gluetun: Help: PureVPN provider not working

Host OS Raspbian Buster

Is this urgent?: Yes

What VPN provider are you using: pureVPN

What is the version of the program OpenVPN version: 2.4.10 Unbound version: 1.10.1 IPtables version: v1.8.4

Running version latest built on 2021-01-06T01:33:00Z (commit 5580159)

What’s the problem 🤔 When I start the docker container - sometimes it provides a frew minutes a working VPN-connection when I test with docker run --rm --network=container:gluetun alpine:3.12 wget -qO- https://ipinfo.io

but in most cases there is no connection. Once I also had a connection, but without the use of a VPN - so my Provider was transparent routet (Maybe a settings issue?)

So I would be happy, if someone could double check my settings.

Goal is, that my Browsers Proxy (Firefox) is using the Proxy of this Docker container and the connection is running via pureVPN.

Also I am greatful, if you tell me how to debug the issue, that I maybe can fix it on my own 😃

Share your logs…

2021-01-06T13:54:18.590+0100	INFO	storage: merging by most recent 6630 hardcoded servers and 6630 servers read from /gluetun/servers.json,
2021-01-06T13:54:18.694+0100	INFO	routing: default route found: interface eth0, gateway 172.17.0.1,
2021-01-06T13:54:18.695+0100	INFO	routing: local subnet found: 172.17.0.0/16,
2021-01-06T13:54:18.697+0100	INFO	routing: default route found: interface eth0, gateway 172.17.0.1,
2021-01-06T13:54:18.698+0100	INFO	routing: adding route for 0.0.0.0/0,
2021-01-06T13:54:18.699+0100	INFO	firewall: firewall disabled, only updating allowed subnets internal list,
2021-01-06T13:54:18.699+0100	INFO	routing: default route found: interface eth0, gateway 172.17.0.1,
2021-01-06T13:54:18.699+0100	INFO	openvpn configurator: checking for device /dev/net/tun,
2021-01-06T13:54:18.699+0100	WARN	TUN device is not available: open /dev/net/tun: no such file or directory,
2021-01-06T13:54:18.699+0100	INFO	openvpn configurator: creating /dev/net/tun,
2021-01-06T13:54:18.700+0100	INFO	Launching standard output merger,
2021-01-06T13:54:18.700+0100	INFO	dns over tls: using plaintext DNS at address 1.1.1.1,
2021-01-06T13:54:18.700+0100	INFO	http server: listening on 0.0.0.0:8000,
2021-01-06T13:54:18.701+0100	INFO	http proxy: listening on :8888,
2021-01-06T13:54:18.701+0100	INFO	healthcheck: listening on 127.0.0.1:9999,
2021-01-06T13:54:18.703+0100	INFO	firewall: firewall disabled, only updating internal VPN connection,
2021-01-06T13:54:18.703+0100	INFO	openvpn configurator: starting openvpn,
2021-01-06T13:54:18.710+0100	INFO	openvpn: OpenVPN 2.4.10 armv7-alpine-linux-musleabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Jan  4 2021,
2021-01-06T13:54:18.710+0100	INFO	openvpn: library versions: OpenSSL 1.1.1i  8 Dec 2020, LZO 2.10,
2021-01-06T13:54:18.711+0100	INFO	healthcheck: passed,
2021-01-06T13:54:18.717+0100	INFO	openvpn: TCP/UDP: Preserving recently used remote address: [AF_INET]188.72.x.y:53,
2021-01-06T13:54:18.717+0100	INFO	openvpn: UDP link local: (not bound),
2021-01-06T13:54:18.717+0100	INFO	openvpn: UDP link remote: [AF_INET]188.72.x.y:53,
2021-01-06T13:54:18.811+0100	WARN	openvpn: 'link-mtu' is used inconsistently, local='link-mtu 1557', remote='link-mtu 1550',
2021-01-06T13:54:18.812+0100	WARN	openvpn: 'cipher' is used inconsistently, local='cipher AES-256-CBC', remote='cipher AES-256-GCM',
2021-01-06T13:54:18.812+0100	WARN	openvpn: 'auth' is used inconsistently, local='auth SHA1', remote='auth [null-digest]',
2021-01-06T13:54:18.812+0100	WARN	openvpn: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo',
2021-01-06T13:54:18.813+0100	INFO	openvpn: [Secure-Server] Peer Connection Initiated with [AF_INET]188.72.x.y:53,
2021-01-06T13:54:19.850+0100	INFO	openvpn: TUN/TAP device tun0 opened,
2021-01-06T13:54:19.850+0100	INFO	openvpn: /sbin/ip link set dev tun0 up mtu 1500,
2021-01-06T13:54:19.859+0100	INFO	openvpn: /sbin/ip addr add dev tun0 188.72.x.y/28 broadcast 188.72.x.y,
2021-01-06T13:54:19.878+0100	INFO	openvpn: ERROR: Linux route add command failed: external program exited with error status: 2,
2021-01-06T13:54:19.878+0100	INFO	openvpn: Initialization Sequence Completed,
2021-01-06T13:54:19.879+0100	INFO	VPN routing IP address: 188.72.x.y,

