ERROR [ip getter] when healthcheck healthy

[freeze-out]

I just tried gluetun and startet the docker with

docker run -it --rm --cap-add=NET_ADMIN -e VPN_SERVICE_PROVIDER=nordvpn -e OPENVPN_USER=<user> -e OPENVPN_PASSWORD=<password> -e SERVER_COUNTRIES=Netherlands qmcgaw/gluetun

It says:

[healthcheck] healthy!

with the following two messages

WARN [dns] cannot update files: Get "https://www.internic.net/domain/named.root": net/http: TLS handshake timeout

and

ERROR [ip getter] Get "https://ipinfo.io/": net/http: TLS handshake timeout - retrying in 5m20s

2024-03-05T16:47:05Z �[36mINFO�[0m [routing] default route found: interface eth0, gateway 172.17.0.1, assigned IP 172.17.0.2 and family v4
2024-03-05T16:47:05Z �[36mINFO�[0m [routing] local ethernet link found: eth0
2024-03-05T16:47:05Z �[36mINFO�[0m [routing] local ipnet found: 172.17.0.0/16
2024-03-05T16:47:05Z �[36mINFO�[0m [firewall] enabling...
2024-03-05T16:47:05Z �[36mINFO�[0m [firewall] enabled successfully
2024-03-05T16:47:05Z �[36mINFO�[0m [storage] creating /gluetun/servers.json with 17820 hardcoded servers
2024-03-05T16:47:05Z �[36mINFO�[0m Alpine version: 3.18.6
2024-03-05T16:47:05Z �[36mINFO�[0m OpenVPN 2.5 version: 2.5.8
2024-03-05T16:47:05Z �[36mINFO�[0m OpenVPN 2.6 version: 2.6.8
2024-03-05T16:47:05Z �[36mINFO�[0m Unbound version: 1.19.1
2024-03-05T16:47:05Z �[36mINFO�[0m IPtables version: v1.8.9
2024-03-05T16:47:05Z �[36mINFO�[0m Settings summary:
├── VPN settings:
|   ├── VPN provider settings:
|   |   ├── Name: nordvpn
|   |   └── Server selection settings:
|   |       ├── VPN type: openvpn
|   |       ├── Countries: netherlands
|   |       └── OpenVPN server selection settings:
|   |           └── Protocol: UDP
|   └── OpenVPN settings:
|       ├── OpenVPN version: 2.5
|       ├── User: [set]
|       ├── Password: [set]
|       ├── Network interface: tun0
|       ├── Run OpenVPN as: root
|       └── Verbosity level: 1
├── DNS settings:
|   ├── Keep existing nameserver(s): no
|   ├── DNS server address to use: 127.0.0.1
|   └── DNS over TLS settings:
|       ├── Enabled: yes
|       ├── Update period: every 24h0m0s
|       ├── Unbound settings:
|       |   ├── Authoritative servers:
|       |   |   └── cloudflare
|       |   ├── Caching: yes
|       |   ├── IPv6: no
|       |   ├── Verbosity level: 1
|       |   ├── Verbosity details level: 0
|       |   ├── Validation log level: 0
|       |   ├── System user: root
|       |   └── Allowed networks:
|       |       ├── 0.0.0.0/0
|       |       └── ::/0
|       └── DNS filtering settings:
|           ├── Block malicious: yes
|           ├── Block ads: no
|           ├── Block surveillance: no
|           └── Blocked IP networks:
|               ├── 127.0.0.1/8
|               ├── 10.0.0.0/8
|               ├── 172.16.0.0/12
|               ├── 192.168.0.0/16
|               ├── 169.254.0.0/16
|               ├── ::1/128
|               ├── fc00::/7
|               ├── fe80::/10
|               ├── ::ffff:127.0.0.1/104
|               ├── ::ffff:10.0.0.0/104
|               ├── ::ffff:169.254.0.0/112
|               ├── ::ffff:172.16.0.0/108
|               └── ::ffff:192.168.0.0/112
├── Firewall settings:
|   └── Enabled: yes
├── Log settings:
|   └── Log level: INFO
├── Health settings:
|   ├── Server listening address: 127.0.0.1:9999
|   ├── Target address: cloudflare.com:443
|   ├── Duration to wait after success: 5s
|   ├── Read header timeout: 100ms
|   ├── Read timeout: 500ms
|   └── VPN wait durations:
|       ├── Initial duration: 6s
|       └── Additional duration: 5s
├── Shadowsocks server settings:
|   └── Enabled: no
├── HTTP proxy settings:
|   └── Enabled: no
├── Control server settings:
|   ├── Listening address: :8000
|   └── Logging: yes
├── OS Alpine settings:
|   ├── Process UID: 1000
|   └── Process GID: 1000
├── Public IP settings:
|   ├── Fetching: every 12h0m0s
|   ├── IP file path: /tmp/gluetun/ip
|   └── Public IP data API: ipinfo
└── Version settings:
    └── Enabled: yes

