[OPEN CALL šŸ“£] Bring NymVPN to OpenWRT!

Sat Dec 27 20:29:31 2025 daemon.info nym-vpnd[31236]: 2025-12-27T20:29:31.170634Z INFO nym_client_core_surb_storage: Data flush is complete
Sat Dec 27 20:29:31 2025 daemon.info nym-vpnd[31236]: 2025-12-27T20:29:31.431919Z INFO nym_task::cancellation::manager: sending cancellation after receiving shutdown signal
Sat Dec 27 20:29:31 2025 daemon.info nym-vpnd[31236]: 2025-12-27T20:29:31.432191Z INFO nym_client_core_surb_storage: PersistentReplyStorage is flushing all reply-related data to underlying storage
Sat Dec 27 20:29:31 2025 daemon.info nym-vpnd[31236]: 2025-12-27T20:29:31.432236Z INFO sqlx_pool_guard: Closing sqlite pool: /var/lib/nym-vpnd/mainnet/persistent_reply_store.sqlite
Sat Dec 27 20:29:31 2025 daemon.info nym-vpnd[31236]: 2025-12-27T20:29:31.470461Z INFO nym_client_core_surb_storage::backend::fs_backend::manager: Database migration finished!
Sat Dec 27 20:29:31 2025 daemon.info nym-vpnd[31236]: 2025-12-27T20:29:31.474302Z INFO nym_client_core_surb_storage: Data flush is complete
Sat Dec 27 20:29:31 2025 daemon.info nym-vpnd[31236]: 2025-12-27T20:29:31.475525Z ERROR nym_vpn_lib::tunnel_state_machine::tunnel_monitor: Error: Tunnel monitor exited with error
Sat Dec 27 20:29:31 2025 daemon.info nym-vpnd[31236]: Caused by: tunnel error
Sat Dec 27 20:29:31 2025 daemon.info nym-vpnd[31236]: Caused by: registration client error
Sat Dec 27 20:29:31 2025 daemon.info nym-vpnd[31236]: Caused by: connection cancelled
Sat Dec 27 20:29:31 2025 daemon.info nym-vpnd[31236]: 2025-12-27T20:29:31.475637Z INFO nym_firewall: Resetting firewall policy
Sat Dec 27 20:29:31 2025 daemon.info nym-vpnd[31236]: 2025-12-27T20:29:31.506876Z INFO nym_vpn_lib::tunnel_state_machine: New tunnel state: Disconnected
root@GL-MT3000:~# dmesg | tail -50
[ 963.423745] br-lan: port 2(wlan0) entered disabled state
[ 963.437200] mt798x-wmac 18000000.wifi wlan0: left allmulticast mode
[ 963.443541] mt798x-wmac 18000000.wifi wlan0: left promiscuous mode
[ 963.449782] br-lan: port 2(wlan0) entered disabled state
[ 963.768487] br-lan: port 3(wlan1) entered disabled state
[ 963.780891] mt798x-wmac 18000000.wifi wlan1: left allmulticast mode
[ 963.787231] mt798x-wmac 18000000.wifi wlan1: left promiscuous mode
[ 963.793525] br-lan: port 3(wlan1) entered disabled state
[ 965.537018] br-lan: port 2(wlan1) entered blocking state
[ 965.542391] br-lan: port 2(wlan1) entered disabled state
[ 965.547742] mt798x-wmac 18000000.wifi wlan1: entered allmulticast mode
[ 965.554521] mt798x-wmac 18000000.wifi wlan1: entered promiscuous mode
[ 965.584580] br-lan: port 2(wlan1) entered blocking state
[ 965.589906] br-lan: port 2(wlan1) entered forwarding state
[ 965.596152] br-lan: port 2(wlan1) entered disabled state
[ 965.617712] mt798x-wmac 18000000.wifi wlan1: left allmulticast mode
[ 965.624081] mt798x-wmac 18000000.wifi wlan1: left promiscuous mode
[ 965.630324] br-lan: port 2(wlan1) entered disabled state
[ 965.672824] br-lan: port 2(wlan1) entered blocking state
[ 965.678157] br-lan: port 2(wlan1) entered disabled state
[ 965.683618] mt798x-wmac 18000000.wifi wlan1: entered allmulticast mode
[ 965.694398] mt798x-wmac 18000000.wifi wlan1: entered promiscuous mode
[ 965.994251] br-lan: port 3(wlan0) entered blocking state
[ 965.999574] br-lan: port 3(wlan0) entered disabled state
[ 966.005003] mt798x-wmac 18000000.wifi wlan0: entered allmulticast mode
[ 966.030204] mt798x-wmac 18000000.wifi wlan0: entered promiscuous mode
[ 966.072972] br-lan: port 3(wlan0) entered blocking state
[ 966.078298] br-lan: port 3(wlan0) entered forwarding state
[ 966.101687] mt798x-wmac 18000000.wifi wlan0: left allmulticast mode
[ 966.107999] mt798x-wmac 18000000.wifi wlan0: left promiscuous mode
[ 966.114287] br-lan: port 3(wlan0) entered disabled state
[ 966.149458] br-lan: port 3(wlan0) entered blocking state
[ 966.154914] br-lan: port 3(wlan0) entered disabled state
[ 966.160344] mt798x-wmac 18000000.wifi wlan0: entered allmulticast mode
[ 966.161845] mtk_soc_eth 15100000.ethernet eth1: Link is Up - 1Gbps/Full - flow control rx/tx
[ 966.167160] mt798x-wmac 18000000.wifi wlan0: entered promiscuous mode
[ 966.181941] br-lan: port 3(wlan0) entered blocking state
[ 966.187257] br-lan: port 3(wlan0) entered forwarding state
[ 966.193108] br-lan: port 1(eth1) entered blocking state
[ 966.198373] br-lan: port 1(eth1) entered forwarding state
[ 966.602121] br-lan: port 3(wlan0) entered disabled state
[ 969.344178] br-lan: port 2(wlan1) entered blocking state
[ 969.349503] br-lan: port 2(wlan1) entered forwarding state
[ 976.976589] br-lan: port 3(wlan0) entered blocking state
[ 976.981926] br-lan: port 3(wlan0) entered forwarding state
[ 1218.164583] mtk_soc_eth 15100000.ethernet eth0: Link is Down
[ 1218.469986] mtk_soc_eth 15100000.ethernet eth0: PHY [mdio-bus:05] driver [Maxlinear Ethernet GPY211C] (irq=POLL)
[ 1218.480273] mtk_soc_eth 15100000.ethernet eth0: configuring for phy/sgmii link mode
[ 1222.632105] mtk_soc_eth 15100000.ethernet eth0: Link is Up - 1Gbps/Full - flow control off
[ 1229.688726] [add_dev_config 319]add node success. iface:wan, dev:pppoe-wan, ifindex:12

