[openvpn] stream error: bufio.Scanner: token too long

[PrinceFrosty]

I am not sure if this is a Gluetun bug or not, so I am asking around. This "stream error" issue happens with the OpenVPN TCP and UDP protocol.

• I've tested Gluetun version tags 3.36.0, 3.37.0, 3.38.0, and latest.
• I've tested with OpenVPN versions 2.5, and 2.6.
• I've tested with and without OPENVPN_CUSTOM_CONFIG specified.
• I've tested with and without VPN_PORT_FORWARDING.
• I've tested between SERVER_COUNTRIES, SERVER_REGIONS, and SERVER_HOSTNAMES.
• I've tested with and without DOT.
• I've tested multiple versions and settings of qBittorrent and libtorrent.
• I've tested the TrueNAS ix-application.
• I've tested multiple ISP connections.
• I've tested Protonvpn connection speeds and reliability on multiple devices and protocols without issue.

This issue began around two weeks ago. It mostly happens every few minutes, with exceptions up to a few hours. Sample log and docker compose file included below.

========================================
========================================
=============== gluetun ================
========================================
=========== Made with ❤️ by ============
======= https://github.com/qdm12 =======
========================================
========================================

Running version v3.38.0 built on 2024-03-25T15:53:33.983Z (commit b3ceece)

🔧 Need help? https://github.com/qdm12/gluetun/discussions/new
🐛 Bug? https://github.com/qdm12/gluetun/issues/new
✨ New feature? https://github.com/qdm12/gluetun/issues/new
☕ Discussion? https://github.com/qdm12/gluetun/discussions/new
💻 Email? quentin.mcgaw@gmail.com
💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
T22:37:52-04:00 INFO [routing] default route found: interface eth0, gateway 172.20.0.1, assigned IP 172.20.0.8 and family v4
T22:37:52-04:00 INFO [routing] local ethernet link found: eth0
T22:37:52-04:00 INFO [routing] local ipnet found: 172.20.0.0/16
T22:37:52-04:00 INFO [firewall] enabling...
T22:37:52-04:00 INFO [firewall] enabled successfully
T22:37:53-04:00 INFO [storage] merging by most recent 19476 hardcoded servers and 19595 servers read from /gluetun/servers.json
T22:37:53-04:00 INFO [storage] Using protonvpn servers from file which are 646 days more recent
T22:37:53-04:00 INFO [storage] Using surfshark servers from file which are 82 days more recent
T22:37:53-04:00 INFO [storage] Using vpnsecure servers from file which are 677 days more recent
T22:37:53-04:00 INFO Alpine version: 3.18.6
T22:37:53-04:00 INFO OpenVPN 2.5 version: 2.5.8
T22:37:53-04:00 INFO OpenVPN 2.6 version: 2.6.8
T22:37:53-04:00 INFO Unbound version: 1.19.3
T22:37:53-04:00 INFO IPtables version: v1.8.9
T22:37:53-04:00 INFO Settings summary:
├── VPN settings:
|   ├── VPN provider settings:
|   |   ├── Name: protonvpn
|   |   ├── Server selection settings:
|   |   |   ├── VPN type: openvpn
|   |   |   ├── Countries: argentina, australia, austria, belgium, brazil, cambodia, canada, costa rica, denmark, egypt, finland, france, germany, greece, hungary, iceland, ireland, israel, italy, japan, korea, latvia, luxembourg, mexico, netherlands, new zealand, norway, poland, portugal, puerto rico, south africa, spain, sweden, switzerland, turkey, united kingdom, united states
|   |   |   └── OpenVPN server selection settings:
|   |   |       └── Protocol: TCP
|   |   └── Automatic port forwarding settings:
|   |       ├── Redirection listening port: disabled
|   |       ├── Use port forwarding code for current provider
|   |       └── Forwarded port file path: /tmp/gluetun/forwarded_port
|   └── OpenVPN settings:
|       ├── OpenVPN version: 2.6
|       ├── User: [redacted]
|       ├── Password: [redacted]
|       ├── Network interface: tun0
|       ├── Run OpenVPN as: root
|       └── Verbosity level: 5
├── DNS settings:
|   ├── Keep existing nameserver(s): no
|   ├── DNS server address to use: 127.0.0.1
|   └── DNS over TLS settings:
|       ├── Enabled: yes
|       ├── Update period: every 24h0m0s
|       ├── Unbound settings:
|       |   ├── Authoritative servers:
|       |   |   └── cloudflare
|       |   ├── Caching: yes
|       |   ├── IPv6: no
|       |   ├── Verbosity level: 1
|       |   ├── Verbosity details level: 0
|       |   ├── Validation log level: 0
|       |   ├── System user: root
|       |   └── Allowed networks:
|       |       ├── 0.0.0.0/0
|       |       └── ::/0
|       └── DNS filtering settings:
|           ├── Block malicious: yes
|           ├── Block ads: no
|           ├── Block surveillance: yes
|           └── Blocked IP networks:
|               ├── 127.0.0.1/8
|               ├── 10.0.0.0/8
|               ├── 172.16.0.0/12
|               ├── 192.168.0.0/16
|               ├── 169.254.0.0/16
|               ├── ::1/128
|               ├── fc00::/7
|               ├── fe80::/10
|               ├── ::ffff:127.0.0.1/104
|               ├── ::ffff:10.0.0.0/104
|               ├── ::ffff:169.254.0.0/112
|               ├── ::ffff:172.16.0.0/108
|               └── ::ffff:192.168.0.0/112
├── Firewall settings:
|   └── Enabled: yes
├── Log settings:
|   └── Log level: INFO
├── Health settings:
|   ├── Server listening address: 127.0.0.1:9999
|   ├── Target address: cloudflare.com:443
|   ├── Duration to wait after success: 5s
|   ├── Read header timeout: 100ms
|   ├── Read timeout: 500ms
|   └── VPN wait durations:
|       ├── Initial duration: 6s
|       └── Additional duration: 5s
├── Shadowsocks server settings:
|   └── Enabled: no
├── HTTP proxy settings:
|   └── Enabled: no
├── Control server settings:
|   ├── Listening address: :8000
|   └── Logging: yes
├── OS Alpine settings:
|   ├── Process UID: 1000
|   ├── Process GID: 1000
|   └── Timezone: america/new_york
├── Public IP settings:
|   ├── Fetching: every 12h0m0s
|   ├── IP file path: /tmp/gluetun/ip
|   └── Public IP data API: ipinfo
├── Server data updater settings:
|   ├── Update period: 1h0m0s
|   ├── DNS address: 1.1.1.1:53
|   ├── Minimum ratio: 0.8
|   └── Providers to update: protonvpn
└── Version settings:
    └── Enabled: yes
T22:37:53-04:00 INFO [routing] default route found: interface eth0, gateway 172.20.0.1, assigned IP 172.20.0.8 and family v4
T22:37:53-04:00 INFO [routing] adding route for 0.0.0.0/0
T22:37:53-04:00 INFO [firewall] setting allowed subnets...
T22:37:53-04:00 INFO [routing] default route found: interface eth0, gateway 172.20.0.1, assigned IP 172.20.0.8 and family v4
T22:37:53-04:00 INFO [dns] using plaintext DNS at address 1.1.1.1
T22:37:53-04:00 INFO [http server] http server listening on [::]:8000
T22:37:53-04:00 INFO [healthcheck] listening on 127.0.0.1:9999
T22:37:53-04:00 INFO [firewall] allowing VPN connection...
