openvpn connection stops working after upgraded to 2.0.9 with mirrored networking #10879

yongzhang · 2023-12-06T06:47:17Z

Windows Version

Microsoft Windows [Version 10.0.22631.2715]

WSL Version

2.0.9

Are you using WSL 1 or WSL 2?

WSL 2
WSL 1

Kernel Version

Linux version 5.15.133.1-microsoft-standard-WSL2 (root@1c602f52c2e4)

Distro Version

Ubuntu 22.04

Other Software

OpenVPN Connect 3.4.2

Repro Steps

Update .wslconfig with below settings:

[experimental]
autoMemoryReclaim=gradual
sparseVhd=true
dnsTunneling=true
networkingMode=mirrored
hostAddressLoopback=true

Connect OpenVPN and start wsl2
telnet my internal ip address in vpn network from wsl2, I see timeout:

$ telnet 10.120.31.82 22
Trying 10.120.31.82...
telnet: Unable to connect to remote host: Connection timed out

But telnet from windows cmd, I can telnet:

Additional information:

$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc mq state DOWN group default qlen 1000
    link/ether 00:15:5d:eb:59:b0 brd ff:ff:ff:ff:ff:ff
3: loopback0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 00:15:5d:a0:d1:f0 brd ff:ff:ff:ff:ff:ff
4: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc mq state DOWN group default qlen 1000
    link/ether 00:15:5d:4a:52:c8 brd ff:ff:ff:ff:ff:ff
5: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 08:8e:90:93:b8:cc brd ff:ff:ff:ff:ff:ff
    inet 10.140.97.86/20 brd 10.140.111.255 scope global noprefixroute eth2
       valid_lft forever preferred_lft forever
    inet6 fe80::d8ec:c0a:e95a:116f/64 scope link nodad noprefixroute
       valid_lft forever preferred_lft forever
6: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 00:15:5d:09:f7:8c brd ff:ff:ff:ff:ff:ff
    inet 172.25.0.2/21 brd 172.25.7.255 scope global noprefixroute eth3
       valid_lft forever preferred_lft forever
7: br-31ee55146667: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
    link/ether 02:42:d8:22:99:c4 brd ff:ff:ff:ff:ff:ff
    inet 172.20.0.1/16 brd 172.20.255.255 scope global br-31ee55146667
       valid_lft forever preferred_lft forever
8: br-579eb2cdeae4: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
    link/ether 02:42:43:61:bd:fe brd ff:ff:ff:ff:ff:ff
    inet 172.17.0.1/16 brd 172.17.255.255 scope global br-579eb2cdeae4
       valid_lft forever preferred_lft forever
9: br-72e0a078af51: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
    link/ether 02:42:17:cb:3a:c2 brd ff:ff:ff:ff:ff:ff
    inet 172.23.0.1/16 brd 172.23.255.255 scope global br-72e0a078af51
       valid_lft forever preferred_lft forever
10: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
    link/ether 02:42:70:9c:c7:f3 brd ff:ff:ff:ff:ff:ff
    inet 172.18.0.1/16 brd 172.18.255.255 scope global docker0
       valid_lft forever preferred_lft forever
11: br-09be57e2d7d9: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
    link/ether 02:42:a3:b0:89:3f brd ff:ff:ff:ff:ff:ff
    inet 172.19.0.1/16 brd 172.19.255.255 scope global br-09be57e2d7d9
       valid_lft forever preferred_lft forever

eth2 has the ip address from my wifi adapter in windows, eth3 is the client ip assigned by openvpn server (172.25.0.0/21).

$ ip route show
default via 10.140.96.1 dev eth2 proto kernel metric 45
10.90.0.0/16 via 172.25.0.1 dev eth3 proto kernel metric 257
10.110.0.0/16 via 172.25.0.1 dev eth3 proto kernel metric 257
10.120.0.0/16 via 172.25.0.1 dev eth3 proto kernel metric 257
10.130.0.0/16 via 172.25.0.1 dev eth3 proto kernel metric 257
10.140.96.0/20 dev eth2 proto kernel scope link metric 301
10.140.96.1 dev eth2 proto kernel scope link metric 45
10.140.96.1 dev eth2 proto kernel scope link metric 301
<my vpn server public ip> via 10.140.96.1 dev eth2 proto kernel metric 301
169.254.0.0/16 dev eth2 scope link metric 1000
172.17.0.0/16 dev br-579eb2cdeae4 proto kernel scope link src 172.17.0.1 linkdown
172.18.0.0/16 dev docker0 proto kernel scope link src 172.18.0.1 linkdown
172.19.0.0/16 dev br-09be57e2d7d9 proto kernel scope link src 172.19.0.1 linkdown
172.20.0.0/16 dev br-31ee55146667 proto kernel scope link src 172.20.0.1 linkdown
172.23.0.0/16 dev br-72e0a078af51 proto kernel scope link src 172.23.0.1 linkdown
172.25.0.0/21 dev eth3 proto kernel scope link metric 257
172.25.0.1 dev eth3 proto kernel scope link metric 257

Seems like nothing wrong with the routes?

PS: I also have cisco anyconnect vpn client which works very well with mirrored networking.

