Wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Docker - Gluetun - Manual Connection Testing ======

<code bash>
docker run -it --rm --cap-add=NET_ADMIN --device /dev/net/tun -v ~/docker/appdata/gluetun:/gluetun -e VPN_SERVICE_PROVIDER=expressvpn -e OPENVPN_USER=blahblah -e OPENVPN_PASSWORD=blahblah -e SERVER_COUNTRIES=Netherlands -e OPENVPN_VERBOSITY=2 -e HEALTH_VPN_DURATION_INITIAL=10s qmcgaw/gluetun
</code>

returns:

<code>
========================================
========================================
=============== gluetun ================
========================================
=========== Made with ❤️ by ============
======= https://github.com/qdm12 =======
========================================
========================================

Running version latest built on 2025-01-22T08:30:14.628Z (commit 13532c8)

🔧 Need help? ☕ Discussion? https://github.com/qdm12/gluetun/discussions/new/choose
🐛 Bug? ✨ New feature? https://github.com/qdm12/gluetun/issues/new/choose
💻 Email? quentin.mcgaw@gmail.com
💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
2025-07-21T12:25:24Z INFO [routing] default route found: interface eth0, gateway 172.17.0.1, assigned IP 172.17.0.2 and family v4
2025-07-21T12:25:24Z INFO [routing] local ethernet link found: eth0
2025-07-21T12:25:24Z INFO [routing] local ipnet found: 172.17.0.0/16
2025-07-21T12:25:25Z INFO [firewall] enabling...
2025-07-21T12:25:25Z INFO [firewall] enabled successfully
2025-07-21T12:25:25Z INFO [storage] merging by most recent 20776 hardcoded servers and 20746 servers read from /gluetun/servers.json
2025-07-21T12:25:25Z INFO [storage] Using expressvpn servers from file which are 1098 days more recent
2025-07-21T12:25:25Z INFO Alpine version: 3.20.5
2025-07-21T12:25:25Z INFO OpenVPN 2.5 version: 2.5.10
2025-07-21T12:25:25Z INFO OpenVPN 2.6 version: 2.6.11
2025-07-21T12:25:25Z INFO IPtables version: v1.8.10
2025-07-21T12:25:25Z INFO Settings summary:
├── VPN settings:
|   ├── VPN provider settings:
|   |   ├── Name: expressvpn
|   |   └── Server selection settings:
|   |       ├── VPN type: openvpn
|   |       ├── Countries: netherlands
|   |       └── OpenVPN server selection settings:
|   |           └── Protocol: UDP
|   └── OpenVPN settings:
|       ├── OpenVPN version: 2.6
|       ├── User: [set]
|       ├── Password: [set]
|       ├── Network interface: tun0
|       ├── Run OpenVPN as: root
|       └── Verbosity level: 2
├── DNS settings:
|   ├── Keep existing nameserver(s): no
|   ├── DNS server address to use: 127.0.0.1
|   └── DNS over TLS settings:
|       ├── Enabled: yes
|       ├── Update period: every 24h0m0s
|       ├── Upstream resolvers:
|       |   └── cloudflare
|       ├── Caching: yes
|       ├── IPv6: no
|       └── DNS filtering settings:
|           ├── Block malicious: yes
|           ├── Block ads: no
|           ├── Block surveillance: no
|           └── Blocked IP networks:
|               ├── 127.0.0.1/8
|               ├── 10.0.0.0/8
|               ├── 172.16.0.0/12
|               ├── 192.168.0.0/16
|               ├── 169.254.0.0/16
|               ├── ::1/128
|               ├── fc00::/7
|               ├── fe80::/10
|               ├── ::ffff:127.0.0.1/104
|               ├── ::ffff:10.0.0.0/104
|               ├── ::ffff:169.254.0.0/112
|               ├── ::ffff:172.16.0.0/108
|               └── ::ffff:192.168.0.0/112
├── Firewall settings:
|   └── Enabled: yes
├── Log settings:
|   └── Log level: info
├── Health settings:
|   ├── Server listening address: 127.0.0.1:9999
|   ├── Target address: cloudflare.com:443
|   ├── Duration to wait after success: 5s
|   ├── Read header timeout: 100ms
|   ├── Read timeout: 500ms
|   └── VPN wait durations:
|       ├── Initial duration: 10s
|       └── Additional duration: 5s
├── Shadowsocks server settings:
|   └── Enabled: no
├── HTTP proxy settings:
|   └── Enabled: no
├── Control server settings:
|   ├── Listening address: :8000
|   ├── Logging: yes
|   └── Authentication file path: /gluetun/auth/config.toml
├── Storage settings:
|   └── Filepath: /gluetun/servers.json
├── OS Alpine settings:
|   ├── Process UID: 1000
|   └── Process GID: 1000
├── Public IP settings:
|   ├── IP file path: /tmp/gluetun/ip
|   ├── Public IP data base API: ipinfo
|   └── Public IP data backup APIs:
|       ├── ifconfigco
|       ├── ip2location
|       └── cloudflare
└── Version settings:
    └── Enabled: yes
2025-07-21T12:25:25Z INFO [routing] default route found: interface eth0, gateway 172.17.0.1, assigned IP 172.17.0.2 and family v4
2025-07-21T12:25:25Z INFO [routing] adding route for 0.0.0.0/0
2025-07-21T12:25:25Z INFO [firewall] setting allowed subnets...
2025-07-21T12:25:25Z INFO [routing] default route found: interface eth0, gateway 172.17.0.1, assigned IP 172.17.0.2 and family v4
2025-07-21T12:25:25Z INFO [dns] using plaintext DNS at address 1.1.1.1
2025-07-21T12:25:25Z INFO [http server] http server listening on [::]:8000
2025-07-21T12:25:25Z INFO [healthcheck] listening on 127.0.0.1:9999
2025-07-21T12:25:25Z INFO [firewall] allowing VPN connection...
2025-07-21T12:25:25Z INFO [openvpn] OpenVPN 2.6.11 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
2025-07-21T12:25:25Z INFO [openvpn] library versions: OpenSSL 3.3.2 3 Sep 2024, LZO 2.10
2025-07-21T12:25:25Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]173.239.199.138:1195
2025-07-21T12:25:25Z INFO [openvpn] UDPv4 link local: (not bound)
2025-07-21T12:25:25Z INFO [openvpn] UDPv4 link remote: [AF_INET]173.239.199.138:1195
2025-07-21T12:25:25Z INFO [openvpn] VERIFY OK: depth=1, C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=ExpressVPN CA, emailAddress=support@expressvpn.com
2025-07-21T12:25:25Z INFO [openvpn] VERIFY KU OK
2025-07-21T12:25:25Z INFO [openvpn] Validating certificate extended key usage
2025-07-21T12:25:25Z INFO [openvpn] ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2025-07-21T12:25:25Z INFO [openvpn] VERIFY EKU OK
2025-07-21T12:25:25Z INFO [openvpn] VERIFY X509NAME OK: C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=Server-10831-1a, emailAddress=support@expressvpn.com
2025-07-21T12:25:25Z INFO [openvpn] VERIFY OK: depth=0, C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=Server-10831-1a, emailAddress=support@expressvpn.com
2025-07-21T12:25:26Z INFO [openvpn] Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bits RSA, signature: RSA-SHA256, peer temporary key: 253 bits X25519
2025-07-21T12:25:26Z INFO [openvpn] [Server-10831-1a] Peer Connection Initiated with [AF_INET]173.239.199.138:1195
2025-07-21T12:25:27Z INFO [openvpn] TUN/TAP device tun0 opened
2025-07-21T12:25:27Z INFO [openvpn] /sbin/ip link set dev tun0 up mtu 1500
2025-07-21T12:25:27Z INFO [openvpn] /sbin/ip link set dev tun0 up
2025-07-21T12:25:27Z INFO [openvpn] /sbin/ip addr add dev tun0 10.151.0.245/16
2025-07-21T12:25:27Z INFO [openvpn] UID set to nonrootuser
2025-07-21T12:25:27Z INFO [openvpn] Initialization Sequence Completed
2025-07-21T12:25:27Z INFO [openvpn] Data Channel: cipher 'AES-256-GCM', peer-id: 50, compression: 'stub'
2025-07-21T12:25:27Z INFO [openvpn] Timers: ping 10, ping-restart 60
2025-07-21T12:25:27Z INFO [openvpn] Protocol options: explicit-exit-notify 1, protocol-flags cc-exit tls-ekm dyn-tls-crypt
2025-07-21T12:25:27Z INFO [dns] downloading hostnames and IP block lists
2025-07-21T12:25:27Z INFO [healthcheck] healthy!
2025-07-21T12:25:28Z INFO [dns] DNS server listening on [::]:53
2025-07-21T12:25:28Z INFO [dns] ready
2025-07-21T12:25:28Z INFO [ip getter] Public IP address is 45.128.199.121 (Netherlands, North Holland, Amsterdam - source: ipinfo)
2025-07-21T12:25:29Z INFO [vpn] You are running 1 commit behind the most recent latest
</code>

----