Getting TLS handshake timeout with AirVPN

[faketalent]

Is this urgent?

Kinda

Host OS

Ubuntu 22.04.2 LTS

CPU arch

x64

VPN service provider

AirVPN

What are you using to run the container

docker-compose

What is the version of Gluetun

Running version latest built

What's the problem 🤔

When I run gluetun, I always get the following error message after the "healthy" status ".
[dns over tls] cannot update files: Get "https://www.internic.net/domain/named.root": net/http: TLS handshake timeout".
I have tried a lot with different versions but nothing has changed.

As a note, I tried it with Perfect Privacy and everything worked there without problems (i.e. OpenVPN).

Share your logs

========================================
========================================
=============== gluetun ================
========================================
=========== Made with ❤️ by ============
======= https://github.com/qdm12 =======
========================================
========================================

Running version latest built on 2022-12-31T17:50:58.654Z (commit ea40b84)

🔧 Need help? https://github.com/qdm12/gluetun/discussions/new
🐛 Bug? https://github.com/qdm12/gluetun/issues/new
✨ New feature? https://github.com/qdm12/gluetun/issues/new
☕ Discussion? https://github.com/qdm12/gluetun/discussions/new
💻 Email? quentin.mcgaw@gmail.com
💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
2023-02-24T21:46:10+01:00 INFO [routing] default route found: interface eth0, gateway 172.18.0.1 and assigned IP 172.18.0.2
2023-02-24T21:46:10+01:00 INFO [routing] local ethernet link found: eth0
2023-02-24T21:46:10+01:00 INFO [routing] local ipnet found: 172.18.0.0/16
2023-02-24T21:46:10+01:00 INFO [firewall] enabling...
2023-02-24T21:46:11+01:00 INFO [firewall] enabled successfully
2023-02-24T21:46:11+01:00 INFO [storage] creating /gluetun/servers.json with 13224 hardcoded servers
2023-02-24T21:46:11+01:00 INFO Alpine version: 3.16.3
2023-02-24T21:46:11+01:00 INFO OpenVPN 2.4 version: 2.4.12
2023-02-24T21:46:11+01:00 INFO OpenVPN 2.5 version: 2.5.6
2023-02-24T21:46:11+01:00 INFO Unbound version: 1.15.0
2023-02-24T21:46:11+01:00 INFO IPtables version: v1.8.8
2023-02-24T21:46:11+01:00 INFO Settings summary:
├── VPN settings:
|   ├── VPN provider settings:
|   |   ├── Name: airvpn
|   |   └── Server selection settings:
|   |       ├── VPN type: openvpn
|   |       ├── Countries: netherlands
|   |       └── OpenVPN server selection settings:
|   |           └── Protocol: UDP
|   └── OpenVPN settings:
|       ├── OpenVPN version: 2.5
|       ├── User: [not set]
|       ├── Password: [not set]
|       ├── Client crt: [set]
|       ├── Client key: [set]
|       ├── Network interface: tun0
|       ├── Run OpenVPN as: root
|       └── Verbosity level: 1
├── DNS settings:
|   ├── DNS server address to use: 127.0.0.1
|   ├── Keep existing nameserver(s): no
|   └── DNS over TLS settings:
|       ├── Enabled: yes
|       ├── Update period: every 24h0m0s
|       ├── Unbound settings:
|       |   ├── Authoritative servers:
|       |   |   └── cloudflare
|       |   ├── Caching: yes
|       |   ├── IPv6: no
|       |   ├── Verbosity level: 1
|       |   ├── Verbosity details level: 0
|       |   ├── Validation log level: 0
|       |   ├── System user: root
|       |   └── Allowed networks:
|       |       ├── 0.0.0.0/0
|       |       └── ::/0
|       └── DNS filtering settings:
|           ├── Block malicious: yes
|           ├── Block ads: no
|           ├── Block surveillance: no
|           └── Blocked IP networks:
|               ├── 127.0.0.1/8
|               ├── 10.0.0.0/8
|               ├── 172.16.0.0/12
|               ├── 192.168.0.0/16
|               ├── 169.254.0.0/16
|               ├── ::1/128
|               ├── fc00::/7
|               ├── fe80::/10
|               ├── ::ffff:7f00:1/104
