unhealthy: cannot dial: dial tcp4 104.16.132.229:443: i/o timeout - why?

[allgrinder]

Hey,

my log show the following status:

2022-08-30T20:47:47Z INFO [ip getter] Public IP address is 176.119.195.85 (Netherlands, North Holland, Amsterdam)
2022-08-30T23:37:42Z INFO [healthcheck] unhealthy: cannot dial: dial tcp4 104.16.132.229:443: i/o timeout
2022-08-30T23:37:47Z INFO [healthcheck] healthy!
2022-08-31T02:12:00Z INFO [dns over tls] generate keytag query _ta-4a5c-4f66. NULL IN
2022-08-31T05:48:11Z INFO [dns over tls] generate keytag query _ta-4a5c-4f66. NULL IN
2022-08-31T08:47:41Z INFO [dns over tls] generate keytag query _ta-4a5c-4f66. NULL IN
2022-08-31T08:47:41Z INFO [ip getter] Public IP address is 176.119.195.85 (Netherlands, North Holland, Amsterdam

What is wrong? What can i do?

[qdm12]

unhealthy: cannot dial: dial tcp4 104.16.132.229:443: i/o timeout is expected to happen from time to time. It runs every 5 seconds (after a success) or 1 second (after a failure), against cloudflare.com:443 (configurable). If it goes back to healthy it's all good.

Anyway the point of it is to detect when the vpn connection fails for whatever reason and auto-restart the vpn.

As a side note, I'm working on having more of these timeout/wait configurable actually, and having less aggressive defaults.

[allgrinder]

Thank you! Does that mean that there was no IP leak?

[qdm12]

There cannot be any ip leak unless you turn off the firewall (not documented for good reasons!).

The unhealthy indicates the connection doesn't work anymore (vpn server is down, your internet is down, your keys no longer work, openvpn misbehaving etc.).

[gene1wood]

I'm seeing these errors today as well.

[qdm12]

If it goes back to healthy it's fine. Did you pull the latest image today? i made some ipv6-openvpn changes if that can matter.

[gene1wood]

If it goes back to healthy it's fine.

I was seeing it report this error about once a minute today. Not sure if it's still doing it.

I did see some activity on https://www.cloudflarestatus.com/ today so maybe that was it.

Did you pull the latest image today? i made some ipv6-openvpn changes if that can matter.

No, I'll do so.