2024-03-05T16:47:05Z �[36mINFO�[0m [routing] default route found: interface eth0, gateway 172.17.0.1, assigned IP 172.17.0.2 and family v4
2024-03-05T16:47:05Z �[36mINFO�[0m [routing] adding route for 0.0.0.0/0
2024-03-05T16:47:05Z �[36mINFO�[0m [firewall] setting allowed subnets...
2024-03-05T16:47:05Z �[36mINFO�[0m [routing] default route found: interface eth0, gateway 172.17.0.1, assigned IP 172.17.0.2 and family v4
2024-03-05T16:47:05Z �[36mINFO�[0m TUN device is not available: open /dev/net/tun: no such file or directory; creating it...
2024-03-05T16:47:05Z �[36mINFO�[0m [dns] using plaintext DNS at address 1.1.1.1
2024-03-05T16:47:05Z �[36mINFO�[0m [http server] http server listening on [::]:8000
2024-03-05T16:47:05Z �[36mINFO�[0m [healthcheck] listening on 127.0.0.1:9999
2024-03-05T16:47:05Z �[36mINFO�[0m [firewall] allowing VPN connection...
2024-03-05T16:47:05Z �[36mINFO�[0m [openvpn] �[95mOpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov  2 2022�[0m
2024-03-05T16:47:05Z �[36mINFO�[0m [openvpn] �[95mlibrary versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10�[0m
2024-03-05T16:47:05Z �[36mINFO�[0m [openvpn] �[95mTCP/UDP: Preserving recently used remote address: [AF_INET]178.239.173.235:1194�[0m
2024-03-05T16:47:05Z �[36mINFO�[0m [openvpn] �[95mUDP link local: (not bound)�[0m
2024-03-05T16:47:05Z �[36mINFO�[0m [openvpn] �[95mUDP link remote: [AF_INET]178.239.xxx.xxx:xxxx�[0m
2024-03-05T16:47:05Z �[36mINFO�[0m [openvpn] �[95m[nlxxx.nordvpn.com] Peer Connection Initiated with [AF_INET]178.239.xxx.xxx:xxxx�[0m
2024-03-05T16:47:06Z �[36mINFO�[0m [openvpn] �[95mTUN/TAP device tun0 opened�[0m
2024-03-05T16:47:06Z �[36mINFO�[0m [openvpn] �[95m/sbin/ip link set dev tun0 up mtu 1500�[0m
2024-03-05T16:47:06Z �[36mINFO�[0m [openvpn] �[95m/sbin/ip link set dev tun0 up�[0m
2024-03-05T16:47:06Z �[36mINFO�[0m [openvpn] �[95m/sbin/ip addr add dev tun0 10.8.3.9/24�[0m
2024-03-05T16:47:06Z �[36mINFO�[0m [openvpn] �[95mUID set to nonrootuser�[0m
2024-03-05T16:47:06Z �[36mINFO�[0m [openvpn] �[92mInitialization Sequence Completed�[0m
2024-03-05T16:47:06Z �[36mINFO�[0m [dns] downloading DNS over TLS cryptographic files
2024-03-05T16:47:06Z �[36mINFO�[0m [healthcheck] healthy!
2024-03-05T16:47:16Z �[33mWARN�[0m [dns] cannot update files: Get "https://www.internic.net/domain/named.root": net/http: TLS handshake timeout

[freeze-out]

I am connected to a VPN on my host system and it seems like this is the problem. When I kill the VPN app then my docker container is working correctly. Do you know what to do to use both? My VPN on my host system and my gluetun docker?

[gauravojha]

@freeze-out did you solve this? I am running into the same here - #2382

UPDATE: found the way to solve this. Had to lower the MTU

[freeze-out]

Not really. I think it has something to do with the running VPN client on the host system with a set DNS server. I tried to set the same DNS server address as environement variable inside gluetun container but it didn't help. I am not an expert to setup networks.

[freeze-out]

MTU where?

[freeze-out]

Wow I set - OPENVPN_MSSFIX=1272 and it worked

[gauravojha]

There is an environment variable you can pass to control. You can find a sample docker-compose here - #2382 (comment)

WIREGUARD_MTU