I'm not sure why the connection drops, then it couldn't reconnect by itself unless I manually disable it and enable it again (sometimes it takes too long to connect again), or I need to reboot the router first. No other setting touched. Tested w/ other VPNs noticed some connection drops too.
Log:
Mon Jan 20 22:23:59 2025 user.notice firewall: Reloading firewall due to ifdown of wgclient ()
Mon Jan 20 22:23:59 2025 daemon.notice netifd: Network device 'wgclient' link is down
Mon Jan 20 22:23:59 2025 daemon.notice netifd: Interface 'wgclient' is now down
Mon Jan 20 22:23:59 2025 user.notice firewall: Reloading firewall due to ifdown of wgclient ()
Mon Jan 20 22:24:11 2025 daemon.notice netifd: Interface 'wgclient' is setting up now
Mon Jan 20 22:24:11 2025 daemon.notice netifd: wgclient (23684): RTNETLINK answers: Permission denied
Mon Jan 20 22:24:11 2025 daemon.notice netifd: Network device 'wgclient' link is up
Mon Jan 20 22:24:11 2025 daemon.notice netifd: Interface 'wgclient' is now up
Mon Jan 20 22:24:11 2025 user.notice wgclient-up: env value:T_J_V_ifname=string J_V_address_external=1 USER=root ifname=wgclient ACTION=KEYPAIR-CREATED N_J_V_address_external=address-external SHLVL=2 J_V_keep=1 HOME=/ HOTPLUG_TYPE=wireguard T_J_V_interface=string J_V_ifname=wgclient T_J_V_link_up=boolean LOGNAME=root DEVICENAME= T_J_V_action=int TERM=linux SUBSYSTEM=wireguard PATH=/usr/sbin:/usr/bin:/sbin:/bin CONFIG_LIST_STATE= J_V_interface=wgclient K_J_V= action ifname link_up address_external keep interface J_V_link_up=1 J_V_action=0 T_J_V_address_external=boolean N_J_V_link_up=link-up T_J_V_keep=boolean PWD=/ JSON_CUR=J_V CONFIG_SECTIONS=global AzireVPN Mullvad FromApp group_2451 group_1770 group_4736 PIA Surfshark NordVPN Hideme IPVanish group_9624 group_8943 group_1910 group_4876 group_4195 peer_2001 peer_2002 group_9127 peer_2003 CONFIG_cfg030f15_ports=
Mon Jan 20 22:24:11 2025 user.notice firewall: Reloading firewall due to ifup of wgclient (wgclient)
Mon Jan 20 22:25:19 2025 user.notice firewall: Reloading firewall due to ifdown of wgclient ()
Mon Jan 20 22:25:19 2025 daemon.notice netifd: Network device 'wgclient' link is down
Mon Jan 20 22:25:19 2025 daemon.notice netifd: Interface 'wgclient' is now down
Mon Jan 20 22:25:19 2025 user.notice firewall: Reloading firewall due to ifdown of wgclient ()
Mon Jan 20 22:26:13 2025 daemon.notice netifd: Interface 'wgclient' is setting up now
Mon Jan 20 22:26:13 2025 daemon.notice netifd: wgclient (26977): RTNETLINK answers: Permission denied
Mon Jan 20 22:26:13 2025 daemon.notice netifd: Network device 'wgclient' link is up
Mon Jan 20 22:26:13 2025 daemon.notice netifd: Interface 'wgclient' is now up
Mon Jan 20 22:26:13 2025 user.notice wgclient-up: env value:T_J_V_ifname=string J_V_address_external=1 USER=root ifname=wgclient ACTION=KEYPAIR-CREATED N_J_V_address_external=address-external SHLVL=2 J_V_keep=1 HOME=/ HOTPLUG_TYPE=wireguard T_J_V_interface=string J_V_ifname=wgclient T_J_V_link_up=boolean LOGNAME=root DEVICENAME= T_J_V_action=int TERM=linux SUBSYSTEM=wireguard PATH=/usr/sbin:/usr/bin:/sbin:/bin CONFIG_LIST_STATE= J_V_interface=wgclient K_J_V= action ifname link_up address_external keep interface J_V_link_up=1 J_V_action=0 T_J_V_address_external=boolean N_J_V_link_up=link-up T_J_V_keep=boolean PWD=/ JSON_CUR=J_V CONFIG_SECTIONS=global AzireVPN Mullvad FromApp group_2451 group_1770 group_4736 PIA Surfshark NordVPN Hideme IPVanish group_9624 group_8943 group_1910 group_4876 group_4195 peer_2001 peer_2002 group_9127 peer_2003 CONFIG_cfg030f15_ports=
Mon Jan 20 22:26:13 2025 user.notice firewall: Reloading firewall due to ifup of wgclient (wgclient)
EDIT:
Forgot to mention DNS settings: I use a NextDNS config DNS over TLS.
