[Support] binhex - DelugeVPN


Recommended Posts

On 26/11/2017 at 1:28 AM, darrenyorston said:

I seem to regular encounter an issue with my container crashing. My web browser reports the ip address/port cannot be reached. It works fine once I restart the container though. When it's down though sab won't work. Is there a way to tell deluge to regularly reboot? It seems to happen if the container runs for more than 2-3 days.

 

the container should not be crashing, do you mean the deluge process is crashing or the entire container is stopping?, if its the deluge process thats getting killed then there is code to recover from this, so you should never ned to auto reboot the container, same is true for openvpn process as well.

Link to comment

I'm not sure that I know what I'm doing here. I got the Docker up and running and I am able to connect to my VPN.  What I can't do is to log into the GUI or connect from something like Couchpotato. Am I looking in the right place when I look at the file

appdata/binhex-rtorrentvpn/nginx/security/auth   ?
It has a single entry:

admin:<password entry that I didn't post>

The default password, deluge, didn't work for the Web gui.  Help, please.

Link to comment

Hello Binhex. Seems I need some help, and the FAQs don't cover it.

 

I grabbed your delugevpn and I've been following SpaceInvaderOne's youtube video on how to set it up. I set VPN_ENABLES to yes and VPN_PROV to custom. I then found my provider's Netherlands opvn file and cert files (IVPN uses two: ca & client1) and copied them into the openvpn directory. However once I start the container and try to connect to  web gui I get either "Unable to connect" or "The connection was reset" depending on the port tried. I tried disabling the VPN but the errors persist.

 

Nothing looks out of the ordinary in the supervisord.log at debug level but I'm sure I'm missing something. Can you (Or anyone her for that matter) provide some guidance?

 

supervisord.log

Link to comment
34 minutes ago, mathgeek97 said:

ugh!  I'll grabbed the wrong docker container. Hopefully, it'll be just as easy to get DelugeVPN up and running.  Well, minus my problems with the Web GUI.  Thanks wgstarks.

 

Edit: Yep.  That worked!

Many users have reported better speeds with binhex-rtorrentvpn docker. Just sayin’.

Link to comment

Hi,

after months of the container running perfectly I encountered a problem today.

 

I cannot access sites through privoxy anymore and torrents aren't working either.

 

The container is up and running and below is an excerpt from a container log. I can spot an AUTH error towards the end. Is the VPN not working and the IP-tables FW blocking any traffic?

 