T22:37:53-04:00 INFO [openvpn] Current Parameter Settings:
T22:37:53-04:00 INFO [openvpn]   config = '/etc/openvpn/target.ovpn'
T22:37:53-04:00 INFO [openvpn]   mode = 0
T22:37:53-04:00 INFO [openvpn]   persist_config = DISABLED
T22:37:53-04:00 INFO [openvpn]   persist_mode = 1
T22:37:53-04:00 INFO [openvpn]   show_ciphers = DISABLED
T22:37:53-04:00 INFO [openvpn]   show_digests = DISABLED
T22:37:53-04:00 INFO [openvpn]   show_engines = DISABLED
T22:37:53-04:00 INFO [openvpn]   genkey = DISABLED
T22:37:53-04:00 INFO [openvpn]   genkey_filename = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   key_pass_file = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   show_tls_ciphers = DISABLED
T22:37:53-04:00 INFO [openvpn]   connect_retry_max = 0
T22:37:53-04:00 INFO [openvpn] Connection profiles [0]:
T22:37:53-04:00 INFO [openvpn]   proto = tcp-client
T22:37:53-04:00 INFO [openvpn]   local = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   local_port = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   remote = '[redacted]'
T22:37:53-04:00 INFO [openvpn]   remote_port = '443'
T22:37:53-04:00 INFO [openvpn]   remote_float = DISABLED
T22:37:53-04:00 INFO [openvpn]   bind_defined = DISABLED
T22:37:53-04:00 INFO [openvpn]   bind_local = DISABLED
T22:37:53-04:00 INFO [openvpn]   bind_ipv6_only = DISABLED
T22:37:53-04:00 INFO [openvpn]   connect_retry_seconds = 1
T22:37:53-04:00 INFO [openvpn]   connect_timeout = 120
T22:37:53-04:00 INFO [openvpn]   socks_proxy_server = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   socks_proxy_port = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   tun_mtu = 1500
T22:37:53-04:00 INFO [openvpn]   tun_mtu_defined = ENABLED
T22:37:53-04:00 INFO [openvpn]   link_mtu = 1500
T22:37:53-04:00 INFO [openvpn]   link_mtu_defined = DISABLED
T22:37:53-04:00 INFO [openvpn]   tun_mtu_extra = 32
T22:37:53-04:00 INFO [openvpn]   tun_mtu_extra_defined = ENABLED
T22:37:53-04:00 INFO [openvpn]   tls_mtu = 1250
T22:37:53-04:00 INFO [openvpn]   mtu_discover_type = -1
T22:37:53-04:00 INFO [openvpn]   fragment = 0
T22:37:53-04:00 INFO [openvpn]   mssfix = 1450
T22:37:53-04:00 INFO [openvpn]   mssfix_encap = DISABLED
T22:37:53-04:00 INFO [openvpn]   mssfix_fixed = DISABLED
T22:37:53-04:00 INFO [openvpn]   explicit_exit_notification = 0
T22:37:53-04:00 INFO [openvpn]   tls_auth_file = '[INLINE]'
T22:37:53-04:00 INFO [openvpn]   key_direction = 1
T22:37:53-04:00 INFO [openvpn]   tls_crypt_file = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   tls_crypt_v2_file = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn] Connection profiles END
T22:37:53-04:00 INFO [openvpn]   remote_random = DISABLED
T22:37:53-04:00 INFO [openvpn]   ipchange = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   dev = 'tun0'
T22:37:53-04:00 INFO [openvpn]   dev_type = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   dev_node = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   lladdr = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   topology = 1
T22:37:53-04:00 INFO [openvpn]   ifconfig_local = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   ifconfig_remote_netmask = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   ifconfig_noexec = DISABLED
T22:37:53-04:00 INFO [openvpn]   ifconfig_nowarn = DISABLED
T22:37:53-04:00 INFO [openvpn]   ifconfig_ipv6_local = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   ifconfig_ipv6_netbits = 0
T22:37:53-04:00 INFO [openvpn]   ifconfig_ipv6_remote = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   shaper = 0
T22:37:53-04:00 INFO [openvpn]   mtu_test = 0
T22:37:53-04:00 INFO [openvpn]   mlock = DISABLED
T22:37:53-04:00 INFO [openvpn]   keepalive_ping = 0
T22:37:53-04:00 INFO [openvpn]   keepalive_timeout = 0
T22:37:53-04:00 INFO [openvpn]   inactivity_timeout = 0
T22:37:53-04:00 INFO [openvpn]   session_timeout = 0
T22:37:53-04:00 INFO [openvpn]   inactivity_minimum_bytes = 0
T22:37:53-04:00 INFO [openvpn]   ping_send_timeout = 0
T22:37:53-04:00 INFO [openvpn]   ping_rec_timeout = 0
T22:37:53-04:00 INFO [openvpn]   ping_rec_timeout_action = 0
T22:37:53-04:00 INFO [openvpn]   ping_timer_remote = DISABLED
T22:37:53-04:00 INFO [openvpn]   remap_sigusr1 = 0
T22:37:53-04:00 INFO [openvpn]   persist_tun = ENABLED
T22:37:53-04:00 INFO [openvpn]   persist_local_ip = DISABLED
T22:37:53-04:00 INFO [openvpn]   persist_remote_ip = DISABLED
T22:37:53-04:00 INFO [openvpn]   persist_key = ENABLED
T22:37:53-04:00 INFO [openvpn]   passtos = DISABLED
T22:37:53-04:00 INFO [openvpn]   resolve_retry_seconds = 1000000000
T22:37:53-04:00 INFO [openvpn]   resolve_in_advance = DISABLED
T22:37:53-04:00 INFO [openvpn]   username = 'nonrootuser'
T22:37:53-04:00 INFO [openvpn]   groupname = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   chroot_dir = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   cd_dir = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   writepid = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   up_script = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   down_script = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   down_pre = DISABLED
T22:37:53-04:00 INFO [openvpn]   up_restart = DISABLED
T22:37:53-04:00 INFO [openvpn]   up_delay = DISABLED
T22:37:53-04:00 INFO [openvpn]   daemon = DISABLED
T22:37:53-04:00 INFO [openvpn]   log = DISABLED
T22:37:53-04:00 INFO [openvpn]   suppress_timestamps = ENABLED
T22:37:53-04:00 INFO [openvpn]   machine_readable_output = DISABLED
T22:37:53-04:00 INFO [openvpn]   nice = 0
T22:37:53-04:00 INFO [openvpn]   verbosity = 5
T22:37:53-04:00 INFO [openvpn]   mute = 0
T22:37:53-04:00 INFO [openvpn]   gremlin = 0
T22:37:53-04:00 INFO [openvpn]   status_file = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   status_file_version = 1
T22:37:53-04:00 INFO [openvpn]   status_file_update_freq = 60
T22:37:53-04:00 INFO [openvpn]   occ = ENABLED
T22:37:53-04:00 INFO [openvpn]   rcvbuf = 0
T22:37:53-04:00 INFO [openvpn]   sndbuf = 0
T22:37:53-04:00 INFO [openvpn]   mark = 0
T22:37:53-04:00 INFO [openvpn]   sockflags = 0
T22:37:53-04:00 INFO [openvpn]   fast_io = DISABLED
T22:37:53-04:00 INFO [openvpn]   comp.alg = 0
T22:37:53-04:00 INFO [openvpn]   comp.flags = 24
T22:37:53-04:00 INFO [openvpn]   route_script = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   route_default_gateway = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   route_default_metric = 0
T22:37:53-04:00 INFO [openvpn]   route_noexec = DISABLED
T22:37:53-04:00 INFO [openvpn]   route_delay = 0
T22:37:53-04:00 INFO [openvpn]   route_delay_window = 30
T22:37:53-04:00 INFO [openvpn]   route_delay_defined = DISABLED
T22:37:53-04:00 INFO [openvpn]   route_nopull = DISABLED