Here you are

I don’t know what to do, I have an account setup

and the router has connection, I m writing this message via win10 on ethernet on the router

1 Like

That’s odd. Try logging out and logging back in maybe?

Then restart the daemon and try to connect again.

Sorry for the bugs! I appreciate you testing it out.

1 Like

Oh, yeah I see now, I had 10 devices connected (max devices)
I though I connected, but obviously, no.
It work now, it s a bit slow though…

###WITH VPN
root@OpenWrt:~# ping -c 2 9.9.9.9
PING 9.9.9.9 (9.9.9.9): 56 data bytes
64 bytes from 9.9.9.9: seq=0 ttl=59 time=18.066 ms
64 bytes from 9.9.9.9: seq=1 ttl=59 time=18.299 ms

— 9.9.9.9 ping statistics —
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max = 18.066/18.182/18.299 ms

###WITHOUT VPN
root@OpenWrt:~# ping -c 2 9.9.9.9
PING 9.9.9.9 (9.9.9.9): 56 data bytes
64 bytes from 9.9.9.9: seq=0 ttl=62 time=2.924 ms
64 bytes from 9.9.9.9: seq=1 ttl=62 time=3.745 ms

— 9.9.9.9 ping statistics —

Are those stats normal?

1 Like

Glad it’s resolved! Those stats look normal. You should expect some latency with any VPN. Nym uses 2 nodes in fast mode and 5 nodes in anonymous mode, so the latency is expected. In anonymous mode, the packets are actually delayed slightly at each mix node in the route to prevent analysis of traffic timing.

While selecting one specific server, it seems I can’t connect, there is some crash happening. If I dont select a specific server, it s ā€œfineā€ (slow, I can’t watch videos, but I can ping).
Selecting country is ok

I just pushed some fixes for the bug you were experiencing. Try this new release: Release Nym VPN v1.21.2 Ā· dial0ut/nym-vpn-client Ā· GitHub

Let me know if this resolves it! Added address flushing in between restarts and some better debug logging.

Make sure the gateways you select have strong uptime and relatively low load. These are any gateways with the green connection symbol.

Also, you’re probably in anonymous mode. Try fast mode:
Tunnel Settings → Toggle Fast Mode on → Save tunnel settings → disconnect and reconnect

I can’t browse.
Trying with the app on the windows computer, I have thoses stats:

###WITH WINDOWS NYM VPN
PS C:\Users\user> ping 9.9.9.9

Pinging 9.9.9.9 with 32 bytes of data:
Reply from 9.9.9.9: bytes=32 time=54ms TTL=59
Reply from 9.9.9.9: bytes=32 time=55ms TTL=59
Reply from 9.9.9.9: bytes=32 time=54ms TTL=59
Reply from 9.9.9.9: bytes=32 time=54ms TTL=59

Ping statistics for 9.9.9.9:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 54ms, Maximum = 55ms, Average = 54ms

###WITHOUT WINDOWS NYM VPN WITHOUT NYM VPN OPENWRT
PS C:\Users\user> ping 9.9.9.9

Pinging 9.9.9.9 with 32 bytes of data:
Reply from 9.9.9.9: bytes=32 time=3ms TTL=61
Reply from 9.9.9.9: bytes=32 time=3ms TTL=61
Reply from 9.9.9.9: bytes=32 time=3ms TTL=61
Reply from 9.9.9.9: bytes=32 time=3ms TTL=61

Ping statistics for 9.9.9.9:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 3ms, Maximum = 3ms, Average = 3ms

###WITHOUT WINDOWS NYM VPN WITH NYM VPN OPENWRT
PS C:\Users\user> ping 9.9.9.9

Pinging 9.9.9.9 with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 9.9.9.9:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

Did I miss something?

I m in fast mode (Two-Hop Mode)

Also yes, i m trying the top french gateway

Can you ping from the router itself with the vpn on openwrt only? Does the connection display show connected?