|               ├── ::ffff:a00:0/104
|               ├── ::ffff:a9fe:0/112
|               ├── ::ffff:ac10:0/108
|               └── ::ffff:c0a8:0/112
├── Firewall settings:
|   └── Enabled: yes
├── Log settings:
|   └── Log level: INFO
├── Health settings:
|   ├── Server listening address: 127.0.0.1:9999
|   ├── Target address: cloudflare.com:443
|   ├── Read header timeout: 100ms
|   ├── Read timeout: 500ms
|   └── VPN wait durations:
|       ├── Initial duration: 6s
|       └── Additional duration: 5s
├── Shadowsocks server settings:
|   └── Enabled: no
├── HTTP proxy settings:
|   └── Enabled: no
├── Control server settings:
|   ├── Listening address: :8000
|   └── Logging: yes
├── OS Alpine settings:
|   ├── Process UID: 1000
|   ├── Process GID: 1000
|   └── Timezone: Europe/Berlin
├── Public IP settings:
|   ├── Fetching: every 12h0m0s
|   └── IP file path: /tmp/gluetun/ip
└── Version settings:
    └── Enabled: yes
2023-02-24T21:46:11+01:00 INFO [routing] default route found: interface eth0, gateway 172.18.0.1 and assigned IP 172.18.0.2
2023-02-24T21:46:11+01:00 INFO [routing] adding route for 0.0.0.0/0
2023-02-24T21:46:11+01:00 INFO [firewall] setting allowed subnets...
2023-02-24T21:46:11+01:00 INFO [routing] default route found: interface eth0, gateway 172.18.0.1 and assigned IP 172.18.0.2
2023-02-24T21:46:11+01:00 INFO [dns over tls] using plaintext DNS at address 1.1.1.1
2023-02-24T21:46:11+01:00 INFO [http server] http server listening on [::]:8000
2023-02-24T21:46:11+01:00 INFO [healthcheck] listening on 127.0.0.1:9999
2023-02-24T21:46:11+01:00 INFO [firewall] allowing VPN connection...
2023-02-24T21:46:11+01:00 INFO [openvpn] OpenVPN 2.5.6 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Apr 17 2022
2023-02-24T21:46:11+01:00 INFO [openvpn] library versions: OpenSSL 1.1.1s  1 Nov 2022, LZO 2.10
2023-02-24T21:46:11+01:00 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]IP
2023-02-24T21:46:11+01:00 INFO [openvpn] UDP link local: (not bound)
2023-02-24T21:46:11+01:00 INFO [openvpn] UDP link remote: [AF_INET]IP
2023-02-24T21:46:11+01:00 WARN [openvpn] 'link-mtu' is used inconsistently, local='link-mtu 1550', remote='link-mtu 1602'
2023-02-24T21:46:11+01:00 WARN [openvpn] 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA512'
2023-02-24T21:46:11+01:00 INFO [openvpn] [Hydrus] Peer Connection Initiated with [AF_INET]IP
2023-02-24T21:46:11+01:00 INFO [openvpn] TUN/TAP device tun0 opened
2023-02-24T21:46:11+01:00 INFO [openvpn] /sbin/ip link set dev tun0 up mtu 1500
2023-02-24T21:46:11+01:00 INFO [openvpn] /sbin/ip link set dev tun0 up
2023-02-24T21:46:11+01:00 INFO [openvpn] /sbin/ip addr add dev tun0 10.19.150.15/24
2023-02-24T21:46:11+01:00 INFO [openvpn] UID set to nonrootuser
2023-02-24T21:46:11+01:00 INFO [openvpn] Initialization Sequence Completed
2023-02-24T21:46:11+01:00 INFO [dns over tls] downloading DNS over TLS cryptographic files
2023-02-24T21:46:12+01:00 INFO [healthcheck] healthy!
2023-02-24T21:46:21+01:00 WARN [dns over tls] cannot update files: Get "https://www.internic.net/domain/named.root": net/http: TLS handshake timeout
2023-02-24T21:46:21+01:00 INFO [dns over tls] attempting restart in 10s
2023-02-24T21:46:31+01:00 INFO [dns over tls] downloading DNS over TLS cryptographic files
2023-02-24T21:46:31+01:00 ERROR [ip getter] Get "https://ipinfo.io/": net/http: TLS handshake timeout

Share your configuration

version: "3.7"
name: "vpn"
services:
  # VPN
  gluetun:
    image: qmcgaw/gluetun:latest
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    ports:
      - 9080:8080
    environment:
      - TZ=Europe/Berlin
      # AirVPN
      - OPENVPN_KEY=${OPENVPN_KEY}
      - OPENVPN_CERT=${OPENVPN_CERT}
      - VPN_SERVICE_PROVIDER=airvpn
      - SERVER_COUNTRIES=Netherlands
    restart: unless-stopped

[qdm12]

That might be solved using #2044 (comment)