T22:37:53-04:00 INFO [openvpn]   route_gateway_via_dhcp = DISABLED
T22:37:53-04:00 INFO [openvpn]   allow_pull_fqdn = DISABLED
T22:37:53-04:00 INFO [openvpn]   Pull filters:
T22:37:53-04:00 INFO [openvpn]     ignore "auth-token"
T22:37:53-04:00 INFO [openvpn]     ignore "tun-ipv6"
T22:37:53-04:00 INFO [openvpn]     ignore "route-ipv6"
T22:37:53-04:00 INFO [openvpn]     ignore "ifconfig-ipv6"
T22:37:53-04:00 INFO [openvpn]   management_addr = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   management_port = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   management_user_pass = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   management_log_history_cache = 250
T22:37:53-04:00 INFO [openvpn]   management_echo_buffer_size = 100
T22:37:53-04:00 INFO [openvpn]   management_client_user = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   management_client_group = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   management_flags = 0
T22:37:53-04:00 INFO [openvpn]   shared_secret_file = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   key_direction = 1
T22:37:53-04:00 INFO [openvpn]   ciphername = 'aes-256-cbc'
T22:37:53-04:00 INFO [openvpn]   ncp_ciphers = 'AES-256-CBC:AES-256-GCM'
T22:37:53-04:00 INFO [openvpn]   authname = 'sha512'
T22:37:53-04:00 INFO [openvpn]   engine = DISABLED
T22:37:53-04:00 INFO [openvpn]   replay = ENABLED
T22:37:53-04:00 INFO [openvpn]   mute_replay_warnings = ENABLED
T22:37:53-04:00 INFO [openvpn]   replay_window = 64
T22:37:53-04:00 INFO [openvpn]   replay_time = 15
T22:37:53-04:00 INFO [openvpn]   packet_id_file = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   test_crypto = DISABLED
T22:37:53-04:00 INFO [openvpn]   tls_server = DISABLED
T22:37:53-04:00 INFO [openvpn]   tls_client = ENABLED
T22:37:53-04:00 INFO [openvpn]   ca_file = '[INLINE]'
T22:37:53-04:00 INFO [openvpn]   ca_path = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   dh_file = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   cert_file = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   extra_certs_file = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   priv_key_file = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   pkcs12_file = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   cipher_list = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   cipher_list_tls13 = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   tls_cert_profile = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   tls_verify = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   tls_export_cert = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   verify_x509_type = 0
T22:37:53-04:00 INFO [openvpn]   verify_x509_name = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   crl_file = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   ns_cert_type = 0
T22:37:53-04:00 INFO [openvpn]   remote_cert_ku[i] = 65535
T22:37:53-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:37:53-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:37:53-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:37:53-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:37:53-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:37:53-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:37:53-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:37:53-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:37:53-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:37:53-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:37:53-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:37:53-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:37:53-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:37:53-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:37:53-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:37:53-04:00 INFO [openvpn]   remote_cert_eku = 'TLS Web Server Authentication'
T22:37:53-04:00 INFO [openvpn]   ssl_flags = 192
T22:37:53-04:00 INFO [openvpn]   tls_timeout = 2
T22:37:53-04:00 INFO [openvpn]   renegotiate_bytes = -1
T22:37:53-04:00 INFO [openvpn]   renegotiate_packets = 0
T22:37:53-04:00 INFO [openvpn]   renegotiate_seconds = 0
T22:37:53-04:00 INFO [openvpn]   handshake_window = 60
T22:37:53-04:00 INFO [openvpn]   transition_window = 3600
T22:37:53-04:00 INFO [openvpn]   single_session = DISABLED
T22:37:53-04:00 INFO [openvpn]   push_peer_info = DISABLED
T22:37:53-04:00 INFO [openvpn]   tls_exit = ENABLED
T22:37:53-04:00 INFO [openvpn]   tls_crypt_v2_metadata = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   server_network = 0.0.0.0
T22:37:53-04:00 INFO [openvpn]   server_netmask = 0.0.0.0
T22:37:53-04:00 INFO [openvpn]   server_network_ipv6 = ::
T22:37:53-04:00 INFO [openvpn]   server_netbits_ipv6 = 0
T22:37:53-04:00 INFO [openvpn]   server_bridge_ip = 0.0.0.0
T22:37:53-04:00 INFO [openvpn]   server_bridge_netmask = 0.0.0.0
T22:37:53-04:00 INFO [openvpn]   server_bridge_pool_start = 0.0.0.0
T22:37:53-04:00 INFO [openvpn]   server_bridge_pool_end = 0.0.0.0
T22:37:53-04:00 INFO [openvpn]   ifconfig_pool_defined = DISABLED
T22:37:53-04:00 INFO [openvpn]   ifconfig_pool_start = 0.0.0.0
T22:37:53-04:00 INFO [openvpn]   ifconfig_pool_end = 0.0.0.0
T22:37:53-04:00 INFO [openvpn]   ifconfig_pool_netmask = 0.0.0.0
T22:37:53-04:00 INFO [openvpn]   ifconfig_pool_persist_filename = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   ifconfig_pool_persist_refresh_freq = 600
T22:37:53-04:00 INFO [openvpn]   ifconfig_ipv6_pool_defined = DISABLED
T22:37:53-04:00 INFO [openvpn]   ifconfig_ipv6_pool_base = ::
T22:37:53-04:00 INFO [openvpn]   ifconfig_ipv6_pool_netbits = 0
T22:37:53-04:00 INFO [openvpn]   n_bcast_buf = 256
T22:37:53-04:00 INFO [openvpn]   tcp_queue_limit = 64
T22:37:53-04:00 INFO [openvpn]   real_hash_size = 256
T22:37:53-04:00 INFO [openvpn]   virtual_hash_size = 256
T22:37:53-04:00 INFO [openvpn]   client_connect_script = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   learn_address_script = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   client_disconnect_script = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   client_crresponse_script = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   client_config_dir = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   ccd_exclusive = DISABLED
T22:37:53-04:00 INFO [openvpn]   tmp_dir = '/tmp'
T22:37:53-04:00 INFO [openvpn]   push_ifconfig_defined = DISABLED
T22:37:53-04:00 INFO [openvpn]   push_ifconfig_local = 0.0.0.0
T22:37:53-04:00 INFO [openvpn]   push_ifconfig_remote_netmask = 0.0.0.0
T22:37:53-04:00 INFO [openvpn]   push_ifconfig_ipv6_defined = DISABLED
T22:37:53-04:00 INFO [openvpn]   push_ifconfig_ipv6_local = ::/0
T22:37:53-04:00 INFO [openvpn]   push_ifconfig_ipv6_remote = ::
