VPN provider support: Ivacy VPN

[JonnySiHI]

Hey :),

Fantastic work by the way, and I was wondering if you could add Ivacy VPN, please.

https://support.ivacy.com/vpnusecases/openvpn-files-windows-routers-ios-linux-and-mac/

Thanks :)

EDIT by qdm12: See https://github.com/qdm12/gluetun/issues/1281 for implementation details EDIT 2: list of servers : https://support.ivacy.com/servers-list/

[Ferk]

@JonnySiHI have you actually managed to connect using Ivacy by making use of their ovpn files and the Custom Provider configuration? I've been trying but it doesn't seem to work for me, I keep obtaining AUTH_FAIL. The username and password should be the same as when login in the Ivacy website, right?

[Ferk]

Ok, after contacting Ivacy support it appears there's a different username, it's not the email what we have to use (though I couldn't see any way to find that username besides contacting support).

It now works when I connect through other means (such as synology) but it's still giving an error in gluetun:

gluetun    | 2022/05/29 16:20:02 INFO vpn: starting
gluetun    | 2022/05/29 16:20:02 INFO firewall: setting VPN connection through firewall...
gluetun    | 2022/05/29 16:20:02 INFO openvpn: DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
gluetun    | 2022/05/29 16:20:02 INFO openvpn: OpenVPN 2.5.2 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on May  4 2021
gluetun    | 2022/05/29 16:20:02 INFO openvpn: library versions: OpenSSL 1.1.1l  24 Aug 2021, LZO 2.10
gluetun    | 2022/05/29 16:20:02 INFO openvpn: TCP/UDP: Preserving recently used remote address: [AF_INET]45.12.222.103:53
gluetun    | 2022/05/29 16:20:02 INFO openvpn: UDP link local: (not bound)
gluetun    | 2022/05/29 16:20:02 INFO openvpn: UDP link remote: [AF_INET]45.12.222.103:53
gluetun    | 2022/05/29 16:20:04 ERROR ip getter: Get "https://api.ipify.org": dial tcp: lookup api.ipify.org on 1.1.1.1:53: write udp 172.30.0.2:36742->1.1.1.1:53: write: operation not permitted
gluetun    | 2022/05/29 16:20:04 INFO ip getter: retrying in 5s
gluetun    | 2022/05/29 16:20:04 WARN openvpn: 'link-mtu' is used inconsistently, local='link-mtu 1557', remote='link-mtu 1550'
gluetun    | 2022/05/29 16:20:04 WARN openvpn: 'auth' is used inconsistently, local='auth SHA1', remote='auth [null-digest]'
gluetun    | 2022/05/29 16:20:04 WARN openvpn: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
gluetun    | 2022/05/29 16:20:04 INFO openvpn: [Secure-Server] Peer Connection Initiated with [AF_INET]45.12.222.103:53
gluetun    | 2022/05/29 16:20:09 ERROR ip getter: Get "http://ip1.dynupdate.no-ip.com:8245": dial tcp: lookup ip1.dynupdate.no-ip.com on 1.1.1.1:53: write udp 172.30.0.2:34888->1.1.1.1:53: write: operation not permitted
gluetun    | 2022/05/29 16:20:09 INFO ip getter: retrying in 5s
gluetun    | 2022/05/29 16:20:10 INFO openvpn: TUN/TAP device tun0 opened
gluetun    | 2022/05/29 16:20:10 INFO openvpn: /sbin/ip link set dev tun0 up mtu 1500
gluetun    | 2022/05/29 16:20:10 INFO openvpn: /sbin/ip link set dev tun0 up
gluetun    | 2022/05/29 16:20:10 INFO openvpn: /sbin/ip addr add dev tun0 172.94.74.104/27
gluetun    | 2022/05/29 16:20:10 ERROR openvpn: RTNETLINK answers: File exists
gluetun    | 2022/05/29 16:20:10 ERROR openvpn: Linux route add command failed: external program exited with error status: 2
gluetun    | 2022/05/29 16:20:10 INFO openvpn: Initialization Sequence Completed
gluetun    | 2022/05/29 16:20:19 INFO dns over tls: downloading DNS over TLS cryptographic files
gluetun    | 2022/05/29 16:20:24 ERROR ip getter: Get "https://ipinfo.io/ip": dial tcp: lookup ipinfo.io on 1.1.1.1:53: read udp 172.94.74.104:46835->1.1.1.1:53: i/o timeout
gluetun    | 2022/05/29 16:20:24 INFO ip getter: retrying in 5s
gluetun    | 2022/05/29 16:20:29 WARN dns over tls: cannot update files
gluetun    | 2022/05/29 16:20:29 INFO dns over tls: attempting restart in 5m20s
gluetun    | 2022/05/29 16:20:39 ERROR ip getter: Get "https://domains.google.com/checkip": dial tcp: lookup domains.google.com on 1.1.1.1:53: read udp 172.94.74.104:58408->1.1.1.1:53: i/o timeout
gluetun    | 2022/05/29 16:20:39 INFO ip getter: retrying in 5s
gluetun    | 2022/05/29 16:20:54 ERROR ip getter: Get "http://ip1.dynupdate.no-ip.com": dial tcp: lookup ip1.dynupdate.no-ip.com on 1.1.1.1:53: read udp 172.94.74.104:52524->1.1.1.1:53: i/o timeout
gluetun    | 2022/05/29 16:20:54 INFO ip getter: retrying in 5s
gluetun    | 2022/05/29 16:21:04 INFO healthcheck: program has been unhealthy for 56s: restarting VPN
gluetun    | 2022/05/29 16:21:04 INFO vpn: stopping

[Ferk]

Oh, it works if I use the TCP servers, instead of UDP. Great!

[qdm12]

Since I have a rather long backlog of providers to add support for, I spent a good amount of time refactoring the code and writing guides on adding a VPN provider. You need a bit of programming experience but you could also learn as you go. The relevant pages are:

• the development page describes how to get setup step-by-step to make changes to Gluetun
• the add a provider page is a step-by-step guide on how to add VPN provider to Gluetun

I'll comment here again if I start implementing the provider to avoid any potential duplicate work, but it should not be anytime soon I think.

[Zoobdude]

I recently discovered that Ivacy actually resells PureVPN and all of the PureVPN configuration files can be used with Ivacy credentials. Therefore, I'm not sure if it is necessary to implement Ivacy separately. Not to mention the OpenVPN configuration files are now only provided in .rar form (the .zip link mentioned in #1281 seems to be out of date). Maybe something about this could be included in the wiki?