Network loss with split-tunnel VPN

[bradstewart]

Hello!
Really enjoying OrbStack so far, but I've got a networking issue. And it's a bit beyond my understanding of how this stuff works.

Setup
Running macOS Monterrey. We use the AWS VPN Client (I think it's an OpenVPN wrapper?) to get into cloud resources. It is configured for split-tunnel routing. The VPN routes are pushed to the client upon connection.

If I connect to the VPN first, then launch OrbStack, everything works perfectly fine.

The Problem
With OrbStack already running, upon connecting to the VPN, I lose all network access (internet, VPN, and LAN).

Rebooting my laptop seems be the only way to get it back (at least with my limited knowledge of route tables and macOS networking configuration tools and such).

Seems like it's related the VPN detection mentioned in OrbStack's docs. But I don't understand quite enough to figure out what the solution might be, so any ideas would be greatly appreciated!

Thanks,
Brad

[kdrag0n]

Haven't investigated this yet, but workaround: disable Settings -> Network -> Allow access to container domains & IPs

[bradstewart]

Confirmed workaround is working (and this is perfectly sufficient for me at the moment, I don't actually need that feature right now). Thanks for the tip!

[pcothenet]

I had the exact same issue (both 1.0.0 and 1.0.1), the workaround fixes it for now.

If Orbstack isn't running: AWS VPN works fine
If Orbstack starts after connecting to VPN: still works fine
If Orbstack is already running before connecting: doesn't work

[kdrag0n]

See answer in https://github.com/orgs/orbstack/discussions/729#discussioncomment-7335948

[kdrag0n]

I’ve finished investigating this and found that this is mainly an issue in AWS VPN Client. A few workarounds:

1. Use OpenVPN Connect, which doesn’t have this issue. (compatible with the same .ovpn configs)
2. Disable Settings > Network > "Allow access to container domains & IPs” in OrbStack
3. Stop OrbStack, connect to the VPN, and then start it again (or disable/re-enable the setting)

I’ve also contacted AWS so they can hopefully fix the issue in their client. (Case ID 14114473681 if you want to nudge Enterprise support :)

[pcothenet]

Thanks @kdrag0n!

[bradstewart]

Much appreciated, thank you for the help!

…

On Fri, Oct 20, 2023, 12:04 PM Paul Cothenet ***@***.***> wrote: Thanks @kdrag0n <https://github.com/kdrag0n>! — Reply to this email directly, view it on GitHub <#729 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AA3SEB3UG52V7RYWUE6CJ7TYAKVLNAVCNFSM6AAAAAA56NPXIKVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM3TGNBRGU3TQ> . You are receiving this because you authored the thread.Message ID: ***@***.***>