T22:37:53-04:00 INFO [openvpn]   enable_c2c = DISABLED
T22:37:53-04:00 INFO [openvpn]   duplicate_cn = DISABLED
T22:37:53-04:00 INFO [openvpn]   cf_max = 0
T22:37:53-04:00 INFO [openvpn]   cf_per = 0
T22:37:53-04:00 INFO [openvpn]   cf_initial_max = 100
T22:37:53-04:00 INFO [openvpn]   cf_initial_per = 10
T22:37:53-04:00 INFO [openvpn]   max_clients = 1024
T22:37:53-04:00 INFO [openvpn]   max_routes_per_client = 256
T22:37:53-04:00 INFO [openvpn]   auth_user_pass_verify_script = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   auth_user_pass_verify_script_via_file = DISABLED
T22:37:53-04:00 INFO [openvpn]   auth_token_generate = DISABLED
T22:37:53-04:00 INFO [openvpn]   auth_token_lifetime = 0
T22:37:53-04:00 INFO [openvpn]   auth_token_secret_file = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   port_share_host = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   port_share_port = '[UNDEF]'
T22:37:53-04:00 INFO [openvpn]   vlan_tagging = DISABLED
T22:37:53-04:00 INFO [openvpn]   vlan_accept = all
T22:37:53-04:00 INFO [openvpn]   vlan_pvid = 1
T22:37:53-04:00 INFO [openvpn]   client = ENABLED
T22:37:53-04:00 INFO [openvpn]   pull = ENABLED
T22:37:53-04:00 INFO [openvpn]   auth_user_pass_file = '/etc/openvpn/auth.conf'
T22:37:53-04:00 INFO [openvpn] OpenVPN 2.6.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
T22:37:53-04:00 INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
T22:37:53-04:00 INFO [openvpn] Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
T22:37:53-04:00 INFO [openvpn] Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
T22:37:53-04:00 INFO [openvpn] Control Channel MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1250 tun_max_mtu:0 headroom:126 payload:1600 tailroom:126 ET:0 ]
T22:37:53-04:00 INFO [openvpn] Data Channel MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1500 tun_max_mtu:1600 headroom:136 payload:1800 tailroom:568 ET:32 ]
T22:37:53-04:00 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET][redacted]:443
T22:37:53-04:00 INFO [openvpn] Socket Buffers: R=[131072->131072] S=[16384->16384]
T22:37:53-04:00 INFO [openvpn] Attempting to establish TCP connection with [AF_INET][redacted]:443
T22:37:53-04:00 INFO [openvpn] TCP connection established with [AF_INET][redacted]:443
T22:37:53-04:00 INFO [openvpn] TCPv4_CLIENT link local: (not bound)
T22:37:53-04:00 INFO [openvpn] TCPv4_CLIENT link remote: [AF_INET][redacted]:443
T22:37:53-04:00 INFO [openvpn] TLS: Initial packet from [AF_INET][redacted]:443, sid=196c757f 43786d9e
T22:37:53-04:00 INFO [openvpn] VERIFY OK: depth=2, C=CH, O=ProtonVPN AG, CN=ProtonVPN Root CA
T22:37:53-04:00 INFO [openvpn] VERIFY OK: depth=1, C=CH, O=ProtonVPN AG, CN=ProtonVPN Intermediate CA 1
T22:37:53-04:00 INFO [openvpn] VERIFY KU OK
T22:37:53-04:00 INFO [openvpn] Validating certificate extended key usage
T22:37:53-04:00 INFO [openvpn] ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Server Authentication
T22:37:53-04:00 INFO [openvpn] ++ Certificate has EKU (oid) 1.3.6.1.5.5.7.3.2, expects TLS Web Server Authentication
T22:37:53-04:00 INFO [openvpn] ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
T22:37:53-04:00 INFO [openvpn] VERIFY EKU OK
T22:37:53-04:00 INFO [openvpn] VERIFY OK: depth=0, CN=[redacted].protonvpn.net
T22:37:54-04:00 INFO [openvpn] Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 4096 bits RSA, signature: RSA-SHA256, peer temporary key: 521 bits [redacted]
T22:37:54-04:00 INFO [openvpn] [[redacted].protonvpn.net] Peer Connection Initiated with [AF_INET][redacted]:443
T22:37:54-04:00 INFO [openvpn] TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1
T22:37:54-04:00 INFO [openvpn] TLS: tls_multi_process: initial untrusted session promoted to trusted
T22:37:55-04:00 INFO [openvpn] SENT CONTROL [[redacted].protonvpn.net]: 'PUSH_REQUEST' (status=1)
T22:37:55-04:00 INFO [openvpn] PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 10.80.0.1,redirect-gateway def1,explicit-exit-notify,comp-lzo no,route-gateway 10.80.0.1,topology subnet,ping 10,ping-restart 60,socket-flags TCP_NODELAY,ifconfig 10.80.0.2 255.255.0.0,peer-id 0,cipher AES-256-GCM,protocol-flags cc-exit tls-ekm dyn-tls-crypt,tun-mtu 1500'
T22:37:55-04:00 INFO [openvpn] OPTIONS IMPORT: --explicit-exit-notify can only be used with --proto udp
T22:37:55-04:00 INFO [openvpn] OPTIONS IMPORT: --socket-flags option modified
T22:37:55-04:00 INFO [openvpn] Socket flags: TCP_NODELAY=1 succeeded
T22:37:55-04:00 INFO [openvpn] OPTIONS IMPORT: --ifconfig/up options modified
T22:37:55-04:00 INFO [openvpn] OPTIONS IMPORT: route options modified
T22:37:55-04:00 INFO [openvpn] OPTIONS IMPORT: route-related options modified
T22:37:55-04:00 INFO [openvpn] OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
T22:37:55-04:00 INFO [openvpn] OPTIONS IMPORT: tun-mtu set to 1500
T22:37:55-04:00 INFO [openvpn] ROUTE_GATEWAY 172.20.0.1/255.255.0.0 IFACE=eth0 HWADDR=[redacted]
T22:37:55-04:00 INFO [openvpn] TUN/TAP device tun0 opened
T22:37:55-04:00 INFO [openvpn] do_ifconfig, ipv4=1, ipv6=0
T22:37:55-04:00 INFO [openvpn] /sbin/ip link set dev tun0 up mtu 1500
T22:37:55-04:00 INFO [openvpn] /sbin/ip link set dev tun0 up
T22:37:55-04:00 INFO [openvpn] /sbin/ip addr add dev tun0 10.80.0.2/16
T22:37:55-04:00 INFO [openvpn] /sbin/ip route add [redacted]/32 via 172.20.0.1
T22:37:55-04:00 INFO [openvpn] /sbin/ip route add 0.0.0.0/1 via 10.80.0.1
T22:37:55-04:00 INFO [openvpn] /sbin/ip route add 128.0.0.0/1 via 10.80.0.1
T22:37:55-04:00 INFO [openvpn] Data Channel MTU parms [ mss_fix:1351 max_frag:0 tun_mtu:1500 tun_max_mtu:1600 headroom:136 payload:1800 tailroom:568 ET:32 ]
T22:37:55-04:00 INFO [openvpn] Outgoing dynamic tls-crypt: Cipher 'AES-256-CTR' initialized with 256 bit key
T22:37:55-04:00 INFO [openvpn] Outgoing dynamic tls-crypt: Using 256 bit message hash 'SHA256' for HMAC authentication
T22:37:55-04:00 INFO [openvpn] Incoming dynamic tls-crypt: Cipher 'AES-256-CTR' initialized with 256 bit key
T22:37:55-04:00 INFO [openvpn] Incoming dynamic tls-crypt: Using 256 bit message hash 'SHA256' for HMAC authentication
T22:37:55-04:00 INFO [openvpn] Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
T22:37:55-04:00 INFO [openvpn] Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
T22:37:55-04:00 INFO [openvpn] UID set to nonrootuser
T22:37:55-04:00 INFO [openvpn] Initialization Sequence Completed
T22:37:55-04:00 INFO [openvpn] Data Channel: cipher 'AES-256-GCM', peer-id: 0, compression: 'stub'
T22:37:55-04:00 INFO [openvpn] Timers: ping 10, ping-restart 60
T22:37:55-04:00 INFO [openvpn] Protocol options: protocol-flags cc-exit tls-ekm dyn-tls-crypt
T22:37:55-04:00 INFO [dns] downloading DNS over TLS cryptographic files
T22:37:56-04:00 INFO [healthcheck] healthy!
