Hi everyone, the issue might very well be with the vpn provider, but i am curious if it could be router related as well. I had around 2 months of a drama-free experience using the provider surfshark on the wireguard protocol, but then i had a power outage and after power was back, the vpn did not want to connect. I generated new keys and download a new configuration, but since then a game i like to play always kicks me out of lobbys after literary 5 seconds and says im offline. i can reconnect but after 5 seconds it happens again. A smartthings hub device for smart home also constantly sends me push notifications it has gone offline, has reconnected etc. this happens every few hours. During live chats i had with surfshark themselfs trying to solve it, i had "message send failed" often. Web browsing on any devices are without issues though, and disabling the wireguard interface on my DL-WRX36 router also fixes things. Seems like the connection problems are therefore with constant connections, not request-download connections like on web browsers.
So are there things to try on the router side of things in order to fix this?
I already tried to chat with surfshark about it. I changed dns settings to no luck, and tried 3 locations in total without luck. I also did a attended upgrade to the latest openwrt firmware to try to fix it, which it did not.
I already made a network log for a other thread, see the following:
uci export network; \
> uci export network; \
> uci export dhcp; uci export firewall; \
> uci export pbr; \
> ip -4 addr ; ip -4 ro li tab all ; ip -4 ru; \
> ls -l /etc/resolv.* /tmp/resolv.* /tmp/resolv.*/* ; head -n -0 /etc/resolv.*
/tmp/resolv.* /tmp/resolv.*/*
{
"kernel": "6.1.33",
"hostname": "MainRouter",
"system": "ARMv8 Processor rev 4",
"model": "Dynalink DL-WRX36",
"board_name": "dynalink,dl-wrx36",
"rootfs_type": "squashfs",
"release": {
"distribution": "OpenWrt",
"version": "SNAPSHOT",
"revision": "r23375-cdfcac6e24",
"target": "ipq807x/generic",
"description": "OpenWrt SNAPSHOT r23375-cdfcac6e24"
}
}
package network
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix ' <removed>'
option packet_steering '1'
config device
option name 'br-lan'
option type 'bridge'
list ports 'lan1'
list ports 'lan2'
list ports 'lan3'
list ports 'lan4'
config interface 'lan'
option device 'br-lan'
option proto 'static'
option ipaddr '192.168.1.1'
option netmask '255.255.255.0'
option ip6assign '60'
config interface 'wan'
option device 'wan'
option proto 'dhcp'
option metric '1'
option dns_metric '10'
config interface 'wan6'
option device 'wan'
option proto 'dhcpv6'
option auto '0'
option reqaddress 'try'
option reqprefix 'auto'
config interface 'surfshark'
option proto 'wireguard'
option private_key ' <removed>'
list addresses ' <removed>'
option metric '0'
list dns ' <removed>'
list dns ' <removed>'
config wireguard_surfshark
option description 'de-fra (1).conf'
option public_key ' <removed>'
list allowed_ips '0.0.0.0/0'
option endpoint_host 'de-fra.prod.surfshark.com'
option endpoint_port '51820'
option route_allowed_ips '1'
option persistent_keepalive '25'
package dhcp
config dnsmasq
option domainneeded '1'
option boguspriv '1'
option filterwin2k '0'
option localise_queries '1'
option rebind_protection '1'
option rebind_localhost '1'
option local '/lan/'
option domain 'lan'
option expandhosts '1'
option nonegcache '0'
option cachesize '1000'
option dnsforwardmax '350'
option authoritative '1'
option readethers '1'
option leasefile '/tmp/dhcp.leases'
option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
option nonwildcard '1'
option localservice '1'
option ednspacket_max '1232'
option filter_aaaa '0'
option filter_a '0'
config dhcp 'lan'
option interface 'lan'
option start '100'
option limit '150'
option leasetime '12h'
option dhcpv4 'server'
option dhcpv6 'server'
option ra 'server'
list ra_flags 'managed-config'
list ra_flags 'other-config'
config dhcp 'wan'
option interface 'wan'
option ignore '1'
config odhcpd 'odhcpd'
option maindhcp '0'
option leasefile '/tmp/hosts/odhcpd'
option leasetrigger '/usr/sbin/odhcpd-update'
option loglevel '4'
config host
option name 'Samsung'
option ip '192.168.1.154'
option mac ' <removed>'
config host
option name 'HarmonyHub'
option ip '192.168.1.160'
option mac ' <removed>'
config host
option name 'hubv3-4011035646'
option ip '192.168.1.179'
option mac ' <removed>'
config host
option name 'Samsung'
option ip '192.168.1.151'
option mac ' <removed>'
package firewall
config defaults
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option synflood_protect '1'
option flow_offloading '1'
config zone
option name 'lan'
list network 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
config zone
option name 'wan'
list network 'wan'
list network 'wan6'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
option mtu_fix '1'
config rule
option name 'Allow-DHCP-Renew'
option src 'wan'
option proto 'udp'
option dest_port '68'
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'Allow-Ping'
option src 'wan'
option proto 'icmp'
option icmp_type 'echo-request'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-IGMP'
option src 'wan'
option proto 'igmp'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-DHCPv6'
option src 'wan'
option proto 'udp'