Sun Dec 28 09:00:33 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:33.632232Z INFO nym_vpn_lib::tunnel_state_machine::tunnel_monitor: Using kernel WireGuard for entry: nym-entry
Sun Dec 28 09:00:33 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:33.632278Z INFO nym_vpn_lib::tunnel_state_machine::tunnel_monitor: Using kernel WireGuard for exit: nym-exit
Sun Dec 28 09:00:33 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:33.632901Z INFO nym_vpn_lib::tunnel_state_machine::tunnel::wireguard::wg_backend: Starting kernel WireGuard tunnel: nym-entry
Sun Dec 28 09:00:33 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:33.634974Z ERROR nym_wg_kernel: Netlink error adding IP fc01::6c86 to interface index 9: code=Some(-13) (ErrorMessage { code: Some(-13), header: [64, 0, 0, 0, 20, 0, 5, 5, 5, 0, 0, 0, 0, 0, 0, 0, 10, 128, 0, 0, 9, 0, 0, 0, 20, 0, 1, 0, 252, 1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 108, 134, 20, 0, 2, 0, 252, 1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 108, 134] })
Sun Dec 28 09:00:33 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:33.635207Z ERROR nym_vpn_lib::tunnel_state_machine::tunnel_monitor: Error: Tunnel monitor exited with error
Sun Dec 28 09:00:33 2025 daemon.info nym-vpnd[8128]: Caused by: tunnel error
Sun Dec 28 09:00:33 2025 daemon.info nym-vpnd[8128]: Caused by: kernel WireGuard error: Add IP to device error
Sun Dec 28 09:00:33 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:33.637606Z INFO nym_vpn_lib::tunnel_state_machine::states::connecting_state: Tunnel closed
Sun Dec 28 09:00:33 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:33.637653Z INFO nym_vpn_lib::tunnel_state_machine::states::connecting_state: Reconnecting, attempt 5
Sun Dec 28 09:00:33 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:33.637854Z ERROR nym_vpn_account_controller::state_machine::syncing_state: Failed to join on the syncing task : task 2995 was cancelled
Sun Dec 28 09:00:33 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:33.637973Z INFO nym_vpn_account_controller::controller: New AccountController state: Syncing
Sun Dec 28 09:00:33 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:33.639599Z INFO nym_firewall: Applying firewall policy: Connecting to peers: 103.63.30.51:9000/TCP,103.63.30.51:9001/TCP, Allowing LAN, interface: none. Allowing endpoints: none. Allowing non-tunnel DNS: 9.9.9.9,149.112.112.112,1.1.1.1,1.0.0.1
Sun Dec 28 09:00:33 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:33.654648Z INFO nym_gateway_client::socket_state: received remember me acknowledgement
Sun Dec 28 09:00:33 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:33.691931Z INFO nym_vpn_lib::tunnel_state_machine::states::connecting_state: Waiting 12000ms before reconnect
Sun Dec 28 09:00:33 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:33.692085Z INFO nym_vpn_lib::tunnel_state_machine: New tunnel state: Connecting wg [6Rg6qQmaGwF4gRtc52B5FL4tUBgwUwFBAUY5TVBcMoSP] → [9a1G4Nq8h2x2ckUiFc2RrPKuRaL6UhjpK4yrFeoEqtPX], resolving api addresses, try #5
Sun Dec 28 09:00:35 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:35.636768Z INFO nym_client_core_surb_storage: PersistentReplyStorage is flushing all reply-related data to underlying storage
Sun Dec 28 09:00:35 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:35.636836Z INFO sqlx_pool_guard: Closing sqlite pool: /var/lib/nym-vpnd/mainnet/persistent_reply_store.sqlite
Sun Dec 28 09:00:35 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:35.636903Z INFO nym_task::cancellation::manager: sending cancellation after receiving shutdown signal
Sun Dec 28 09:00:35 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:35.669778Z INFO nym_client_core_surb_storage::backend::fs_backend::manager: Database migration finished!
Sun Dec 28 09:00:35 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:35.722839Z INFO nym_client_core_surb_storage: Data flush is complete
Sun Dec 28 09:00:45 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:45.713085Z INFO nym_vpn_lib::tunnel_state_machine::states::connecting_state: Resolved gateway config: ResolvedConfig { nyxd_socket_addrs: [194.182.169.49:443, [2a04:c43:e00:6f28:400:d8ff:fe00:1483]:443], nym_api_resolver_overrides: ResolverOverrides { overrides: {ā€œvalidator.nymtech.netā€: {212.71.233.232:443}} }, nym_vpn_api_resolver_overrides: ResolverOverrides { overrides: {ā€œvercel.appā€: {64.29.17.195:443}, ā€œnymvpn.comā€: {76.76.21.21:443}, ā€œvercel.comā€: {198.169.2.193:443}, ā€œnymvpn-frontdoor.global.ssl.fastly.netā€: {151.101.1.194:443}, ā€œyelp.global.ssl.fastly.netā€: {151.101.1.194:443}} } }
Sun Dec 28 09:00:45 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:45.713196Z INFO nym_firewall: Applying firewall policy: Connecting to peers: 103.63.30.51:9000/TCP,103.63.30.51:9001/TCP, Allowing LAN, interface: none. Allowing endpoints: 194.182.169.49:443/TCP,212.71.233.232:443/TCP,64.29.17.195:443/TCP,76.76.21.21:443/TCP,198.169.2.193:443/TCP,151.101.1.194:443/TCP,151.101.1.194:443/TCP. Allowing non-tunnel DNS: 9.9.9.9,149.112.112.112,1.1.1.1,1.0.0.1
Sun Dec 28 09:00:45 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:45.793295Z INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for vercel.app: 64.29.17.195:443
Sun Dec 28 09:00:45 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:45.793363Z INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for nymvpn.com: 76.76.21.21:443
Sun Dec 28 09:00:45 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:45.793384Z INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for vercel.com: 198.169.2.193:443
Sun Dec 28 09:00:45 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:45.793403Z INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for nymvpn-frontdoor.global.ssl.fastly.net: 151.101.1.194:443
Sun Dec 28 09:00:45 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:45.793424Z INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for yelp.global.ssl.fastly.net: 151.101.1.194:443
Sun Dec 28 09:00:45 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:45.793700Z INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for vercel.app: 64.29.17.195:443
Sun Dec 28 09:00:45 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:45.793744Z INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for nymvpn.com: 76.76.21.21:443
Sun Dec 28 09:00:45 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:45.793764Z INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for vercel.com: 198.169.2.193:443
Sun Dec 28 09:00:45 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:45.793786Z INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for nymvpn-frontdoor.global.ssl.fastly.net: 151.101.1.194:443
Sun Dec 28 09:00:45 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:45.793810Z INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for yelp.global.ssl.fastly.net: 151.101.1.194:443
Sun Dec 28 09:00:45 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:45.794917Z INFO nym_vpn_lib::tunnel_state_machine: New tunnel state: Connecting wg [6Rg6qQmaGwF4gRtc52B5FL4tUBgwUwFBAUY5TVBcMoSP] → [9a1G4Nq8h2x2ckUiFc2RrPKuRaL6UhjpK4yrFeoEqtPX], awaiting account readiness, try #5
Sun Dec 28 09:00:45 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:45.794113Z INFO nym_vpn_account_controller::controller: New AccountController state: Syncing
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.524229Z INFO nym_vpn_account_controller::controller: New AccountController state: Requesting zk-nyms
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.525079Z INFO nym_vpn_account_controller::controller: New AccountController state: Ready to connect
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.525269Z INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for validator.nymtech.net: 212.71.233.232:443
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.525530Z INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for vercel.app: 64.29.17.195:443
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.525585Z INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for nymvpn.com: 76.76.21.21:443
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.525605Z INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for vercel.com: 198.169.2.193:443
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.525624Z INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for nymvpn-frontdoor.global.ssl.fastly.net: 151.101.1.194:443
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.525646Z INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for yelp.global.ssl.fastly.net: 151.101.1.194:443
