OpenVPN контейнер стартует нормально:45e6ccf57df4 andrey0001/pritunl "/bin/start-pritun..." 2 days ago Up 19 hours pritunl
Интерфейс tun1 присутстует:
65: tun1: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN group default qlen 100
link/none
inet 192.168.240.1/24 brd 192.168.240.255 scope global tun1
valid_lft forever preferred_lft forever
inet6 fd00:c0a8:f000::1/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80::2f35:bab3:aa8:e0d6/64 scope link flags 800
valid_lft forever preferred_lft forever
таблица маршрутизации:
# ip route
default via 10.255.255.1 dev eth0
10.255.255.1 dev eth0 scope link
172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown
172.18.0.0/16 dev br-4dc510063f2a proto kernel scope link src 172.18.0.1 linkdown
172.19.0.0/16 dev br-3e70ad5e4d73 proto kernel scope link src 172.19.0.1 linkdown
172.20.0.0/16 dev br-3cb39e0e104c proto kernel scope link src 172.20.0.1
192.168.240.0/24 dev tun1 proto kernel scope link src 192.168.240.1
В настройках сервера указан порт 1194, но он недоступен ни изнутри, ни снаружи:
# netstat -ntpl | grep 1194
пусто
и
# iptables -L -n | grep 1194
пусто
В логе контейнера ошибок нет:
# docker logs pritunl
[lively-waters-6345][2018-12-10 09:28:53,097][INFO] Starting vpn server
host_networks = ["внешний_ip/32", "172.17.0.0/16", "172.20.0.0/16", "172.19.0.0/16", "172.18.0.0/16"]
server_id = "5c0ba09f2cc5cb0023c12cf4"
network = "192.168.240.0/24"
cur_timestamp = "2018-12-10 09:28:53.096215"
instance_id = "5c0e31d52cc5cb002330799b"
network6 = "fd00:c0a8:f000::/64"
host_address = "93.90.192.155"
host_address6 = "2001:8d8:1801:61::1"
[lively-waters-6345][2018-12-10 09:28:53,097][INFO] Starting vpn server
host_networks = ["внешний_ip/32", "172.17.0.0/16", "172.20.0.0/16", "172.19.0.0/16", "172.18.0.0/16"]
server_id = "5c0ba09f2cc5cb0023c12cf4"
network = "192.168.240.0/24"
cur_timestamp = "2018-12-10 09:28:53.096215"
instance_id = "5c0e31d52cc5cb002330799b"
network6 = "fd00:c0a8:f000::/64"
host_address = "93.90.192.155"
host_address6 = "2001:8d8:1801:61::1"
# tcpdump -i tun1 'port 1194'
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on tun1, link-type RAW (Raw IP), capture size 262144 bytes
^C
0 packets captured
0 packets received by filter
0 packets dropped by kernel