2017-11-29 13:02:15,671 DEBG 'start-script' stdout output:
[warn] OpenVPN process terminated, restarting OpenVPN...
2017-11-29T12:02:15.671445530Z 
2017-11-29 13:02:15,679 DEBG 'start-script' stdout output:
Wed Nov 29 13:02:15 2017 OpenVPN 2.4.4 x86_64-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 26 2017
Wed Nov 29 13:02:15 2017 library versions: OpenSSL 1.1.0f  25 May 2017, LZO 2.10
2017-11-29T12:02:15.679923010Z 
2017-11-29 13:02:15,680 DEBG 'start-script' stdout output:
[info] OpenVPN restarted
2017-11-29T12:02:15.680390255Z 
2017-11-29 13:02:15,680 DEBG 'start-script' stdout output:
Wed Nov 29 13:02:15 2017 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2017-11-29T12:02:15.680559716Z 
2017-11-29 13:02:15,680 DEBG 'start-script' stdout output:
Wed Nov 29 13:02:15 2017 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Nov 29 13:02:15 2017 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2017-11-29T12:02:15.681041168Z 
2017-11-29 13:02:15,681 DEBG 'start-script' stdout output:
Wed Nov 29 13:02:15 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]213.152.161.218:443
Wed Nov 29 13:02:15 2017 Socket Buffers: R=[212992->212992] S=[212992->212992]
2017-11-29T12:02:15.681399357Z 
2017-11-29 13:02:15,681 DEBG 'start-script' stdout output:
Wed Nov 29 13:02:15 2017 UDP link local: (not bound)
Wed Nov 29 13:02:15 2017 UDP link remote: [AF_INET]213.152.161.218:443
2017-11-29T12:02:15.681528743Z 
2017-11-29 13:02:15,711 DEBG 'start-script' stdout output:
Wed Nov 29 13:02:15 2017 TLS: Initial packet from [AF_INET]213.152.161.218:443, sid=93cb4aae 3a2bc1b2
2017-11-29T12:02:15.711553603Z 
2017-11-29 13:02:15,765 DEBG 'start-script' stdout output:
Wed Nov 29 13:02:15 2017 VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, [email protected]
2017-11-29T12:02:15.765298508Z 
2017-11-29 13:02:15,765 DEBG 'start-script' stdout output:
Wed Nov 29 13:02:15 2017 VERIFY KU OK
Wed Nov 29 13:02:15 2017 Validating certificate extended key usage
Wed Nov 29 13:02:15 2017 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Wed Nov 29 13:02:15 2017 VERIFY EKU OK
Wed Nov 29 13:02:15 2017 VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Canis, [email protected]
2017-11-29T12:02:15.765442747Z 
2017-11-29 13:02:15,901 DEBG 'start-script' stdout output:
Wed Nov 29 13:02:15 2017 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
Wed Nov 29 13:02:15 2017 [Canis] Peer Connection Initiated with [AF_INET]213.152.161.218:443
2017-11-29T12:02:15.901237257Z 
2017-11-29 13:02:17,129 DEBG 'start-script' stdout output:
Wed Nov 29 13:02:17 2017 SENT CONTROL [Canis]: 'PUSH_REQUEST' (status=1)
2017-11-29T12:02:17.129547449Z 
2017-11-29 13:02:17,158 DEBG 'start-script' stdout output:
Wed Nov 29 13:02:17 2017 AUTH: Received control message: AUTH_FAILED
Wed Nov 29 13:02:17 2017 SIGTERM received, sending exit notification to peer
2017-11-29T12:02:17.158768909Z 
2017-11-29 13:02:22,071 DEBG 'start-script' stdout output:
Wed Nov 29 13:02:22 2017 SENT CONTROL [Canis]: 'PUSH_REQUEST' (status=1)
2017-11-29T12:02:22.071701783Z 
2017-11-29 13:02:22,071 DEBG 'start-script' stdout output:
Wed Nov 29 13:02:22 2017 SIGTERM[soft,exit-with-notification] received, process exiting
2017-11-29T12:02:22.071887384Z 

 

supervisord.log

Link to comment
2 hours ago, TombRaider said:

can spot an AUTH error towards the end. Is the VPN not working and the IP-tables FW blocking any traffic?

 

yes the VPN is NOT working, and yes this will mean all traffic is blocked, including access to the web ui. 

 

the reason the vpn tunnel is not establishing is because:-

 

1. your password is wrong for VPN_PASS value

or

2. your password has characters that are not in the range a-z A-Z 0-9

or

3. you havent paid your bill and your vpn provider has cut you off.

 

Link to comment
17 minutes ago, binhex said:

 

yes the VPN is NOT working, and yes this will mean all traffic is blocked, including access to the web ui. 

 

the reason the vpn tunnel is not establishing is because:-

 

1. your password is wrong for VPN_PASS value

or

2. your password has characters that are not in the range a-z A-Z 0-9

or

3. you havent paid your bill and your vpn provider has cut you off.

 

Thank you. That would have helped me a lot if the problem hadn't already solved itself. O.o

 

The VPN is working again. I didn't do anything. I extended my VPN subscription a couple of days ago, so maybe there was an issue on their end, but it seems to be fixed now.

Nice to see that the firewall works so well.

 

I got two more questions if you don't mind. 9_9

Do you have any plans to make a QBittorrent+VPN+Privoxy image?

 

Is it correct and intended that the container starts an instance of OpenVPN on my host? This prevents me from using the VPN client software as it tries to start a second instance. Newbie me would expect the OpenVPN instance to run inside the container.

 

Thanks again, I really appreciate your work!

 

Link to comment
1 hour ago, TombRaider said:

Do you have any plans to make a QBittorrent+VPN+Privoxy image?

 

not at the moment, there is to my knowledge nothing that either Deluge or ruTorrent can't do that QBittorrent can.

 

1 hour ago, TombRaider said:

Is it correct and intended that the container starts an instance of OpenVPN on my host?

 

this docker works in bridge mode, so its not using your nic directly (host mode), instead its bridged, but you will see the openvpn process visible on your host (kernel is shared), and this is perfectly normal, not exactly sure how its preventing you from using your vpn client software, maybe watch for clashing ports perhaps?, i can successfully have 2 or more vpn tunnels running (by running both delugevpn and rtorrentvpn at the same time) on the same host with no issue.