Connection got dropped again here's some additional logs:
Tue Jan 21 01:05:41 2025 user.notice firewall: Reloading firewall due to ifdown of wgclient ()
Tue Jan 21 01:05:41 2025 daemon.notice netifd: Network device 'wgclient' link is down
Tue Jan 21 01:05:41 2025 daemon.notice netifd: Interface 'wgclient' is now down
Tue Jan 21 01:05:41 2025 daemon.notice netifd: Interface 'wgclient' is setting up now
Tue Jan 21 01:05:41 2025 daemon.notice netifd: wgclient (26039): RTNETLINK answers: Permission denied
Tue Jan 21 01:06:39 2025 daemon.notice netifd: Interface 'wgclient' is now down
Tue Jan 21 01:06:39 2025 user.notice firewall: Reloading firewall due to ifdown of wgclient ()
Tue Jan 21 01:06:45 2025 daemon.notice netifd: Interface 'wgclient' is setting up now
Tue Jan 21 01:06:45 2025 daemon.notice netifd: wgclient (28541): RTNETLINK answers: Permission denied
Tue Jan 21 01:07:03 2025 daemon.notice netifd: Interface 'wgclient' is now down
Tue Jan 21 01:07:04 2025 user.notice firewall: Reloading firewall due to ifdown of wgclient ()
syslog PMed. Re: DNS settings - I'd say the same. I thought it was NextDNS messing things up, I tried disabling it and set it to Auto, still experienced it.
I also tried upgrading to the the latest beta firmware (4.7.4), still the same.
EDIT:
Some additional logs and weird UI issue attached:
Checked your router syslog, I may have two questions:
After the WG client is disconnected, can the router SSH ping www.google.com?
As I found that the eth1 (WAN) port has some re-connected logs, maybe the WAN port may lose the internet and re-connected? (the opposite of WAN is the ISP modem?), or said that you are manually re-plugging the WAN network cable?
After the WG client is disconnected, will the link be connected immediately after you manually stop and start the WG profile?
BTW, if it is currently convenient, temporarily restore DNS to automatic, please do not use DoT/DoT, ADG and other DNS services during these debug process period.
WG client UI lost, is it the same for other browsers?
Thanks for the response. I'll check and see if I can recreate the issue. I'm currently on debug mode meaning default settings, and I've set the DNS settings to automatic:
eth1 is the ISP modem/not manually re-plugging the network cable. I usually just reboot the modem if the reconnect takes too long. Rebooting the modem makes it fast since sometimes it takes 5-10 minutes before it reconnects again.
Nope. It takes sometime to reconnect sometimes it doesn't reconnect I'll need to reboot the router itself. But there are times that it took only a few seconds to disconnect and reconnect when the connection drops.
I'd really need the DNS to track the traffic of my clients (since its for business) but for the sake of debugging. We'll set it to manual. I'll let you know if you the problem persists.
Will check other browsers if it's the same.
Side note 1: Can MTU affect this? I changed the MTU of my VPN and suddenly this issue come up.
Side note 2: What about DDNS? I can't make it work, NextDNS can't resolve the hostname given by my router. Is there any tips for this besides:
I didn't downgrade back to 4.7.0, I'm on 4.7.4 beta - and still experiencing the issue. But when I set the DNS to automatic, I haven't any drops (yet) - will continue to monitor. But yeah, can confirm that the issue with WG on 4.7.4 is still there. I can also confirm that when I directly connected to my ISP there was some Ping fail/RTOs that may have caused the (unstable network) you mentioned. I'm using a 5G CPE modem if that's relevant, and yeah, there are times that we experience packet loss but that's very minimal and not continuous.
Yes, using WiFi on my lappy when I saw that UI issue. It's like literally WG client was deleted lol. Haven't reproduced it yet since I think there was no drop in connection after I switch the DNS to Automatic.
Some additional syslog for you guys to check: logread (1).tar (247 KB)
I was really hoping to fix this DNS issue since I really need NextDNS to be running on my MT6000. Appreciate all the help guys!