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.525910Z INFO nym_vpn_lib::tunnel_state_machine: New tunnel state: Connecting wg [6Rg6qQmaGwF4gRtc52B5FL4tUBgwUwFBAUY5TVBcMoSP] → [9a1G4Nq8h2x2ckUiFc2RrPKuRaL6UhjpK4yrFeoEqtPX], refreshing gateways, try #5
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.525971Z INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for validator.nymtech.net: 212.71.233.232:443
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.525981Z INFO nym_vpn_lib::tunnel_state_machine: New tunnel state: Connecting wg [6Rg6qQmaGwF4gRtc52B5FL4tUBgwUwFBAUY5TVBcMoSP] → [9a1G4Nq8h2x2ckUiFc2RrPKuRaL6UhjpK4yrFeoEqtPX], registering with gateways, try #5
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.526504Z INFO nym_registration_client::builder::config: mixnet client poisson rate limiting: disabled
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.526544Z INFO nym_registration_client::builder::config: mixnet client background loop cover traffic stream: disabled
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.526557Z INFO nym_registration_client::builder::config: mixnet client minimum mixnode performance: 50
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.526567Z INFO nym_registration_client::builder::config: mixnet client minimum gateway performance: 50
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.526598Z INFO nym_client_core::client::base_client::non_wasm_helpers: Loading existing surb database
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.529526Z INFO nym_client_core_surb_storage::backend::fs_backend::manager: Database migration finished!
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.547160Z INFO nym_registration_client::builder::config: mixnet client poisson rate limiting: disabled
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.547218Z INFO nym_registration_client::builder::config: mixnet client background loop cover traffic stream: disabled
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.547230Z INFO nym_registration_client::builder::config: mixnet client minimum mixnode performance: 50
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.547242Z INFO nym_registration_client::builder::config: mixnet client minimum gateway performance: 50
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.565939Z INFO nym_client_core::client::base_client: Starting nym client
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.569148Z INFO nym_client_core::client::base_client: Building nym-api client from provided URLs (with domain fronting support): 1 URLs
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.569245Z WARN nym_http_api_client::fronted: fronting is enabled, but none of the supplied urls have configured fronting domains
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.650098Z INFO nym_client_core::client::base_client: Starting statistics control…
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.650687Z INFO nym_client_core::client::base_client: Obtaining initial network topology
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.652057Z INFO nym_client_core::client::base_client: Starting topology refresher…
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.707598Z WARN perform_initial_authentication: nym_gateway_client::client: this gateway is on an old version that doesn’t support upgrade mode gateway=6Rg6qQmaGwF4gRtc52B5FL4tUBgwUwFBAUY5TVBcMoSP gateway_address=ws://103.63.30.51:9000/
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.727947Z INFO perform_initial_authentication: nym_gateway_client::client: close time.busy=1.65ms time.idle=73.9ms gateway=6Rg6qQmaGwF4gRtc52B5FL4tUBgwUwFBAUY5TVBcMoSP gateway_address=ws://103.63.30.51:9000/
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.730868Z INFO nym_client_core::client::base_client: Starting received messages buffer controller…
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.731006Z INFO nym_client_core::client::base_client: Starting mix traffic controller…
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.731044Z INFO nym_client_core::client::base_client: Starting real traffic stream…
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.731897Z INFO nym_client_core::client::real_messages_control::message_handler: using LZ7BSNhnAMaZZZE5mL8LoM for all anonymous messages sent to 4xRDrANFuhzodhAkyWykJzXAKcZSbkqCuR62L6sDb3Gx.DpQa8UgFR38TNH9pCz4WzmX4kSQfrf7GqVLKLq1HGqZi@6Rg6qQmaGwF4gRtc52B5FL4tUBgwUwFBAUY5TVBcMoSP
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.764602Z INFO nym_client_core::client::real_messages_control::message_handler: using DdevH9uQiUTDcDJcbXhfAa for all anonymous messages sent to EwJtsYQYDTyCRAv7G8mzdyKpUoHjrWdTdo2fPVZwySzV.9ggR84Gr5GZHxShSd67DnmDJyKJuR2jQimJbhoVvvgDx@9a1G4Nq8h2x2ckUiFc2RrPKuRaL6UhjpK4yrFeoEqtPX
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.889147Z INFO nym_firewall: Applying firewall policy: Connecting to peers: 103.63.30.51:9000/TCP,103.63.30.51:9001/TCP,103.63.30.51:51822/UDP, Allowing LAN, interface: none. Allowing endpoints: 194.182.169.49:443/TCP,212.71.233.232:443/TCP,64.29.17.195:443/TCP,76.76.21.21:443/TCP,198.169.2.193:443/TCP,151.101.1.194:443/TCP,151.101.1.194:443/TCP. Allowing non-tunnel DNS: 9.9.9.9,149.112.112.112,1.1.1.1,1.0.0.1
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.941842Z INFO nym_vpn_lib::tunnel_state_machine: New tunnel state: Connecting wg to 103.63.30.51:51822 [6Rg6qQmaGwF4gRtc52B5FL4tUBgwUwFBAUY5TVBcMoSP] → 128.140.106.90:51822 [9a1G4Nq8h2x2ckUiFc2RrPKuRaL6UhjpK4yrFeoEqtPX], connecting tunnel, try #5
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.942146Z INFO nym_vpn_lib::tunnel_state_machine::tunnel_monitor: Using kernel WireGuard for entry: nym-entry
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.942187Z INFO nym_vpn_lib::tunnel_state_machine::tunnel_monitor: Using kernel WireGuard for exit: nym-exit
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.942926Z INFO nym_vpn_lib::tunnel_state_machine::tunnel::wireguard::wg_backend: Starting kernel WireGuard tunnel: nym-entry
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.944792Z ERROR nym_wg_kernel: Netlink error adding IP fc01::6c86 to interface index 9: code=Some(-13) (ErrorMessage { code: Some(-13), header: [64, 0, 0, 0, 20, 0, 5, 5, 5, 0, 0, 0, 0, 0, 0, 0, 10, 128, 0, 0, 9, 0, 0, 0, 20, 0, 1, 0, 252, 1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 108, 134, 20, 0, 2, 0, 252, 1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 108, 134] })
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.945645Z ERROR nym_vpn_lib::tunnel_state_machine::tunnel_monitor: Error: Tunnel monitor exited with error
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: Caused by: tunnel error
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: Caused by: kernel WireGuard error: Add IP to device error
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.947313Z INFO nym_vpn_lib::tunnel_state_machine::states::connecting_state: Tunnel closed
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.947537Z INFO nym_vpn_lib::tunnel_state_machine::states::connecting_state: Reconnecting, attempt 6
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.948127Z INFO nym_firewall: Applying firewall policy: Connecting to peers: none, Allowing LAN, interface: none. Allowing endpoints: none. Allowing non-tunnel DNS: 9.9.9.9,149.112.112.112,1.1.1.1,1.0.0.1
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.981958Z INFO nym_vpn_lib::tunnel_state_machine::states::connecting_state: Waiting 15000ms before reconnect
Sun Dec 28 09:00:46 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:46.982068Z INFO nym_vpn_lib::tunnel_state_machine: New tunnel state: Connecting wg, resolving api addresses, try #6
Sun Dec 28 09:00:48 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:48.947858Z INFO nym_client_core_surb_storage: PersistentReplyStorage is flushing all reply-related data to underlying storage
Sun Dec 28 09:00:48 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:48.947921Z INFO sqlx_pool_guard: Closing sqlite pool: /var/lib/nym-vpnd/mainnet/persistent_reply_store.sqlite
Sun Dec 28 09:00:48 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:48.948000Z INFO nym_task::cancellation::manager: sending cancellation after receiving shutdown signal
Sun Dec 28 09:00:48 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:48.979991Z INFO nym_client_core_surb_storage::backend::fs_backend::manager: Database migration finished!
Sun Dec 28 09:00:49 2025 daemon.info nym-vpnd[8128]: 2025-12-28T09:00:49.053587Z INFO nym_client_core_surb_storage: Data flush is complete

