active connections

[izum71]

Good afternoon, tell me why connections are not displayed in the active connections tab. All with status 0.

[pashcovich]

connection information is updated every ~30 seconds, do you really have any established connections?

[izum71]

I am personally connected.
Line from the log.
ROUTING_TABLE,10.71.81.4,test,176.213.189.77:59588,2022-09-05 16:06:09,1662383169

[izum71]

The metrics also do not show active connections.

HELP ovpn_clients_connected total connected openvpn clients
TYPE ovpn_clients_connected gauge
ovpn_clients_connected 0
HELP ovpn_clients_expired expired openvpn users
TYPE ovpn_clients_expired gauge
ovpn_clients_expired 0
HELP ovpn_clients_revoked revoked openvpn users
TYPE ovpn_clients_revoked gauge
ovpn_clients_revoked 2
HELP ovpn_clients_total total openvpn users
TYPE ovpn_clients_total gauge
ovpn_clients_total 21
HELP ovpn_server_ca_cert_expire openvpn server CA certificate expire time in days
TYPE ovpn_server_ca_cert_expire gauge
ovpn_server_ca_cert_expire 3597
HELP ovpn_server_cert_expire openvpn server certificate expire time in days
TYPE ovpn_server_cert_expire gauge
ovpn_server_cert_expire 3649
HELP ovpn_uniq_clients_connected uniq connected openvpn clients
TYPE ovpn_uniq_clients_connected gauge
ovpn_uniq_clients_connected 0

[pashcovich]

which version of ovpn-admin and openvpn-server do you use, and what does your setup look like?

[izum71]

I start from a binary file, with such parameters.

/usr/sbin/ovpn-admin --easyrsa.path="/etc/openvpn/easyrsa/" --easyrsa.index-path="/etc/openvpn/easyrsa/pki/index.txt" --ccd --ccd.path="/etc/openvpn/ccd" --templates.ccd-path="/etc/openvpn/template/ccd.tpl" --template
s.clientconfig-path="/etc/openvpn/template/client.conf.tpl" --ovpn.network="10.71.80.0/20" --ovpn.server=xx.xx.xx.xx:1616:udp --listen.port="8080" --metrics.path="/metrics"

[pashcovich]

did your openvpn-server management port opened and accessible via 127.0.0.1:8989?

grep -irn management YOUR_OPENVPN_SERVER_CONFIG_DIR

[izum71]

grep -irn management /etc/openvpn/server/server-subnet.conf
12:management 127.0.0.1 8989

[izum71]

LISTEN 0 1 127.0.0.1:8989 0.0.0.0:* users:(("openvpn",pid=425,fd=3))

[izum71]

Package: openvpn
Version: 2.5.1-3
ovpn-admin v.2.0.1

[izum71]

There are entries like this in the log.

MANAGEMENT: Client connected from [AF_INET]127.0.0.1:8989
MANAGEMENT: CMD 'status'
MANAGEMENT: Client disconnected
MANAGEMENT: Client connected from [AF_INET]127.0.0.1:8989
MANAGEMENT: CMD 'status'
MANAGEMENT: Client disconnected
MANAGEMENT: Client connected from [AF_INET]127.0.0.1:8989
MANAGEMENT: CMD 'status'
MANAGEMENT: Client disconnected
MANAGEMENT: Client connected from [AF_INET]127.0.0.1:8989
MANAGEMENT: CMD 'status'
MANAGEMENT: Client disconnected
MANAGEMENT: Client connected from [AF_INET]127.0.0.1:8989
MANAGEMENT: CMD 'status'
MANAGEMENT: Client disconnected
MANAGEMENT: Client connected from [AF_INET]127.0.0.1:8989
MANAGEMENT: CMD 'status'
MANAGEMENT: Client disconnected
MANAGEMENT: Client connected from [AF_INET]127.0.0.1:8989
MANAGEMENT: CMD 'status'
MANAGEMENT: Client disconnected

[izum71]

server-subnet-status.log

[pashcovich]

Okay, I think I understand why this is so.
I think you have status-version 2 or 3 in your openvpn server configuration file, because of this, the output of the status command in the management interface is different from the format that we can analyze
So if you don't need to use this format, you can remove this parameter from configuration file or set it to status-version 1
in any case, I will create an issue to try to use the status command with the simple format option or to recognize and analyze all the formats in the code, but I can't say when I will be able to do this.

[pashcovich]

#144

[izum71]

Thank you, try changing the value to 'status-version 1', I'll check it in the evening.

[izum71]

Good afternoon. Thanks everything worked.