T22:37:58-04:00 INFO [dns] downloading hostnames and IP block lists
T22:38:02-04:00 INFO [dns] init module 0: validator
T22:38:02-04:00 INFO [dns] init module 1: iterator
T22:38:02-04:00 INFO [dns] start of service (unbound 1.19.3).
T22:38:02-04:00 INFO [dns] generate keytag query _ta-4a5c-4f66. NULL IN
T22:38:02-04:00 INFO [dns] generate keytag query _ta-4a5c-4f66. NULL IN
T22:38:04-04:00 INFO [dns] ready
T22:38:05-04:00 INFO [vpn] You are running the latest release v3.38.0
T22:38:05-04:00 INFO [port forwarding] starting
T22:38:05-04:00 INFO [ip getter] Public IP address is [redacted] (France, Île-de-France, Saint-Denis)
T22:38:05-04:00 INFO [port forwarding] gateway external IPv4 address is [redacted]
T22:38:05-04:00 INFO [port forwarding] port forwarded is 44603
T22:38:05-04:00 INFO [firewall] setting allowed input port 44603 through interface tun0...
T22:38:05-04:00 INFO [port forwarding] writing port file /tmp/gluetun/forwarded_port
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
T22:40:19-04:00 ERROR [openvpn] stream error: bufio.Scanner: token too long
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
T22:40:20-04:00 INFO [http server] 200 GET /portforwarded wrote 15B to 127.0.0.1:56902 in 39.935µs
T22:40:29-04:00 INFO [healthcheck] healthy!
T22:40:45-04:00 INFO [healthcheck] program has been unhealthy for 6s: restarting VPN
T22:40:45-04:00 INFO [healthcheck] 👉 See https://github.com/qdm12/gluetun-wiki/blob/main/faq/healthcheck.md
T22:40:45-04:00 INFO [healthcheck] DO NOT OPEN AN ISSUE UNLESS YOU READ AND TRIED EACH POSSIBLE SOLUTION
T22:40:45-04:00 INFO [vpn] stopping
T22:40:45-04:00 INFO [port forwarding] stopping
T22:40:45-04:00 INFO [firewall] removing allowed port 44603...
T22:40:45-04:00 INFO [port forwarding] removing port file /tmp/gluetun/forwarded_port
T22:40:45-04:00 INFO [vpn] starting
T22:40:45-04:00 INFO [firewall] allowing VPN connection...
T22:40:45-04:00 INFO [openvpn] Current Parameter Settings:
T22:40:45-04:00 INFO [openvpn]   config = '/etc/openvpn/target.ovpn'
T22:40:45-04:00 INFO [openvpn]   mode = 0
T22:40:45-04:00 INFO [openvpn]   persist_config = DISABLED
T22:40:45-04:00 INFO [openvpn]   persist_mode = 1
T22:40:45-04:00 INFO [openvpn]   show_ciphers = DISABLED
T22:40:45-04:00 INFO [openvpn]   show_digests = DISABLED
T22:40:45-04:00 INFO [openvpn]   show_engines = DISABLED
T22:40:45-04:00 INFO [openvpn]   genkey = DISABLED
T22:40:45-04:00 INFO [openvpn]   genkey_filename = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   key_pass_file = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   show_tls_ciphers = DISABLED
T22:40:45-04:00 INFO [openvpn]   connect_retry_max = 0
T22:40:45-04:00 INFO [openvpn] Connection profiles [0]:
T22:40:45-04:00 INFO [openvpn]   proto = tcp-client
T22:40:45-04:00 INFO [openvpn]   local = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   local_port = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   remote = '[redacted]'
T22:40:45-04:00 INFO [openvpn]   remote_port = '443'
T22:40:45-04:00 INFO [openvpn]   remote_float = DISABLED
T22:40:45-04:00 INFO [openvpn]   bind_defined = DISABLED
T22:40:45-04:00 INFO [openvpn]   bind_local = DISABLED
T22:40:45-04:00 INFO [openvpn]   bind_ipv6_only = DISABLED
T22:40:45-04:00 INFO [openvpn]   connect_retry_seconds = 1
T22:40:45-04:00 INFO [openvpn]   connect_timeout = 120
T22:40:45-04:00 INFO [openvpn]   socks_proxy_server = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   socks_proxy_port = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   tun_mtu = 1500
T22:40:45-04:00 INFO [openvpn]   tun_mtu_defined = ENABLED
T22:40:45-04:00 INFO [openvpn]   link_mtu = 1500
T22:40:45-04:00 INFO [openvpn]   link_mtu_defined = DISABLED
T22:40:45-04:00 INFO [openvpn]   tun_mtu_extra = 32
T22:40:45-04:00 INFO [openvpn]   tun_mtu_extra_defined = ENABLED
T22:40:45-04:00 INFO [openvpn]   tls_mtu = 1250
T22:40:45-04:00 INFO [openvpn]   mtu_discover_type = -1
T22:40:45-04:00 INFO [openvpn]   fragment = 0
T22:40:45-04:00 INFO [openvpn]   mssfix = 1450
T22:40:45-04:00 INFO [openvpn]   mssfix_encap = DISABLED
T22:40:45-04:00 INFO [openvpn]   mssfix_fixed = DISABLED
T22:40:45-04:00 INFO [openvpn]   explicit_exit_notification = 0
T22:40:45-04:00 INFO [openvpn]   tls_auth_file = '[INLINE]'
T22:40:45-04:00 INFO [openvpn]   key_direction = 1
T22:40:45-04:00 INFO [openvpn]   tls_crypt_file = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   tls_crypt_v2_file = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn] Connection profiles END
T22:40:45-04:00 INFO [openvpn]   remote_random = DISABLED
T22:40:45-04:00 INFO [openvpn]   ipchange = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   dev = 'tun0'
T22:40:45-04:00 INFO [openvpn]   dev_type = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   dev_node = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   lladdr = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   topology = 1
T22:40:45-04:00 INFO [openvpn]   ifconfig_local = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   ifconfig_remote_netmask = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   ifconfig_noexec = DISABLED
T22:40:45-04:00 INFO [openvpn]   ifconfig_nowarn = DISABLED
T22:40:45-04:00 INFO [openvpn]   ifconfig_ipv6_local = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   ifconfig_ipv6_netbits = 0
T22:40:45-04:00 INFO [openvpn]   ifconfig_ipv6_remote = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   shaper = 0
T22:40:45-04:00 INFO [openvpn]   mtu_test = 0
T22:40:45-04:00 INFO [openvpn]   mlock = DISABLED
T22:40:45-04:00 INFO [openvpn]   keepalive_ping = 0
T22:40:45-04:00 INFO [openvpn]   keepalive_timeout = 0
T22:40:45-04:00 INFO [openvpn]   inactivity_timeout = 0
T22:40:45-04:00 INFO [openvpn]   session_timeout = 0
T22:40:45-04:00 INFO [openvpn]   inactivity_minimum_bytes = 0
T22:40:45-04:00 INFO [openvpn]   ping_send_timeout = 0
T22:40:45-04:00 INFO [openvpn]   ping_rec_timeout = 0
T22:40:45-04:00 INFO [openvpn]   ping_rec_timeout_action = 0
T22:40:45-04:00 INFO [openvpn]   ping_timer_remote = DISABLED
T22:40:45-04:00 INFO [openvpn]   remap_sigusr1 = 0
T22:40:45-04:00 INFO [openvpn]   persist_tun = ENABLED
T22:40:45-04:00 INFO [openvpn]   persist_local_ip = DISABLED
T22:40:45-04:00 INFO [openvpn]   persist_remote_ip = DISABLED
T22:40:45-04:00 INFO [openvpn]   persist_key = ENABLED
T22:40:45-04:00 INFO [openvpn]   passtos = DISABLED