Link to comment

It is because the AirVPN client "Eddie" is just an OpenVPN wrapper and it refuses to open an second instance of OpenVPN as long as the one from the container is running. I don't know if it's impossible to run 2 processes of OpenVPN or if it's an unfortunate programming choice.

 

Edit: Nevermind, upated the client to the latest beta and it works now with two instances of OpenVPN.

Edited by TombRaider
Link to comment
On 29/11/2017 at 3:57 AM, binhex said:

 

the container should not be crashing, do you mean the deluge process is crashing or the entire container is stopping?, if its the deluge process thats getting killed then there is code to recover from this, so you should never ned to auto reboot the container, same is true for openvpn process as well.

 

When I attempt to open the webUI I receive the following error. It is only happening with this container. The log file is attached.

 

To gain access to the webUI I have to restart the container.

container.jpg

container log.txt

Link to comment
7 hours ago, darrenyorston said:

 

When I attempt to open the webUI I receive the following error. It is only happening with this container. The log file is attached.

 

To gain access to the webUI I have to restart the container.

container.jpg

container log.txt

 

as well as @raidserver suggestion, take a look at your host, ssh in and see if you can ping that hostname, if you cant you got dns issues with the host and need to resolve that, if you can ping then take a look at what you have defined the value for NAME_SERVERS, keep in mind you CANNOT point this at your ISP's DNS or your own local DNS (if your running your own name server), defaults will work just fine.

Link to comment
15 hours ago, raidserver said:

RESOLVE: Cannot resolve host address: aus-melbourne.privateinternetaccess.com:1198 (Name or service not known)

 

Have you tried another server?

No. Whenever the webUI reports the container is down I have just been restarting the container. After a reboot it works fine. After a few days though the webUI becomes unavailable again.

Link to comment
13 hours ago, binhex said:

 

as well as @raidserver suggestion, take a look at your host, ssh in and see if you can ping that hostname, if you cant you got dns issues with the host and need to resolve that, if you can ping then take a look at what you have defined the value for NAME_SERVERS, keep in mind you CANNOT point this at your ISP's DNS or your own local DNS (if your running your own name server), defaults will work just fine.

 

I can SSH into unraid fine.

 

The content in NAME_SERVER are the default when the template downloaded, I didnt change anything.

 

They remain: 8.8.8.8,37.235.1.174,8.8.4.4,37.235.1.177

Link to comment

So I'll admit I'm a massive idiot when it comes to UnRAID, but I generally know my way around deluge or other torrent programs, and I can't figure out my issue.

 

When I first installed delugevpn a few days ago, I was able to pull down 10ish mbs a second, which is about what I'd get with qbitorrent on my main PC through a PIA VPN. Now, I'm getting bnetween 200kbs and 100kbs and I don't know why. I don't believe Sonarr or Radarr are doing anything on the disk to me hogging up space and my SABnzbd is sitting idle so the deluge program should be the only thing running to the array. Any ideas why I'd see a massive drop in download speeds like that?

 

Maybe I should just try rTorrent instead.

Link to comment

Are you downloading to the array? Advice seems to be use a single disk or an external drive mounted by unassigned devices.

 

Have you checked you are using the same ports and is the connection UDP/TCP? my provider states i should use tcp as thats what they have assigned me.

 

I think PIA have specific servers which have port forwarding.

 

 

Link to comment
Quote

Are you downloading to the array? Advice seems to be use a single disk or an external drive mounted by unassigned devices.

2

 

I'm 90% certain I am. So the suggestion is to have an unmounted drive as the dedicated download section? And what, use Deluge to move them when they're completed? Or just manually every once in awhile? My only worry with that is I'm at 6 drives right now and would rather not have to pay more for essentially a junk drive.

 

Quote

Have you checked you are using the same ports and is the connection UDP/TCP? my provider states i should use tcp as thats what they have assigned me.

 

I just double checked the ports Deluge is using and then made sure they were forwarded. I have zero idea what Verizon may have assigned me to be honest.

 

Quote

I think PIA have specific servers which have port forwarding.

 

I'll have to look into this, I just used the default 40k port that deluge choose.

 

My real annoyance is my Sab is chugging away at 30 mb/s but Deluge is still sitting at 175kb/s when it's in use. So I know it isn't a connection issue and I know nowhere near enough about Unraid to even start troubleshooting. I have no clue would could even be congesting it or screwing with its write ability.

Link to comment

Yeah my Sabvpn is maxed out, apart from a bit of overhead for vpn. Port 443 TCP.