Expected Behavior

OpenVPN connection should work with mirrored networking

Actual Behavior

OpenVPN connection stopped working with mirrored networking

Diagnostic Logs

No response

The text was updated successfully, but these errors were encountered:

chanpreetdhanjal · 2023-12-06T23:55:32Z

Could you please follow the steps below and attach the diagnostic logs? https://github.com/microsoft/WSL/blob/master/CONTRIBUTING.md#collect-wsl-logs-for-networking-issues

craigloewen-msft · 2023-12-13T19:13:11Z

Hi @yongzhang , currently OpenVPN does not work with mirrored mode. We are investigating where the root cause of this issue could be, for now I've labeled it as "External". Thanks for filing this!

winterallen · 2023-12-16T12:08:57Z

Hi @yongzhang , currently OpenVPN does not work with mirrored mode. We are investigating where the root cause of this issue could be, for now I've labeled it as "External". Thanks for filing this!

I've also encountered the same issue and am looking forward to a solution.

tomadimitrie · 2024-03-13T18:14:42Z

Hello, OpenVPN is still not working in the latest build. @craigloewen-msft did you manage to investigate the cause?

Edit: so just the official OpenVPN clients (both versions 2 and 3) are affected. Other clients such as Viscosity work great

ericellb · 2024-05-07T16:58:42Z

Any updates on this?

dten · 2024-09-05T18:43:25Z

Other clients such as Viscosity work great

this is an interesting point. and in fact I can cause Viscosity to not work either if i change in its settings "Adapter type" to "Open TAP adapter (legacy)". for me this results in the same behaviour as using the open vpn client

dten · 2024-09-09T11:24:14Z

OpenVPN 2.4.7 works https://openvpn.net/community-downloads/ (it's from 2019)

2.4.8 breaks it

I had this theory from this other ticket about configuring MAC OpenVPN/tap-windows6#97

dten · 2024-09-09T14:28:52Z

I can also go back and forth between 2.5.10 (not working) and 2.6.0 (working) as long as i restart wsl between with wsl.exe --shutdown I can actually upgrade to 2.6.12 which is the latest version as long as i restart wsl after installing

DogeFlow · 2024-09-19T02:36:16Z

stay tuned

carlosrmendes · 2024-10-30T14:23:20Z

any update on this?

MohaAmiry · 2024-11-03T09:24:42Z

@carlosrmendes did you find a workaround for this?

carlosrmendes · 2024-11-04T09:11:36Z

@carlosrmendes did you find a workaround for this?

no, I downgraded openvpn to v2.4.7

OneBlue added needs-author-feedback network and removed needs-author-feedback labels Dec 6, 2023

craigloewen-msft added the external Issue exists outside of WSL components label Dec 13, 2023

tomadimitrie mentioned this issue Mar 13, 2024

Unable to access VPN from WSL2 when networking mode set to mirrored #11072

Closed

2 tasks

github-actions bot mentioned this issue Jun 12, 2024

WSL2 can't receive jumbo frames when using a VPN with a 9000 MTU and mirrored network. #11686

Closed

2 tasks

github-actions bot mentioned this issue Nov 21, 2024

WSL2 networkingMode=mirrored connection timed out when going over two VPNs #12309

Open

2 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

openvpn connection stops working after upgraded to 2.0.9 with mirrored networking #10879

openvpn connection stops working after upgraded to 2.0.9 with mirrored networking #10879

yongzhang commented Dec 6, 2023 •

edited

Loading

chanpreetdhanjal commented Dec 6, 2023

craigloewen-msft commented Dec 13, 2023

winterallen commented Dec 16, 2023

tomadimitrie commented Mar 13, 2024 •

edited

Loading

ericellb commented May 7, 2024

dten commented Sep 5, 2024

dten commented Sep 9, 2024 •

edited

Loading

dten commented Sep 9, 2024

DogeFlow commented Sep 19, 2024

carlosrmendes commented Oct 30, 2024

MohaAmiry commented Nov 3, 2024

carlosrmendes commented Nov 4, 2024

openvpn connection stops working after upgraded to 2.0.9 with mirrored networking #10879

openvpn connection stops working after upgraded to 2.0.9 with mirrored networking #10879

Comments

yongzhang commented Dec 6, 2023 • edited Loading

Windows Version

WSL Version

Are you using WSL 1 or WSL 2?

Kernel Version

Distro Version

Other Software

Repro Steps

Expected Behavior

Actual Behavior

Diagnostic Logs

chanpreetdhanjal commented Dec 6, 2023

craigloewen-msft commented Dec 13, 2023

winterallen commented Dec 16, 2023

tomadimitrie commented Mar 13, 2024 • edited Loading

ericellb commented May 7, 2024

dten commented Sep 5, 2024

dten commented Sep 9, 2024 • edited Loading

dten commented Sep 9, 2024

DogeFlow commented Sep 19, 2024

carlosrmendes commented Oct 30, 2024

MohaAmiry commented Nov 3, 2024

carlosrmendes commented Nov 4, 2024

yongzhang commented Dec 6, 2023 •

edited

Loading

tomadimitrie commented Mar 13, 2024 •

edited

Loading

dten commented Sep 9, 2024 •

edited

Loading