T22:40:45-04:00 INFO [openvpn]   resolve_retry_seconds = 1000000000
T22:40:45-04:00 INFO [openvpn]   resolve_in_advance = DISABLED
T22:40:45-04:00 INFO [openvpn]   username = 'nonrootuser'
T22:40:45-04:00 INFO [openvpn]   groupname = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   chroot_dir = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   cd_dir = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   writepid = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   up_script = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   down_script = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   down_pre = DISABLED
T22:40:45-04:00 INFO [openvpn]   up_restart = DISABLED
T22:40:45-04:00 INFO [openvpn]   up_delay = DISABLED
T22:40:45-04:00 INFO [openvpn]   daemon = DISABLED
T22:40:45-04:00 INFO [openvpn]   log = DISABLED
T22:40:45-04:00 INFO [openvpn]   suppress_timestamps = ENABLED
T22:40:45-04:00 INFO [openvpn]   machine_readable_output = DISABLED
T22:40:45-04:00 INFO [openvpn]   nice = 0
T22:40:45-04:00 INFO [openvpn]   verbosity = 5
T22:40:45-04:00 INFO [openvpn]   mute = 0
T22:40:45-04:00 INFO [openvpn]   gremlin = 0
T22:40:45-04:00 INFO [openvpn]   status_file = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   status_file_version = 1
T22:40:45-04:00 INFO [openvpn]   status_file_update_freq = 60
T22:40:45-04:00 INFO [openvpn]   occ = ENABLED
T22:40:45-04:00 INFO [openvpn]   rcvbuf = 0
T22:40:45-04:00 INFO [openvpn]   sndbuf = 0
T22:40:45-04:00 INFO [openvpn]   mark = 0
T22:40:45-04:00 INFO [openvpn]   sockflags = 0
T22:40:45-04:00 INFO [openvpn]   fast_io = DISABLED
T22:40:45-04:00 INFO [openvpn]   comp.alg = 0
T22:40:45-04:00 INFO [openvpn]   comp.flags = 24
T22:40:45-04:00 INFO [openvpn]   route_script = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   route_default_gateway = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   route_default_metric = 0
T22:40:45-04:00 INFO [openvpn]   route_noexec = DISABLED
T22:40:45-04:00 INFO [openvpn]   route_delay = 0
T22:40:45-04:00 INFO [openvpn]   route_delay_window = 30
T22:40:45-04:00 INFO [openvpn]   route_delay_defined = DISABLED
T22:40:45-04:00 INFO [openvpn]   route_nopull = DISABLED
T22:40:45-04:00 INFO [openvpn]   route_gateway_via_dhcp = DISABLED
T22:40:45-04:00 INFO [openvpn]   allow_pull_fqdn = DISABLED
T22:40:45-04:00 INFO [openvpn]   Pull filters:
T22:40:45-04:00 INFO [openvpn]     ignore "auth-token"
T22:40:45-04:00 INFO [openvpn]     ignore "tun-ipv6"
T22:40:45-04:00 INFO [openvpn]     ignore "route-ipv6"
T22:40:45-04:00 INFO [openvpn]     ignore "ifconfig-ipv6"
T22:40:45-04:00 INFO [openvpn]   management_addr = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   management_port = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   management_user_pass = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   management_log_history_cache = 250
T22:40:45-04:00 INFO [openvpn]   management_echo_buffer_size = 100
T22:40:45-04:00 INFO [openvpn]   management_client_user = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   management_client_group = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   management_flags = 0
T22:40:45-04:00 INFO [openvpn]   shared_secret_file = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   key_direction = 1
T22:40:45-04:00 INFO [openvpn]   ciphername = 'aes-256-cbc'
T22:40:45-04:00 INFO [openvpn]   ncp_ciphers = 'AES-256-CBC:AES-256-GCM'
T22:40:45-04:00 INFO [openvpn]   authname = 'sha512'
T22:40:45-04:00 INFO [openvpn]   engine = DISABLED
T22:40:45-04:00 INFO [openvpn]   replay = ENABLED
T22:40:45-04:00 INFO [openvpn]   mute_replay_warnings = ENABLED
T22:40:45-04:00 INFO [openvpn]   replay_window = 64
T22:40:45-04:00 INFO [openvpn]   replay_time = 15
T22:40:45-04:00 INFO [openvpn]   packet_id_file = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   test_crypto = DISABLED
T22:40:45-04:00 INFO [openvpn]   tls_server = DISABLED
T22:40:45-04:00 INFO [openvpn]   tls_client = ENABLED
T22:40:45-04:00 INFO [openvpn]   ca_file = '[INLINE]'
T22:40:45-04:00 INFO [openvpn]   ca_path = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   dh_file = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   cert_file = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   extra_certs_file = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   priv_key_file = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   pkcs12_file = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   cipher_list = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   cipher_list_tls13 = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   tls_cert_profile = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   tls_verify = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   tls_export_cert = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   verify_x509_type = 0
T22:40:45-04:00 INFO [openvpn]   verify_x509_name = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   crl_file = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   ns_cert_type = 0
T22:40:45-04:00 INFO [openvpn]   remote_cert_ku[i] = 65535
T22:40:45-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:40:45-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:40:45-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:40:45-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:40:45-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:40:45-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:40:45-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:40:45-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:40:45-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:40:45-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:40:45-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:40:45-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:40:45-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:40:45-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:40:45-04:00 INFO [openvpn]   remote_cert_ku[i] = 0
T22:40:45-04:00 INFO [openvpn]   remote_cert_eku = 'TLS Web Server Authentication'
T22:40:45-04:00 INFO [openvpn]   ssl_flags = 192
T22:40:45-04:00 INFO [openvpn]   tls_timeout = 2
T22:40:45-04:00 INFO [openvpn]   renegotiate_bytes = -1
T22:40:45-04:00 INFO [openvpn]   renegotiate_packets = 0
T22:40:45-04:00 INFO [openvpn]   renegotiate_seconds = 0
T22:40:45-04:00 INFO [openvpn]   handshake_window = 60