option dest_port '546'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-MLD'
option src 'wan'
option proto 'icmp'
option src_ip 'fe80::/10'
list icmp_type '130/0'
list icmp_type '131/0'
list icmp_type '132/0'
list icmp_type '143/0'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Input'
option src 'wan'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
list icmp_type 'router-solicitation'
list icmp_type 'neighbour-solicitation'
list icmp_type 'router-advertisement'
list icmp_type 'neighbour-advertisement'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Forward'
option src 'wan'
option dest '*'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-IPSec-ESP'
option src 'wan'
option dest 'lan'
option proto 'esp'
option target 'ACCEPT'
config rule
option name 'Allow-ISAKMP'
option src 'wan'
option dest 'lan'
option dest_port '500'
option proto 'udp'
option target 'ACCEPT'
config zone
option name 'surfshark'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
option mtu_fix '1'
list network 'surfshark'
config include 'pbr'
option fw4_compatible '1'
option type 'script'
option path '/usr/share/pbr/pbr.firewall.include'
config forwarding
option src 'lan'
option dest 'surfshark'
package pbr
config pbr 'config'
option enabled '1'
option verbosity '2'
option strict_enforcement '1'
option resolver_set 'none'
option ipv6_enabled '0'
list ignored_interface 'vpnserver'
list ignored_interface 'wgserver'
option boot_timeout '30'
option rule_create_option 'add'
option procd_reload_delay '1'
option webui_show_ignore_target '0'
list webui_supported_protocol 'all'
list webui_supported_protocol 'tcp'
list webui_supported_protocol 'udp'
list webui_supported_protocol 'tcp udp'
list webui_supported_protocol 'icmp'
config include
option path '/usr/share/pbr/pbr.user.aws'
option enabled '0'
config include
option path '/usr/share/pbr/pbr.user.netflix'
option enabled '0'
config policy
option name 'Plex/Emby Local Server'
option interface 'wan'
option src_port '8096 8920 32400'
option enabled '0'
config policy
option name 'Plex/Emby Remote Servers'
option interface 'wan'
option dest_addr 'plex.tv my.plexapp.com emby.media app.emby.media tv.emby.media'
option enabled '0'
config policy
option name 'all-other'
option src_addr '192.168.1.0/24'
option interface 'surfshark'
option enabled '0'
config policy
option name 'hubv3'
option src_addr '192.168.1.179'
option interface 'wan'
option enabled '0'
config policy
option name 'samsung tv'
option interface 'wan'
option src_addr '192.168.1.151'
option enabled '0'
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
7: wan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
inet 31.19.39.58/24 brd 31.19.39.255 scope global wan
valid_lft forever preferred_lft forever
10: br-lan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
inet 192.168.1.1/24 brd 192.168.1.255 scope global br-lan
valid_lft forever preferred_lft forever
30: surfshark: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1420 qdisc noqueue state UNKNOWN group default qlen 1000
inet <removed> brd <removed> scope global surfshark
valid_lft forever preferred_lft forever
default via <removed> dev wan table pbr_wan
192.168.1.0/24 dev br-lan table pbr_wan proto kernel scope link src 192.168.1.1
default via <removed> dev surfshark table pbr_surfshark
192.168.1.0/24 dev br-lan table pbr_surfshark proto kernel scope link src 192.168.1.1
default dev surfshark proto static scope link
default via <removed> dev wan proto static src <removed> metric 1
<removed> dev surfshark proto kernel scope link src <removed>
<removed> dev wan proto static scope link metric 1
<removed> via <removed> dev wan proto static metric 1
<removed> via <removed> dev wan proto static metric 1
192.168.1.0/24 dev br-lan proto kernel scope link src 192.168.1.1
local 10.14.0.2 dev surfshark table local proto kernel scope host src 10.14.0.2
broadcast 10.14.255.255 dev surfshark table local proto kernel scope link src 10.14.0.2
local <removed> dev wan table local proto kernel scope host src <removed>
broadcast <removed> dev wan table local proto kernel scope link src <removed>
local 127.0.0.0/8 dev lo table local proto kernel scope host src 127.0.0.1
local 127.0.0.1 dev lo table local proto kernel scope host src 127.0.0.1
broadcast 127.255.255.255 dev lo table local proto kernel scope link src 127.0.0.1
local 192.168.1.1 dev br-lan table local proto kernel scope host src 192.168.1.1
broadcast 192.168.1.255 dev br-lan table local proto kernel scope link src 192.168.1.1
0: from all lookup local
30000: from all fwmark 0x10000/0xff0000 lookup pbr_wan
30001: from all fwmark 0x20000/0xff0000 lookup pbr_surfshark
32766: from all lookup main
32767: from all lookup default
lrwxrwxrwx 1 root root 16 Jun 14 23:27 /etc/resolv.conf -> /tmp/resolv.conf
-rw-r--r-- 1 root root 47 Jun 24 21:54 /tmp/resolv.conf
-rw-r--r-- 1 root root 142 Jun 24 21:54 /tmp/resolv.conf.d/resolv.conf.auto
/tmp/resolv.conf.d:
-rw-r--r-- 1 root root 142 Jun 24 21:54 resolv.conf.auto
==> /etc/resolv.conf <==
search lan
nameserver 127.0.0.1
nameserver ::1
==> /tmp/resolv.conf <==
search lan
nameserver 127.0.0.1
nameserver ::1
==> /tmp/resolv.conf.d <==
head: /tmp/resolv.conf.d: I/O error
==> /tmp/resolv.conf.d/resolv.conf.auto <==
# Interface surfshark
nameserver <removed>
nameserver <removed>
# Interface wan
nameserver <removed>
nameserver <removed>