Just installed and testet every scenario:

wgserver on/off

other wg sessions on/off

reboot

The verbose logging helped - we can see the actual error now:

Netlink error adding IP fc01::6c86 to interface index 9: code=Some(-13)

Error -13 is EACCES (Permission denied), and the IP fc01::6c86 is an IPv6 address.

The kernel is rejecting IPv6 address assignment - this typically happens when IPv6 is disabled on the system.

Fix: Disable IPv6 in nym-vpn:

Option 1: In LuCI, go to VPN → Nym VPN → Tunnel Settings and disable IPv6.

Option 2: Edit the config directly:

vi /etc/nym/mainnet/nym-vpnd.json
# Change "disable_ipv6": false to "disable_ipv6": true

/etc/init.d/nym-vpnd restart

You can verify IPv6 is disabled on your system with:

sysctl net.ipv6.conf.all.disable_ipv6

If it returns 1, that confirms IPv6 is disabled at the kernel level.

I did already disabled ipv6 from the beginning on. The logs are made with ipv6 0ff

That is a funny thing.
So I for ease, I move on a linux computer (debian).
I tried again, to connect nym vpn on openwrt.

  • I am connected via ssh on the openwrt.
  • I try to ping from the laptop the router, with only nym on the router (ping 192.168.1.1)

user@workstation ~ [1]> ping -c 2 192.168.1.1
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.

— 192.168.1.1 ping statistics —
2 packets transmitted, 0 received, 100% packet loss, time 1023ms

I can t ping the router from the computer
But I stay connected on SSH, and I can access the WEBGUI.
Here is the log :
ā€ā€ā€
INFO nym_vpnd: nym-vpnd 1.21.0-beta (VERGEN_IDEMPOTENT_OUTPUT)

INFO nym_vpnd: OS information: Linux (OpenWrt 24.10.1) (x86_64), kernel: 6.6.86

INFO nym_vpnd::environment: Setting up environment by discovering the network: mainnet

INFO nym_vpnd::command_interface: Starting socket listener on: /var/run/nym-vpn.sock

INFO nym_vpn_account_controller::controller: Initializing account controller: data_dir: /var/lib/nym-vpnd/mainnet

INFO nym_vpn_account_controller::controller: Initial account controller state: Syncing

INFO nym_vpn_account_controller::controller: Account id: n1rdwm5mygue87x2pnja60t4fh3g340pse3u2szc

INFO nym_vpn_account_controller::controller: Device id: n1aitL21mbPT5gtnopEfE9vx58jqSYAr8i3GLXyXCaC

INFO nym_http_api_client::dns: building new configured resolver

INFO nym_vpnd::service::config::config_manager: Read service config version v4 from /etc/nym/mainnet/nym-vpnd.json