T22:40:45-04:00 INFO [openvpn]   transition_window = 3600
T22:40:45-04:00 INFO [openvpn]   single_session = DISABLED
T22:40:45-04:00 INFO [openvpn]   push_peer_info = DISABLED
T22:40:45-04:00 INFO [openvpn]   tls_exit = ENABLED
T22:40:45-04:00 INFO [openvpn]   tls_crypt_v2_metadata = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   server_network = 0.0.0.0
T22:40:45-04:00 INFO [openvpn]   server_netmask = 0.0.0.0
T22:40:45-04:00 INFO [openvpn]   server_network_ipv6 = ::
T22:40:45-04:00 INFO [openvpn]   server_netbits_ipv6 = 0
T22:40:45-04:00 INFO [openvpn]   server_bridge_ip = 0.0.0.0
T22:40:45-04:00 INFO [openvpn]   server_bridge_netmask = 0.0.0.0
T22:40:45-04:00 INFO [openvpn]   server_bridge_pool_start = 0.0.0.0
T22:40:45-04:00 INFO [openvpn]   server_bridge_pool_end = 0.0.0.0
T22:40:45-04:00 INFO [openvpn]   ifconfig_pool_defined = DISABLED
T22:40:45-04:00 INFO [openvpn]   ifconfig_pool_start = 0.0.0.0
T22:40:45-04:00 INFO [openvpn]   ifconfig_pool_end = 0.0.0.0
T22:40:45-04:00 INFO [openvpn]   ifconfig_pool_netmask = 0.0.0.0
T22:40:45-04:00 INFO [openvpn]   ifconfig_pool_persist_filename = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   ifconfig_pool_persist_refresh_freq = 600
T22:40:45-04:00 INFO [openvpn]   ifconfig_ipv6_pool_defined = DISABLED
T22:40:45-04:00 INFO [openvpn]   ifconfig_ipv6_pool_base = ::
T22:40:45-04:00 INFO [openvpn]   ifconfig_ipv6_pool_netbits = 0
T22:40:45-04:00 INFO [openvpn]   n_bcast_buf = 256
T22:40:45-04:00 INFO [openvpn]   tcp_queue_limit = 64
T22:40:45-04:00 INFO [openvpn]   real_hash_size = 256
T22:40:45-04:00 INFO [openvpn]   virtual_hash_size = 256
T22:40:45-04:00 INFO [openvpn]   client_connect_script = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   learn_address_script = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   client_disconnect_script = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   client_crresponse_script = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   client_config_dir = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   ccd_exclusive = DISABLED
T22:40:45-04:00 INFO [openvpn]   tmp_dir = '/tmp'
T22:40:45-04:00 INFO [openvpn]   push_ifconfig_defined = DISABLED
T22:40:45-04:00 INFO [openvpn]   push_ifconfig_local = 0.0.0.0
T22:40:45-04:00 INFO [openvpn]   push_ifconfig_remote_netmask = 0.0.0.0
T22:40:45-04:00 INFO [openvpn]   push_ifconfig_ipv6_defined = DISABLED
T22:40:45-04:00 INFO [openvpn]   push_ifconfig_ipv6_local = ::/0
T22:40:45-04:00 INFO [openvpn]   push_ifconfig_ipv6_remote = ::
T22:40:45-04:00 INFO [openvpn]   enable_c2c = DISABLED
T22:40:45-04:00 INFO [openvpn]   duplicate_cn = DISABLED
T22:40:45-04:00 INFO [openvpn]   cf_max = 0
T22:40:45-04:00 INFO [openvpn]   cf_per = 0
T22:40:45-04:00 INFO [openvpn]   cf_initial_max = 100
T22:40:45-04:00 INFO [openvpn]   cf_initial_per = 10
T22:40:45-04:00 INFO [openvpn]   max_clients = 1024
T22:40:45-04:00 INFO [openvpn]   max_routes_per_client = 256
T22:40:45-04:00 INFO [openvpn]   auth_user_pass_verify_script = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   auth_user_pass_verify_script_via_file = DISABLED
T22:40:45-04:00 INFO [openvpn]   auth_token_generate = DISABLED
T22:40:45-04:00 INFO [openvpn]   auth_token_lifetime = 0
T22:40:45-04:00 INFO [openvpn]   auth_token_secret_file = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   port_share_host = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   port_share_port = '[UNDEF]'
T22:40:45-04:00 INFO [openvpn]   vlan_tagging = DISABLED
T22:40:45-04:00 INFO [openvpn]   vlan_accept = all
T22:40:45-04:00 INFO [openvpn]   vlan_pvid = 1
T22:40:45-04:00 INFO [openvpn]   client = ENABLED
T22:40:45-04:00 INFO [openvpn]   pull = ENABLED
T22:40:45-04:00 INFO [openvpn]   auth_user_pass_file = '/etc/openvpn/auth.conf'
T22:40:45-04:00 INFO [openvpn] OpenVPN 2.6.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
T22:40:45-04:00 INFO [openvpn] library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
T22:40:45-04:00 INFO [openvpn] Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
T22:40:45-04:00 INFO [openvpn] Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
T22:40:45-04:00 INFO [openvpn] Control Channel MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1250 tun_max_mtu:0 headroom:126 payload:1600 tailroom:126 ET:0 ]
T22:40:45-04:00 INFO [openvpn] Data Channel MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1500 tun_max_mtu:1600 headroom:136 payload:1800 tailroom:568 ET:32 ]
T22:40:45-04:00 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET][redacted]:443
T22:40:45-04:00 INFO [openvpn] Socket Buffers: R=[131072->131072] S=[16384->16384]
T22:40:45-04:00 INFO [openvpn] Attempting to establish TCP connection with [AF_INET][redacted]:443
T22:40:45-04:00 INFO [openvpn] TCP connection established with [AF_INET][redacted]:443
T22:40:45-04:00 INFO [openvpn] TCPv4_CLIENT link local: (not bound)
T22:40:45-04:00 INFO [openvpn] TCPv4_CLIENT link remote: [AF_INET][redacted]:443
T22:40:45-04:00 INFO [openvpn] TLS: Initial packet from [AF_INET][redacted]:443, sid=1b1151b0 41a10818
T22:40:46-04:00 INFO [openvpn] VERIFY OK: depth=2, C=CH, O=ProtonVPN AG, CN=ProtonVPN Root CA
T22:40:46-04:00 INFO [openvpn] VERIFY OK: depth=1, C=CH, O=ProtonVPN AG, CN=ProtonVPN Intermediate CA 1
T22:40:46-04:00 INFO [openvpn] VERIFY KU OK
T22:40:46-04:00 INFO [openvpn] Validating certificate extended key usage
T22:40:46-04:00 INFO [openvpn] ++ Certificate has EKU (str) 1.3.6.1.5.5.8.2.2, expects TLS Web Server Authentication
T22:40:46-04:00 INFO [openvpn] ++ Certificate has EKU (oid) 1.3.6.1.5.5.8.2.2, expects TLS Web Server Authentication
T22:40:46-04:00 INFO [openvpn] ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
T22:40:46-04:00 INFO [openvpn] VERIFY EKU OK
T22:40:46-04:00 INFO [openvpn] VERIFY OK: depth=0, CN=[redacted].protonvpn.net
T22:40:46-04:00 INFO [openvpn] Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 4096 bits RSA, signature: RSA-SHA256, peer temporary key: 521 bits [redacted]
T22:40:46-04:00 INFO [openvpn] [[redacted].protonvpn.net] Peer Connection Initiated with [AF_INET][redacted]:443
T22:40:46-04:00 INFO [openvpn] TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1
T22:40:46-04:00 INFO [openvpn] TLS: tls_multi_process: initial untrusted session promoted to trusted
T22:40:47-04:00 INFO [openvpn] SENT CONTROL [[redacted].protonvpn.net]: 'PUSH_REQUEST' (status=1)
