Version 3.4 keeps disconnecting and reconnecting every 10-15 seconds

Official client software for OpenVPN Access Server and OpenVPN Cloud.
Post Reply
grokker
OpenVpn Newbie
Posts: 4
Joined: Fri Aug 04, 2023 7:40 pm

Version 3.4 keeps disconnecting and reconnecting every 10-15 seconds

Post by grokker » Fri Aug 04, 2023 7:55 pm

I've tried it on three diffferent Windows computers and one MacOS one.

Maybe the problem is in a conflict with the server. I'm connecting to an Untangle 16.6.2 NG Firewall (now Arista NG Firewall).

OpenVPN Connect v. 3.3.7 on Windows works fine (I can't find where to download the previous version for MacOS).

Please ask for any log files that may help. I don't even know where they are.

4tonaf
OpenVpn Newbie
Posts: 1
Joined: Mon Aug 07, 2023 7:08 am

Re: Version 3.4 keeps disconnecting and reconnecting every 10-15 seconds

Post by 4tonaf » Mon Aug 07, 2023 7:10 am

for us its every 30 - 31 seconds.
Only windows, only as far as we can see the latest version, multiple sites, multiple users

User avatar
JosephS
OpenVPN Inc.
Posts: 54
Joined: Fri Feb 17, 2023 5:15 pm

Re: Version 3.4 keeps disconnecting and reconnecting every 10-15 seconds

Post by JosephS » Mon Aug 07, 2023 8:45 am

Hi,
Can you check the client logs and share the latest EVENT before the VPN disconnects?
It may provide some insight as to what may be causing the constant disconnect.

alb_73
OpenVpn Newbie
Posts: 1
Joined: Mon Aug 07, 2023 12:21 pm

Re: Version 3.4 keeps disconnecting and reconnecting every 10-15 seconds

Post by alb_73 » Mon Aug 07, 2023 12:25 pm

Hi,

Fixed this by adding the following custom options to the client configuration:

allow-compression asym
compress lz4

Then exclude the default compress option in the client configuration too.

Redeploy the openvpn config file to clients.

More details can be found here:

https://community.openvpn.net/openvpn/wiki/Compression

Hope this helps...

grokker
OpenVpn Newbie
Posts: 4
Joined: Fri Aug 04, 2023 7:40 pm

Re: Version 3.4 keeps disconnecting and reconnecting every 10-15 seconds

Post by grokker » Fri Aug 11, 2023 3:18 am

Here are the lines showing the disconnection (sensible information replaced with xxxxxx)

Code: Select all

⏎[Aug 11, 2023, 05:02:35] Connected via TUN_WIN
⏎[Aug 11, 2023, 05:02:35] LZO-ASYM init swap=0 asym=1
⏎[Aug 11, 2023, 05:02:35] Comp-stub init swap=0
⏎[Aug 11, 2023, 05:02:35] EVENT: CONNECTED xxxxxxxxxxxxxxxxxxxxx via /UDP on TUN_WIN/xxxxxxxxxx/ gw=[xxxxxxxxx/] mtu=(default)
⏎[Aug 11, 2023, 05:02:35] EVENT: COMPRESSION_ENABLED Asymmetric compression enabled.  Server may send compressed data.  This may be a potential security issue.
⏎[Aug 11, 2023, 05:03:04] Session invalidated: KEEPALIVE_TIMEOUT
⏎[Aug 11, 2023, 05:03:04] Client terminated, restarting in 2000 ms...
⏎[Aug 11, 2023, 05:03:04] SetupClient: signaling tun destroy event
⏎[Aug 11, 2023, 05:03:06] EVENT: RECONNECTING
⏎[Aug 11, 2023, 05:03:06] EVENT: RESOLVE
⏎[Aug 11, 2023, 05:03:06] Contacting xxxxxxxxxxx via UDP
⏎[Aug 11, 2023, 05:03:06] EVENT: WAIT
⏎[Aug 11, 2023, 05:03:06] WinCommandAgent: transmitting bypass route to xxxxxxxxxxxx
After that, it will connect again, and round and round it goes.