INFO nym_vpnd::service::config::config_manager: Using config: VpnServiceConfig { entry_point: Country { two_letter_iso_country_code: ā€œFRā€ }, exit_point: Country { two_letter_iso_country_code: ā€œFRā€ }, allow_lan: true, disable_ipv6: true, enable_two_hop: true, enable_bridges: false, netstack: false, disable_poisson_rate: false, disable_background_cover_traffic: false, min_mixnode_performance: None, min_gateway_mixnet_performance: None, min_gateway_vpn_performance: None, residential_exit: false, enable_custom_dns: false, custom_dns: , network_stats: NetworkStatisticsConfig { enabled: true, allow_disconnected: false } }

INFO nym_firewall: Resetting firewall policy

INFO nym_vpn_account_controller::controller: New AccountController state: Requesting zk-nyms

INFO nym_vpn_account_controller::controller: New AccountController state: Ready to connect

INFO nym_vpnd::service::config::config_manager: Using config: VpnServiceConfig { entry_point: Country { two_letter_iso_country_code: ā€œFRā€ }, exit_point: Country { two_letter_iso_country_code: ā€œFRā€ }, allow_lan: true, disable_ipv6: true, enable_two_hop: true, enable_bridges: false, netstack: false, disable_poisson_rate: false, disable_background_cover_traffic: false, min_mixnode_performance: None, min_gateway_mixnet_performance: None, min_gateway_vpn_performance: None, residential_exit: false, enable_custom_dns: false, custom_dns: , network_stats: NetworkStatisticsConfig { enabled: true, allow_disconnected: false } }

INFO nym_vpnd::service::config::config_manager: Using config: VpnServiceConfig { entry_point: Country { two_letter_iso_country_code: ā€œFRā€ }, exit_point: Country { two_letter_iso_country_code: ā€œFRā€ }, allow_lan: true, disable_ipv6: true, enable_two_hop: true, enable_bridges: false, netstack: false, disable_poisson_rate: false, disable_background_cover_traffic: false, min_mixnode_performance: None, min_gateway_mixnet_performance: None, min_gateway_vpn_performance: None, residential_exit: false, enable_custom_dns: false, custom_dns: , network_stats: NetworkStatisticsConfig { enabled: true, allow_disconnected: false } }

INFO nym_firewall: Applying firewall policy: Connecting to peers: none, Allowing LAN, interface: none. Allowing endpoints: none. Allowing non-tunnel DNS: 9.9.9.9,149.112.112.112,1.1.1.1,1.0.0.1

INFO nym_vpn_lib::tunnel_state_machine: New tunnel state: Connecting wg, resolving api addresses, try #0

INFO nym_vpn_lib::tunnel_state_machine::states::connecting_state: Resolved gateway config: ResolvedConfig { nyxd_socket_addrs: [91.92.200.116:443, [2a04:c46:e00:6f28:4b3:68ff:fe00:460]:443], nym_api_resolver_overrides: ResolverOverrides { overrides: {ā€œvalidator.nymtech.netā€: {212.71.233.232:443}} }, nym_vpn_api_resolver_overrides: ResolverOverrides { overrides: {ā€œyelp.global.ssl.fastly.netā€: {151.101.1.194:443}, ā€œnymvpn-frontdoor.global.ssl.fastly.netā€: {151.101.1.194:443}, ā€œvercel.appā€: {64.29.17.131:443}, ā€œnymvpn.comā€: {76.76.21.21:443}, ā€œvercel.comā€: {198.169.2.193:443}} } }

INFO nym_firewall: Applying firewall policy: Connecting to peers: none, Allowing LAN, interface: none. Allowing endpoints: 91.92.200.116:443/TCP,212.71.233.232:443/TCP,151.101.1.194:443/TCP,151.101.1.194:443/TCP,64.29.17.131:443/TCP,76.76.21.21:443/TCP,198.169.2.193:443/TCP. Allowing non-tunnel DNS: 9.9.9.9,149.112.112.112,1.1.1.1,1.0.0.1

INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for yelp.global.ssl.fastly.net: 151.101.1.194:443

INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for yelp.global.ssl.fastly.net: 151.101.1.194:443

INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for nymvpn-frontdoor.global.ssl.fastly.net: 151.101.1.194:443

INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for nymvpn-frontdoor.global.ssl.fastly.net: 151.101.1.194:443

INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for vercel.app: 64.29.17.131:443

INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for vercel.app: 64.29.17.131:443

INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for nymvpn.com: 76.76.21.21:443

INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for nymvpn.com: 76.76.21.21:443

INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for vercel.com: 198.169.2.193:443

INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for vercel.com: 198.169.2.193:443

INFO nym_vpn_lib::tunnel_state_machine: New tunnel state: Connecting wg, awaiting account readiness, try #0

INFO nym_vpn_lib::tunnel_state_machine: New tunnel state: Connecting wg, refreshing gateways, try #0

INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for validator.nymtech.net: 212.71.233.232:443

INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for yelp.global.ssl.fastly.net: 151.101.1.194:443

INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for nymvpn-frontdoor.global.ssl.fastly.net: 151.101.1.194:443

INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for vercel.app: 64.29.17.131:443

INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for nymvpn.com: 76.76.21.21:443

INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for vercel.com: 198.169.2.193:443

INFO nym_vpn_lib::tunnel_state_machine: New tunnel state: Connecting wg, selecting gateways, try #0

INFO nym_vpn_lib::tunnel_state_machine::tunnel::gateway_selector: Found 394 entry gateways

INFO nym_vpn_lib::tunnel_state_machine::tunnel::gateway_selector: Found 394 exit gateways

INFO nym_vpn_lib::tunnel_state_machine::tunnel::gateway_selector: Using entry gateway: 7Z6BJang9EW3KraJh6M8tNZXeSRR2D4y8UT2jfVjj3dw, location: FR, performance: 99%

INFO nym_vpn_lib::tunnel_state_machine::tunnel::gateway_selector: Using exit gateway: BayDqFCz1h7aShk54ewbKg4w8cT9ddqW9PDTMrvcRGgK, location: FR, performance: 99%