Iam a bit of a noob with torrents & VPN, Iam using external usb3 HDD because Iam mostly seeding atm.

If you select single disk as /data path then you will need to configure mover, which is a great unRaid feature I never use lol. I can't help with that especially when sonarr/radarr are added to the mix. Worth a try/test

 

I meant my VPN provider has forwarded a specific port for my account as port forwarding is off by default. I input it in deluge gui incoming port settings. Iam connectable. 

DL speed was fine without forwarding but UL wasn't connectable.

 

I assume PIA is totally different. Just need to connect with a different server.

Edited by raidserver
Link to comment

I want to connect to the Deluge GTK thin client but I'm not successful so far.

 

I've setup deluge with a PIA VPN and I'm using a nginx reversed proxy to access the web UI. This works well but I need to configure some plugins which can only be configured through the thin client. My server is directly exposed to the internet and has a unique IP-address. For the purpose of this post I'll use the example 28.154.211.15.

 

My docker compose file looks like this:

 

deluge:
  image: binhex/arch-delugevpn
  container_name: deluge
  restart: on-failure
  cap_add:
    - NET_ADMIN
  ports:
    - "58846:58846"
    - "58946:58946"
  environment:
    - PUID=1000
    - PGID=1000
    - VPN_ENABLED=yes
    - VPN_USER=${VPN_USERNAME}
    - VPN_PASS=${VPN_PASSWORD}
    - VPN_REMOTE=nl.privateinternetaccess.com
    - VPN_PORT=1198
    - VPN_PROTOCOL=udp
    - VPN_DEVICE_TYPE=tun
    - VPN_PROV=pia
    - STRONG_CERTS=no
    - ENABLE_PRIVOXY=no
    - STRICT_PORT_FORWARD=yes
    - LAN_NETWORK=28.154.211.15/32
    - NAME_SERVERS=8.8.8.8,8.8.4.4
    - DEBUG=false
    - UMASK=000
  volumes:
    - /etc/localtime:/etc/localtime:ro
    - ${CONFIG_FOLDER}/Deluge:/config
    - ${MOUNT_POINT}/downloads:/data

I can't connect to 28.154.211.15:58846 in the thin client. Is there something I've setup wrong? Should I setup nginx to let through all traffic? How would I do this?

Edited by Rourke
Link to comment
On 01/12/2017 at 8:32 PM, Lawlanator said:

So I'll admit I'm a massive idiot when it comes to UnRAID, but I generally know my way around deluge or other torrent programs, and I can't figure out my issue.

 

When I first installed delugevpn a few days ago, I was able to pull down 10ish mbs a second, which is about what I'd get with qbitorrent on my main PC through a PIA VPN. Now, I'm getting bnetween 200kbs and 100kbs and I don't know why. I don't believe Sonarr or Radarr are doing anything on the disk to me hogging up space and my SABnzbd is sitting idle so the deluge program should be the only thing running to the array. Any ideas why I'd see a massive drop in download speeds like that?

 

Maybe I should just try rTorrent instead.

 

click on the link and look at Q5. 

 

 

Link to comment

Just posting a NordVPN possible error fix:

 

I am a NordVPN user and this is my first time configuring DelugeVPN in unRaid. I have followed throughly the Newbie VPN Guide (in binhex - General thread) and have reconfigured the docker several times but, when launching the WebUI, I would always get the "Not connected" error.

 

I noticed that the supervisord.log file was ending with the line:

 

[debug] Waiting for valid IP address from tunnel...

 

And it would hang there indefinitely. A couples lines above that, there was this error:

 

Options error: --keepalive conflicts with --ping, --ping-exit, or --ping-restart.  If you use --keepalive, you don't need any of the other --ping directives.
Use --help for more information.

 

So opening the server .ovpn file turns out that it defines a couple of parameters, amongst them:

 

ping 15
ping-restart 0

 

I have deleted those two lines from the .ovpn file and after that DelugeVPN worked as supposed to.

 

Hope I can help someone out there.

  • Upvote 1
Link to comment

I installed the DelugeVPN docker and am using airvpn for the last few weeks.  Ever since using DelugeVPN and Airvpn, it seems that while my downloads are fine when downloading torrents my overall internet speed seems to have slowed quite a bit for non deluge related items.  So, bring up the Unraid main page, browsing internet etc, all seem much slower and I'm wondering if these apps might be causing this and how to check verify what the problem is?

Link to comment

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.