Oh, and you're right: it's mnore like every 30 seconds.

grokker
OpenVpn Newbie
Posts: 4
Joined: Fri Aug 04, 2023 7:40 pm

Re: Version 3.4 keeps disconnecting and reconnecting every 10-15 seconds

Post by grokker » Fri Aug 11, 2023 3:20 am

alb_73 wrote:
Mon Aug 07, 2023 12:25 pm
Hi,

Fixed this by adding the following custom options to the client configuration:

allow-compression asym
compress lz4

Then exclude the default compress option in the client configuration too.

Redeploy the openvpn config file to clients.

More details can be found here:

https://community.openvpn.net/openvpn/wiki/Compression

Hope this helps...
Thanks for the suggestion.

I hope the developers can find a better solution. I don't want to think of manually edit 50+ employees setup... I'd rather stay in 3.3.7, which works fine.

grokker
OpenVpn Newbie
Posts: 4
Joined: Fri Aug 04, 2023 7:40 pm

Re: Version 3.4 keeps disconnecting and reconnecting every 10-15 seconds

Post by grokker » Fri Aug 11, 2023 7:14 pm

OpenVPN support tells me we have to deal with Arista (Untangle).

TRG
OpenVpn Newbie
Posts: 1
Joined: Sat Dec 16, 2023 6:00 am

Re: Version 3.4 keeps disconnecting and reconnecting every 10-15 seconds

Post by TRG » Sat Dec 16, 2023 6:01 am

Thank you man, this fixed my problem on iPhone.
alb_73 wrote:
Mon Aug 07, 2023 12:25 pm
Hi,

Fixed this by adding the following custom options to the client configuration:

allow-compression asym
compress lz4

Then exclude the default compress option in the client configuration too.

Redeploy the openvpn config file to clients.

More details can be found here:

https://community.openvpn.net/openvpn/wiki/Compression

Hope this helps...

rodolfoberain
OpenVpn Newbie
Posts: 1
Joined: Wed Dec 20, 2023 6:45 pm

Re: Version 3.4 keeps disconnecting and reconnecting every 10-15 seconds

Post by rodolfoberain » Wed Dec 20, 2023 6:46 pm

alb_73 wrote:
Mon Aug 07, 2023 12:25 pm
Hi,

Fixed this by adding the following custom options to the client configuration:

allow-compression asym
compress lz4

Then exclude the default compress option in the client configuration too.

Redeploy the openvpn config file to clients.

More details can be found here:

https://community.openvpn.net/openvpn/wiki/Compression

Hope this helps...

this fixed the issue with client 3.4 on both windows and mac.

User avatar
openvpn_inc
OpenVPN Inc.
Posts: 1332
Joined: Tue Feb 16, 2021 10:41 am

Re: Version 3.4 keeps disconnecting and reconnecting every 10-15 seconds

Post by openvpn_inc » Thu Dec 21, 2023 3:15 pm

Hello,

Just wanted to leave a message of caution. The solutions suggested here include re-enabling compression. At least to allow data from the server side to arrive encrypted. While in some cases you may not have control over the server side configuration, and this may help to at least get connected again, I want to point out the danger of using compression at all. The VORACLE vulnerability exists when compression and encryption are used at the same time. Therefore efforts are made to phase compression out of OpenVPN altogether. Just thought you should know so that, for those that are able to, they can look into making sure the server side does not do compression and cause this issue anymore.

Kind regards,
Johan
Image OpenVPN Inc.
Answers provided by OpenVPN Inc. staff members here are provided on a voluntary best-effort basis, and no rights can be claimed on the basis of answers posted in this public forum. If you wish to get official support from OpenVPN Inc. please use the official support ticket system: https://openvpn.net/support

Post Reply