and

2021-01-06T14:05:23.889+0100    WARN    http proxy: cannot request http://google.at/ for client ...
2021-01-06T14:05:33.953+0100    WARN    http proxy: cannot request http://google.at/favicon.ico for client ...
2021-01-06T14:05:37.054+0100    INFO    openvpn: [Secure-Server] Inactivity timeout (--ping-restart), restarting
2021-01-06T14:05:37.068+0100    INFO    openvpn: /sbin/ip addr del dev tun0 188.72.x.y/28
2021-01-06T14:05:37.126+0100    INFO    openvpn: SIGUSR1[soft,ping-restart] received, process restarting
2021-01-06T14:05:47.127+0100    INFO    openvpn: TCP/UDP: Preserving recently used remote address: [AF_INET]188.72.x.y:53
2021-01-06T14:05:47.128+0100    INFO    openvpn: UDP link local: (not bound)
2021-01-06T14:05:47.128+0100    INFO    openvpn: UDP link remote: [AF_INET]188.72.x.y:53
2021-01-06T14:05:47.226+0100    WARN    openvpn: 'link-mtu' is used inconsistently, local='link-mtu 1558', remote='link-mtu 1550'
2021-01-06T14:05:47.226+0100    WARN    openvpn: 'cipher' is used inconsistently, local='cipher AES-256-CBC', remote='cipher AES-256-GCM'
2021-01-06T14:05:47.227+0100    WARN    openvpn: 'auth' is used inconsistently, local='auth SHA1', remote='auth [null-digest]'
2021-01-06T14:05:47.227+0100    INFO    openvpn: [Secure-Server] Peer Connection Initiated with [AF_INET]188.72.x.y:53
2021-01-06T14:05:48.302+0100    INFO    openvpn: TUN/TAP device tun0 opened
2021-01-06T14:05:48.303+0100    INFO    openvpn: /sbin/ip link set dev tun0 up mtu 1500
2021-01-06T14:05:48.309+0100    INFO    openvpn: /sbin/ip addr add dev tun0 188.72.x.y/28 broadcast 188.72.x.y
2021-01-06T14:05:48.332+0100    INFO    openvpn: ERROR: Linux route add command failed: external program exited with error status: 2
2021-01-06T14:05:48.333+0100    INFO    openvpn: Initialization Sequence Completed
2021-01-06T14:05:48.335+0100    INFO    VPN routing IP address: 188.72.x.y

Target.ovpn

client
dev tun
nobind
persist-key
remote-cert-tls server
key-direction 1
remote-cert-tls server
cipher AES-256-CBC
route-method exe
route-delay 0
route 0.0.0.0 0.0.0.0
script-security 2
auth-nocache
mute-replay-warnings
pull-filter ignore "auth-token"
auth-retry nointeract
suppress-timestamps
verb 1
auth-user-pass /etc/openvpn/auth.conf
proto udp
remote 188.72.x.y 53
cipher aes-256-cbc
<ca>
-----BEGIN CERTIFICATE-----
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
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
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
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
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
-----END PRIVATE KEY-----
</key>

<tls-auth>
-----BEGIN OpenVPN Static key V1-----
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
-----END OpenVPN Static key V1-----
</tls-auth>

explicit-exit-notify

What are you using to run your container?:

Please also share your configuration file:

pi@raspberrypi:/media/ssd/docker $ docker run --name gluetun -p 8888:8888/tcp -p 8005:8000 --cap-add=NET_ADMIN -e VPNSP="purevpn" -e REGION="Hesse" -e OPENVPN_USER="purevpnxyz" -e OPENVPN_PASSWORD="xxxx" -e PUBLICIP_FILE="/tmp/gluetun/ip" -e OPENVPN_ROOT=yes -e PROTOCOL="udp" -e OPENVPN_CIPHER="aes-256-cbc" -e FIREWALL=off -e DOT=off -e HTTPPROXY=on -e HTTPPROXY_LOG=on -e HTTP_CONTROL_SERVER_PORT=8000 -e HTTP_CONTROL_SERVER_LOG=on -e TZ=Europe/Berlin -e PUID=1000 -e PGID=1000 -v "$PWD/openvpn_purevpn":/gluetun -v "$PWD/openvpn_purevpn":/etc/openvpn qmcgaw/gluetun

OpenVPN settings:
|--User: [redacted]
|--Password: [redacted]
|--Verbosity level: 1
|--Run as root: yes
|--Purevpn settings:
 |--Network protocol: udp
 |--Regions: hesse
 |--Countries:
 |--Cities:
|--Custom cipher: aes-256-cbc
System settings:
|--Process user ID: 1000
|--Process group ID: 1000
|--Timezone: europe/berlin
DNS over TLS disabled, using plaintext DNS 1.1.1.1
Firewall settings: disabled
HTTP proxy settings:
 |--Port: 8888
 |--Authentication: disabled
 |--Stealth: disabled
 |--Log: enabled
ShadowSocks settings: disabled
HTTP Control server:
 |--Listening port: 8000
 |--Logging: true
Server updater settings: disabled
Public IP getter settings:
|--Period: 12h0m0s
|--IP file: /tmp/gluetun/ip
Version information: enabled

About this issue

Original URL
State: closed
Created 3 years ago
Comments: 27 (12 by maintainers)

Most upvoted comments

It fails instantly on my Mac, I will try to contact the support to see if I should be using other ovpn files or something.

For now, the Spanish one works using gluetun so I’m happy. In August my current subscription ends so I’m definitely moving to another one because it’s just too unstable. Would appreciate if you would support it for a bit longer (or Im just not going to pull anymore;)).

giejay on Mar 14, 2021

Hello there!

The error is about

ERROR: Linux route add command failed: external program exited with

This is the same as #320 with another PureVPN user. So that’s likely a Purevpn problem. I’ll investigate further in a few hours.

It seems Purevpn is pushing some routes that can’t be setup for some reason, I’ll see how to find which ones and maybe filter them out so it works again.

Thanks for your patience.

qdm12 on Jan 6, 2021