T22:40:47-04:00 INFO [openvpn] PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 10.80.0.1,redirect-gateway def1,explicit-exit-notify,comp-lzo no,tun-ipv6,route-gateway 10.80.0.1,topology subnet,ping 10,ping-restart 60,socket-flags TCP_NODELAY,ifconfig 10.80.0.2 255.255.0.0,peer-id 0,cipher AES-256-GCM,protocol-flags cc-exit tls-ekm dyn-tls-crypt,tun-mtu 1500'
T22:40:47-04:00 INFO [openvpn] Pushed option removed by filter: 'tun-ipv6'
T22:40:47-04:00 INFO [openvpn] OPTIONS IMPORT: --explicit-exit-notify can only be used with --proto udp
T22:40:47-04:00 INFO [openvpn] OPTIONS IMPORT: --socket-flags option modified
T22:40:47-04:00 INFO [openvpn] Socket flags: TCP_NODELAY=1 succeeded
T22:40:47-04:00 INFO [openvpn] OPTIONS IMPORT: --ifconfig/up options modified
T22:40:47-04:00 INFO [openvpn] OPTIONS IMPORT: route options modified
T22:40:47-04:00 INFO [openvpn] OPTIONS IMPORT: route-related options modified
T22:40:47-04:00 INFO [openvpn] OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
T22:40:47-04:00 INFO [openvpn] OPTIONS IMPORT: tun-mtu set to 1500
T22:40:47-04:00 INFO [openvpn] ROUTE_GATEWAY 172.20.0.1/255.255.0.0 IFACE=eth0 HWADDR=[redacted]
T22:40:47-04:00 INFO [openvpn] TUN/TAP device tun0 opened
T22:40:47-04:00 INFO [openvpn] do_ifconfig, ipv4=1, ipv6=0
T22:40:47-04:00 INFO [openvpn] /sbin/ip link set dev tun0 up mtu 1500
T22:40:47-04:00 INFO [openvpn] /sbin/ip link set dev tun0 up
T22:40:47-04:00 INFO [openvpn] /sbin/ip addr add dev tun0 10.80.0.2/16
T22:40:47-04:00 INFO [openvpn] /sbin/ip route add [redacted]/32 via 172.20.0.1
T22:40:47-04:00 INFO [openvpn] /sbin/ip route add 0.0.0.0/1 via 10.80.0.1
T22:40:47-04:00 INFO [openvpn] /sbin/ip route add 128.0.0.0/1 via 10.80.0.1
T22:40:47-04:00 INFO [openvpn] Data Channel MTU parms [ mss_fix:1351 max_frag:0 tun_mtu:1500 tun_max_mtu:1600 headroom:136 payload:1800 tailroom:568 ET:32 ]
T22:40:47-04:00 INFO [openvpn] Outgoing dynamic tls-crypt: Cipher 'AES-256-CTR' initialized with 256 bit key
T22:40:47-04:00 INFO [openvpn] Outgoing dynamic tls-crypt: Using 256 bit message hash 'SHA256' for HMAC authentication
T22:40:47-04:00 INFO [openvpn] Incoming dynamic tls-crypt: Cipher 'AES-256-CTR' initialized with 256 bit key
T22:40:47-04:00 INFO [openvpn] Incoming dynamic tls-crypt: Using 256 bit message hash 'SHA256' for HMAC authentication
T22:40:47-04:00 INFO [openvpn] Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
T22:40:47-04:00 INFO [openvpn] Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
T22:40:47-04:00 INFO [openvpn] UID set to nonrootuser
T22:40:47-04:00 INFO [openvpn] Initialization Sequence Completed
T22:40:47-04:00 INFO [openvpn] Data Channel: cipher 'AES-256-GCM', peer-id: 0, compression: 'stub'
T22:40:47-04:00 INFO [openvpn] Timers: ping 10, ping-restart 60
T22:40:47-04:00 INFO [port forwarding] starting
T22:40:47-04:00 INFO [openvpn] Protocol options: protocol-flags cc-exit tls-ekm dyn-tls-crypt
T22:40:47-04:00 ERROR [vpn] port forwarding for the first time: getting external IPv4 address: executing remote procedure call: reading from udp connection: read udp 10.80.0.2:41301->10.80.0.1:5351: recvfrom: connection refused - make sure you have +pmp at the end of your OpenVPN username
T22:40:48-04:00 INFO [ip getter] Public IP address is [redacted] (Canada, Ontario, Toronto)
T22:40:49-04:00 INFO [healthcheck] healthy!

services:
  qbittorrent:
    container_name: qbittorrent
    depends_on:
      - gt-qbittorrent
    environment:
      PGID: 1000
      PUID: 1000
      TZ: America/New_York
      WEBUI_PORT: 8080
      DOCKER_MODS: ghcr.io/t-anc/gsp-qbittorent-gluetun-sync-port-mod:main
      GSP_SLEEP: 125
      GSP_MINIMAL_LOGS: false
    healthcheck:
      interval: 90s
      retries: 3
      test: curl --fail "http://localhost:8080" || exit 1
      timeout: 20s
    image: lscr.io/linuxserver/qbittorrent:latest
    network_mode: "service:gt-qbittorrent"
    restart: unless-stopped
    volumes:
      - "./config-qbittorrent/config/:/config/"
      # - "./config-qbittorrent/scripts/:/custom-cont-init.d/:ro"
      - "../mnt/data-prowlarrs/:/data/"

  gt-qbittorrent:
    # command: update -enduser -providers protonvpn
    image: qmcgaw/gluetun:v3
    container_name: gt-qbittorrent
    cap_add:
      - NET_ADMIN
      # - SYS_MODULE
    restart: unless-stopped
    networks:
      proxy:
        ipv4_address: "172.20.0.8"
    healthcheck:
      interval: 50s
      retries: 3
      test: ping -c 1 "1.1.1.1" || exit 1
      timeout: 25s
    devices:
      - "/dev/net/tun:/dev/net/tun:ro"
    volumes:
      - "./config-gluetun:/gluetun"
      # - "./config-wireguard/wireguard.conf:/gluetun/wireguard/wg0.conf:ro"
      # - "./config-openvpn/tun0.ovpn:/gluetun/openvpn/tun0.ovpn:ro"
      # - "/lib/modules:/lib/modules:ro"
    environment:
      PGID: 1000
      PUID: 1000
      ## WIREGUARD Environment
      # VPN_TYPE: wireguard
      # VPN_SERVICE_PROVIDER: custom
      ## OPENVPN Environment
      VPN_TYPE: openvpn
      VPN_SERVICE_PROVIDER: protonvpn
      OPENVPN_USER: ${OPENVPN_USER:?error}
      OPENVPN_PASSWORD: ${OPENVPN_PASSWORD:?error}
      SERVER_COUNTRIES: Argentina,Australia,Austria,Belgium,Brazil,Cambodia,Canada,Costa Rica,Denmark,Egypt,Finland,France,Germany,Greece,Hungary,Iceland,Ireland,Israel,Italy,Japan,Korea,Latvia,Luxembourg,Mexico,Netherlands,New Zealand,Norway,Poland,Portugal,Puerto Rico,South Africa,Spain,Sweden,Switzerland,Turkey,United Kingdom,United States
      # SERVER_HOSTNAMES: 
      OPENVPN_PROTOCOL: tcp
      OPENVPN_VERBOSITY: 5
      OPENVPN_VERSION: 2.6
      ## OPENVPN FILE
      # VPN_TYPE: openvpn
      # VPN_SERVICE_PROVIDER: custom
      # OPENVPN_USER: ${OPENVPN_USER:?error}
      # OPENVPN_PASSWORD: ${OPENVPN_PASSWORD:?error}
      # OPENVPN_CUSTOM_CONFIG: /gluetun/openvpn/tun0.ovpn
      # VPN_PORT_FORWARDING_PROVIDER: protonvpn
      # OPENVPN_VERBOSITY: 5
      # OPENVPN_VERSION: 2.6
      ## COMMON
      # DOT: off
      TZ: America/New_York
      UPDATER_PERIOD: 1h
      VPN_PORT_FORWARDING: on
      BLOCK_SURVEILLANCE: yes
    labels:
      traefik.enable: true
      traefik.http.routers.torrent.middlewares: authelia@docker,retry@file,compress@file,default-headers@file
      traefik.http.routers.torrent.rule: Host(`torrent.example.com`)
      traefik.http.routers.torrent.service: torrent
      traefik.http.services.torrent.loadbalancer.server.port: 8080

networks:
  proxy:
    external: true
    name: proxy