INFO nym_vpn_lib::tunnel_state_machine::tunnel::gateway_selector: Using exit router address 34MrW5kNPq7B8HMB3k9cwSSs41BDugjW8UVtTZsc9kWe.8bWutpgha1w4tREibXyyyvDHtqiDLir9gPPqw2Xypp3j@BayDqFCz1h7aShk54ewbKg4w8cT9ddqW9PDTMrvcRGgK

INFO nym_firewall: Applying firewall policy: Connecting to peers: 92.112.192.97:9000/TCP,92.112.192.97:9001/TCP, Allowing LAN, interface: none. Allowing endpoints: 91.92.200.116:443/TCP,212.71.233.232:443/TCP,151.101.1.194:443/TCP,151.101.1.194:443/TCP,64.29.17.131:443/TCP,76.76.21.21:443/TCP,198.169.2.193:443/TCP. Allowing non-tunnel DNS: 9.9.9.9,149.112.112.112,1.1.1.1,1.0.0.1

INFO nym_vpn_api_client::fronted_http_client: Enabling Resolver override for validator.nymtech.net: 212.71.233.232:443

INFO nym_vpn_lib::tunnel_state_machine: New tunnel state: Connecting wg, registering with gateways, try #0

INFO nym_registration_client::builder::config: mixnet client poisson rate limiting: disabled

INFO nym_registration_client::builder::config: mixnet client background loop cover traffic stream: disabled

INFO nym_registration_client::builder::config: mixnet client minimum mixnode performance: 50

INFO nym_registration_client::builder::config: mixnet client minimum gateway performance: 50

INFO nym_client_core::client::base_client::non_wasm_helpers: Loading existing surb database

INFO nym_client_core_surb_storage::backend::fs_backend::manager: Database migration finished!

INFO nym_registration_client::builder::config: mixnet client poisson rate limiting: disabled

INFO nym_registration_client::builder::config: mixnet client background loop cover traffic stream: disabled

INFO nym_registration_client::builder::config: mixnet client minimum mixnode performance: 50

INFO nym_registration_client::builder::config: mixnet client minimum gateway performance: 50

WARN perform_initial_authentication: nym_gateway_client::client: this gateway is on an old version that doesn’t support upgrade mode gateway=7Z6BJang9EW3KraJh6M8tNZXeSRR2D4y8UT2jfVjj3dw gateway_address=ws://92.112.192.97:9000/

INFO perform_initial_authentication: nym_gateway_requests::registration::handshake::client: the gateway insists on protocol version different from the one we suggested. it wants 3 whilst we wanted 5, however, we can support it gateway=7Z6BJang9EW3KraJh6M8tNZXeSRR2D4y8UT2jfVjj3dw gateway_address=ws://92.112.192.97:9000/

INFO perform_initial_authentication: nym_gateway_client::client: close time.busy=1.88ms time.idle=75.4ms gateway=7Z6BJang9EW3KraJh6M8tNZXeSRR2D4y8UT2jfVjj3dw gateway_address=ws://92.112.192.97:9000/

INFO nym_client_core::client::base_client: Starting nym client

INFO nym_client_core::client::base_client: Building nym-api client from provided URLs (with domain fronting support): 1 URLs

WARN nym_http_api_client::fronted: fronting is enabled, but none of the supplied urls have configured fronting domains

INFO nym_client_core::client::base_client: Starting statistics control…

INFO nym_client_core::client::base_client: Obtaining initial network topology

INFO nym_client_core::client::base_client: Starting topology refresher…

WARN perform_initial_authentication: nym_gateway_client::client: this gateway is on an old version that doesn’t support upgrade mode gateway=7Z6BJang9EW3KraJh6M8tNZXeSRR2D4y8UT2jfVjj3dw gateway_address=ws://92.112.192.97:9000/

INFO perform_initial_authentication: nym_gateway_client::bandwidth: remaining bandwidth: 0.00 B. in ā€˜upgrade mode’: false gateway=7Z6BJang9EW3KraJh6M8tNZXeSRR2D4y8UT2jfVjj3dw gateway_address=ws://92.112.192.97:9000/

INFO perform_initial_authentication: nym_gateway_client::client: close time.busy=1.24ms time.idle=15.7ms gateway=7Z6BJang9EW3KraJh6M8tNZXeSRR2D4y8UT2jfVjj3dw gateway_address=ws://92.112.192.97:9000/

INFO nym_gateway_client::client: Claiming more bandwidth with existing credentials. Stop the process now if you don’t want that to happen.

WARN nym_gateway_client::client: Not enough bandwidth. Trying to get more bandwidth, this might take a while

INFO nym_gateway_client::client: managed to claim ecash bandwidth

INFO nym_client_core::client::base_client: Starting received messages buffer controller…

INFO nym_client_core::client::base_client: Starting mix traffic controller…

INFO nym_client_core::client::base_client: Starting real traffic stream…

INFO nym_client_core::client::real_messages_control::message_handler: using BiwuzeAbaL4U8fTcfbhAmH for all anonymous messages sent to H2mt9MrHdhUshE8KGj1wPq3c7E2fbyzw1euA9JPedXSs.AVtxZb7RwWPWgBr6kaSFvQQkr2r3CZ5MaZPbbGYanGzU@7Z6BJang9EW3KraJh6M8tNZXeSRR2D4y8UT2jfVjj3dw

INFO nym_client_core::client::real_messages_control::message_handler: using DAks9aMfNYrScZj5AKjTVH for all anonymous messages sent to 8orKcyGzHaBqRqSJZMeRn1m5V87iPusFhTKmAJWDYxkD.4teSREZmEBt4c2GNXs9odiwmMmZMno35nK5ZLrUKcwAf@BayDqFCz1h7aShk54ewbKg4w8cT9ddqW9PDTMrvcRGgK

