Youtube traffic does not go through the VPN to the server

[theloop]

Hello, I am faced with a phenomenon that I can not explain. I have a PiHole on the local network and an external VPS that acts as an OpenVPN server. The PiHole (ubuntu) is connected to the VPS (ubuntu) as a client and the server successfully uses the PiHole as DHCP. Every other client is detected by the PiHole, pages that should be blocked, are blocked and tracked, everything as it should be. The IP addresses are also correct.

But now the problem: the traffic from computer clients (win10) is only partially routed through the VPN, or so it seems to me. The clients take the IP of the VPS, but when I open video platforms, like Youtube with a client, I see that the VPS does not handle this traffic. But when I connect an Android device as a client via OpenVPN to the VPS, everything works, both the PiHole and the Youtube traffic through the VPS.

Do you have a guess what this could be? I am grateful for any hint

Greetings

theloop

[TinCanTech]

Sounds like Windblows is screwing with you ..

viewtopic.php?f=30&t=22603

[theloop]

View OriginalClient Config

client
dev tun
proto udp
remote xx.xxx.xxx.xx9 11xx
redirect-gateway def1
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
auth SHA512
cipher AES-256-CBC
ignore-unknown-option block-outside-dns
block-outside-dns
verb 3
script-security 2
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf
<ca>

View OriginalServer Config

local xx.xxx.xxx.xx9
port 11xx
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh.pem
auth SHA512
tls-crypt tc.key
topology subnet
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1 passby-dhcp passby-dns"
ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 10.8.0.2"
#push "dhcp-option DNS 192.168.0.89"
keepalive 10 120
cipher AES-256-CBC
user nobody
group nogroup
persist-key
persist-tun
verb 3
crl-verify crl.pem
explicit-exit-notify

Sounds like Windblows is screwing with you ..

viewtopic.php?f=30&t=22603

@TinaCanTech yea, I thin so too, therefore how can i guarantee that every connection is forced togo through the vpn?

[TinCanTech]

ignore-unknown-option block-outside-dns
block-outside-dns

Maybe you should decide if you want this or not ?

[theloop]

you mean the duplication? i have now removed what occurs twice. it is still the case that, for example, amazon prime goes through the vpn, but youtube shows no reaction.

[TinCanTech]

What did you do now ?

[mcdutch]

In my case, it turned out Windows was defaulting to IPv6 for certain traffic, and PiHole wasn’t configured to handle that. Disabling IPv6 on the client side helped a lot, and I also forced DNS settings more aggressively in the VPN config. Still had to tweak routing tables manually a bit after connecting.

[mcdutch]

Aside from the network setup, I also ran into platform-specific issues when using video tools that required solid VPN routing. While looking for better editing tools on my PC, I found options beyond mobile apps like InShot. There's actually a way to get similar results with inshot download for pc alternatives, which gave me more control and features on desktop.