProtonVPN server (providing an Internet gateway), and all works as I expected. So it was my configuration of OpenVPN cloud which was missing an internet gateway (I thought it was included).
This thread is closed.