INFO nym_firewall: Applying firewall policy: Connecting to peers: 92.112.192.97:9000/TCP,92.112.192.97:9001/TCP,92.112.192.97:51822/UDP, Allowing LAN, interface: none. Allowing endpoints: 91.92.200.116:443/TCP,212.71.233.232:443/TCP,151.101.1.194:443/TCP,151.101.1.194:443/TCP,64.29.17.131:443/TCP,76.76.21.21:443/TCP,198.169.2.193:443/TCP. Allowing non-tunnel DNS: 9.9.9.9,149.112.112.112,1.1.1.1,1.0.0.1

INFO nym_vpn_lib::tunnel_state_machine: New tunnel state: Connecting wg to 92.112.192.97:51822 [7Z6BJang9EW3KraJh6M8tNZXeSRR2D4y8UT2jfVjj3dw] → 185.235.240.66:51822 [BayDqFCz1h7aShk54ewbKg4w8cT9ddqW9PDTMrvcRGgK], connecting tunnel, try #0

INFO nym_vpn_lib::tunnel_state_machine::tunnel_monitor: Using kernel WireGuard for entry: nym-entry

INFO nym_vpn_lib::tunnel_state_machine::tunnel_monitor: Using kernel WireGuard for exit: nym-exit

INFO nym_vpn_lib::tunnel_state_machine::tunnel::wireguard::wg_backend: Starting kernel WireGuard tunnel: nym-entry

INFO nym_vpn_lib::tunnel_state_machine::tunnel::wireguard::wg_backend: Starting kernel WireGuard tunnel: nym-exit

INFO nym_firewall: Applying firewall policy: Connecting to peers: 92.112.192.97:9000/TCP,92.112.192.97:9001/TCP,92.112.192.97:51822/UDP over entry interface: nym-entry, ips: 10.1.135.224, v4 gw: None, v6 gw: None, exit interface: nym-exit, ips: 10.1.71.129, v4 gw: Some(10.1.135.224), v6 gw: None, allowed entry in-tunnel traffic: All, allowed exit in-tunnel traffic: All), Allowing LAN. Allowing endpoints: 91.92.200.116:443/TCP,212.71.233.232:443/TCP,151.101.1.194:443/TCP,151.101.1.194:443/TCP,64.29.17.131:443/TCP,76.76.21.21:443/TCP,198.169.2.193:443/TCP. Allowing non-tunnel DNS: 9.9.9.9,149.112.112.112,1.1.1.1,1.0.0.1

INFO nym_vpn_lib::tunnel_state_machine: New tunnel state: Connecting wg to 92.112.192.97:51822 [7Z6BJang9EW3KraJh6M8tNZXeSRR2D4y8UT2jfVjj3dw] → 185.235.240.66:51822 [BayDqFCz1h7aShk54ewbKg4w8cT9ddqW9PDTMrvcRGgK], connecting tunnel, try #0

ERROR nym_connection_monitor::connection_monitor: Error: failed to send icmp packet

: Request timeout for icmp_seq 0

INFO nym_vpn_lib::tunnel_state_machine::tunnel_monitor: Tunnel connection is failing (retry: 1)

INFO nym_vpn_lib::tunnel_state_machine::tunnel_monitor: Tunnel connection is viable

INFO nym_firewall: Applying firewall policy: Connected to peers: 92.112.192.97:9000/TCP,92.112.192.97:9001/TCP,92.112.192.97:51822/UDP over entry interface: nym-entry, ips: 10.1.135.224, v4 gw: None, v6 gw: None, exit interface: nym-exit, ips: 10.1.71.129, v4 gw: Some(10.1.135.224), v6 gw: None, Allowing LAN. Allowing non-tunnel DNS: none

INFO nym_dns: Setting DNS servers: Tunnel DNS: {9.9.9.9, 149.112.112.112, 1.1.1.1, 1.0.0.1} Non-tunnel DNS: {}

INFO nym_vpn_lib::tunnel_state_machine: New tunnel state: Connected wg to 92.112.192.97:51822 [7Z6BJang9EW3KraJh6M8tNZXeSRR2D4y8UT2jfVjj3dw] → 185.235.240.66:51822 [BayDqFCz1h7aShk54ewbKg4w8cT9ddqW9PDTMrvcRGgK]

WARN nym_vpn_lib::bandwidth_controller: gateway 7Z6BJang9EW3KraJh6M8tNZXeSRR2D4y8UT2jfVjj3dw is outdated and does not support upgrade mode queries

WARN nym_vpn_lib::bandwidth_controller: gateway BayDqFCz1h7aShk54ewbKg4w8cT9ddqW9PDTMrvcRGgK is outdated and does not support upgrade mode queries

ERROR nym_connection_monitor::connection_monitor: Error: failed to send icmp packet

: Request timeout for icmp_seq 3

INFO nym_vpn_lib::tunnel_state_machine::tunnel_monitor: Tunnel connection is failing (retry: 1)

INFO nym_vpn_lib::tunnel_state_machine::tunnel_monitor: Tunnel connection is viable

INFO nym_vpn_account_controller::controller: New AccountController state: Syncing

INFO nym_vpn_account_controller::controller: New AccountController state: Requesting zk-nyms

INFO nym_vpn_account_controller::controller: New AccountController state: Ready to connect
ā€ā€ā€

I want to add that I have AdGuard Home on the openwrt router.

I pushed a fix - the disable_ipv6 setting wasn’t being applied to the WireGuard interface addresses. On gl.inet systems where IPv6 is disabled at the kernel level, this caused the connection to fail when trying to assign an IPv6 address via netlink.

1 Like

I also want to add that I already have a ā€œwireguardvpnā€ interface for wireguard VPN. I m not sure if it help to troubleshot…

Ping to the router works on our test setup with allow_lan: true enabled. Since you have AdGuard Home installed which we don’t, that’s the most likely difference.

Can you try temporarily stopping AdGuard Home to rule it out?

If ping works after that, AdGuard is interfering. If it still fails, share the output of:

nft list ruleset | grep -B5 -A5 nym