wfg/docker-openvpn-client

OpenVPN container cannot connect to the internet

marc-wittwer opened this issue · 1 comments

@wfg Thanks for this repo.

I just checked out the master branch and tried to build and run an OpenVPN and a proxy container with docker compose.

However the OpenVPN cannot connect to the internet after startup.
I tried to run curl ifconfig.me to check the current IP address, but I couldn't connect to the internet at all.
What am I doing wrong?

// inside the openVPN docker container
c4218d8175a7:/# curl
bash: curl: command not found
c4218d8175a7:/# apk add curl
fetch https://dl-cdn.alpinelinux.org/alpine/v3.17/main/aarch64/APKINDEX.tar.gz
ERROR: https://dl-cdn.alpinelinux.org/alpine/v3.17/main: temporary error (try again later)
WARNING: Ignoring https://dl-cdn.alpinelinux.org/alpine/v3.17/main: No such file or directory
fetch https://dl-cdn.alpinelinux.org/alpine/v3.17/community/aarch64/APKINDEX.tar.gz
^Cc4218d8175a7:/# ping google.com
ping: bad address 'google.com'

Here is the repo to reproduce my issue: https://github.com/marc-wittwer/openvpn-proxy
The host machine is a macbook pro M2.

This is my docker compose file:

services:
  openvpn-client:
    build: 
      context: build
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    ports:
      - 3128:3128
    privileged: true
    environment:
      - CONFIG_FILE=nl-free-116.protonvpn.net.tcp.ovpn
      - ALLOWED_SUBNETS=0.0.0.0/0
      - KILL_SWITCH=off
      - AUTH_SECRET=protonvpn_userpass
    volumes:
      - ./config_real:/config:ro
    secrets:
      - protonvpn_userpass
  
  proxy: 
    image: ubuntu/squid
    network_mode: service:openvpn-client
    volumes:
      - ./squid.conf:/etc/squid/squid.conf:ro

secrets:
  protonvpn_userpass:
    file: ./config/credentials.txt

This is the output of docker compose upcommand:

➜  openvpn-client-test docker compose up
[+] Running 2/2
 ✔ Container openvpn-client-test-openvpn-client-1  Recreated                                                                      0.1s 
 ✔ Container openvpn-client-test-proxy-1           Recreated                                                                      0.1s 
Attaching to openvpn-client-test-openvpn-client-1, openvpn-client-test-proxy-1
openvpn-client-test-openvpn-client-1  | using openvpn configuration file: /config/nl-free-116.protonvpn.net.tcp.ovpn
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:05 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:05 WARNING: file '/run/secrets/protonvpn_userpass' is group or others accessible
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:05 OpenVPN 2.5.8 aarch64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov  2 2022
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:05 library versions: OpenSSL 3.0.8 7 Feb 2023, LZO 2.10
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:05 NOTE: --fast-io is disabled since we are not using UDP
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:05 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:05 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:05 TCP/UDP: Preserving recently used remote address: [AF_INET]149.34.244.149:7770
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:05 Socket Buffers: R=[131072->131072] S=[16384->16384]
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:05 Attempting to establish TCP connection with [AF_INET]149.34.244.149:7770 [nonblock]
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:05 TCP connection established with [AF_INET]149.34.244.149:7770
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:05 TCP_CLIENT link local: (not bound)
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:05 TCP_CLIENT link remote: [AF_INET]149.34.244.149:7770
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:05 TLS: Initial packet from [AF_INET]149.34.244.149:7770, sid=f270274e 2a01f7f1
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:05 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:06 VERIFY OK: depth=2, C=CH, O=ProtonVPN AG, CN=ProtonVPN Root CA
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:06 VERIFY OK: depth=1, C=CH, O=ProtonVPN AG, CN=ProtonVPN Intermediate CA 1
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:06 VERIFY KU OK
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:06 Validating certificate extended key usage
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:06 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:06 VERIFY EKU OK
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:06 VERIFY OK: depth=0, CN=node-nl-152.protonvpn.net
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:06 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1635', remote='link-mtu 1636'
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:06 WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:06 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 4096 bit RSA, signature: RSA-SHA256
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:06 [node-nl-152.protonvpn.net] Peer Connection Initiated with [AF_INET]149.34.244.149:7770
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| WARNING: BCP 177 violation. Detected non-functional IPv6 loopback.
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| ERROR: cannot change current directory to /var/cache/squid: (2) No such file or directory
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Current Directory is /
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Creating missing swap directories
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| No cache_dir stores are configured.
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Removing PID file (/run/squid.pid)
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| WARNING: BCP 177 violation. Detected non-functional IPv6 loopback.
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 SENT CONTROL [node-nl-152.protonvpn.net]: 'PUSH_REQUEST' (status=1)
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 10.83.0.1,redirect-gateway def1,explicit-exit-notify,comp-lzo no,route-gateway 10.83.0.1,topology subnet,ping 10,ping-restart 60,socket-flags TCP_NODELAY,ifconfig 10.83.0.2 255.255.0.0,peer-id 0,cipher AES-256-GCM'
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 OPTIONS IMPORT: timers and/or timeouts modified
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 OPTIONS IMPORT: --explicit-exit-notify can only be used with --proto udp
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 OPTIONS IMPORT: compression parms modified
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 OPTIONS IMPORT: --socket-flags option modified
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 Socket flags: TCP_NODELAY=1 succeeded
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 OPTIONS IMPORT: --ifconfig/up options modified
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 OPTIONS IMPORT: route options modified
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 OPTIONS IMPORT: route-related options modified
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 OPTIONS IMPORT: peer-id set
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 OPTIONS IMPORT: adjusting link_mtu to 1658
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 OPTIONS IMPORT: data channel crypto options modified
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 Data Channel: using negotiated cipher 'AES-256-GCM'
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 ROUTE_GATEWAY 192.168.144.1/255.255.240.0 IFACE=eth0 HWADDR=02:42:c0:a8:90:02
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 TUN/TAP device tun0 opened
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 /sbin/ip link set dev tun0 up mtu 1500
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 /sbin/ip link set dev tun0 up
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 /sbin/ip addr add dev tun0 10.83.0.2/16
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 /sbin/ip route add 149.34.244.149/32 via 192.168.144.1
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 /sbin/ip route add 0.0.0.0/1 via 10.83.0.1
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 /sbin/ip route add 128.0.0.0/1 via 10.83.0.1
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:32:07 Initialization Sequence Completed
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| ERROR: cannot change current directory to /var/cache/squid: (2) No such file or directory
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Current Directory is /
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Creating missing swap directories
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| No cache_dir stores are configured.
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Removing PID file (/run/squid.pid)
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| ERROR: cannot change current directory to /var/cache/squid: (2) No such file or directory
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Current Directory is /
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Starting Squid Cache version 5.7 for aarch64-unknown-linux-gnu...
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Service Name: squid
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Process ID 40
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Process Roles: master worker
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| With 1048576 file descriptors available
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Initializing IP Cache...
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| DNS Socket created at 0.0.0.0, FD 8
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Adding nameserver 127.0.0.11 from /etc/resolv.conf
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Adding ndots 1 from /etc/resolv.conf
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Logfile: opening log daemon:/var/log/squid/access.log
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Logfile Daemon: opening log /var/log/squid/access.log
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Store logging disabled
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Swap maxSize 0 + 262144 KB, estimated 20164 objects
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Target number of buckets: 1008
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Using 8192 Store buckets
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Max Mem  size: 262144 KB
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Max Swap size: 0 KB
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Using Least Load store dir selection
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| ERROR: cannot change current directory to /var/cache/squid: (2) No such file or directory
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Current Directory is /
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Finished loading MIME types and icons.
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| HTCP Disabled.
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Pinger socket opened on FD 13
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Squid plugin modules loaded: 0
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Adaptation support is off.
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| Accepting HTTP Socket connections at conn2 local=0.0.0.0:3128 remote=[::] FD 11 flags=9
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| WARNING: BCP 177 violation. Detected non-functional IPv6 loopback.
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| pinger: Initialising ICMP pinger ...
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| pinger: ICMP socket opened.
openvpn-client-test-proxy-1           | 2023/05/03 13:32:06| pinger: ICMPv6 socket opened
openvpn-client-test-proxy-1           | 2023/05/03 13:32:07| storeLateRelease: released 0 objects
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:47 [node-nl-152.protonvpn.net] Inactivity timeout (--ping-restart), restarting
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:47 SIGUSR1[soft,ping-restart] received, process restarting
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:47 Restart pause, 5 second(s)
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:52 NOTE: --fast-io is disabled since we are not using UDP
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:52 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:52 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:52 TCP/UDP: Preserving recently used remote address: [AF_INET]149.34.244.149:7770
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:52 Socket Buffers: R=[131072->131072] S=[16384->16384]
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:52 Attempting to establish TCP connection with [AF_INET]149.34.244.149:7770 [nonblock]
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:52 TCP connection established with [AF_INET]149.34.244.149:7770
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:52 Socket flags: TCP_NODELAY=1 succeeded
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:52 TCP_CLIENT link local: (not bound)
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:52 TCP_CLIENT link remote: [AF_INET]149.34.244.149:7770
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:52 TLS: Initial packet from [AF_INET]149.34.244.149:7770, sid=6e4d1d15 e0e57f3b
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:52 VERIFY OK: depth=2, C=CH, O=ProtonVPN AG, CN=ProtonVPN Root CA
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:52 VERIFY OK: depth=1, C=CH, O=ProtonVPN AG, CN=ProtonVPN Intermediate CA 1
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:52 VERIFY KU OK
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:52 Validating certificate extended key usage
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:52 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:52 VERIFY EKU OK
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:52 VERIFY OK: depth=0, CN=node-nl-152.protonvpn.net
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:52 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 4096 bit RSA, signature: RSA-SHA256
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:52 [node-nl-152.protonvpn.net] Peer Connection Initiated with [AF_INET]149.34.244.149:7770
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 SENT CONTROL [node-nl-152.protonvpn.net]: 'PUSH_REQUEST' (status=1)
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 10.80.0.1,redirect-gateway def1,explicit-exit-notify,comp-lzo no,route-gateway 10.80.0.1,topology subnet,ping 10,ping-restart 60,socket-flags TCP_NODELAY,ifconfig 10.80.0.12 255.255.0.0,peer-id 0,cipher AES-256-GCM'
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 OPTIONS IMPORT: timers and/or timeouts modified
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 OPTIONS IMPORT: --explicit-exit-notify can only be used with --proto udp
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 OPTIONS IMPORT: compression parms modified
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 OPTIONS IMPORT: --socket-flags option modified
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 Socket flags: TCP_NODELAY=1 succeeded
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 OPTIONS IMPORT: --ifconfig/up options modified
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 OPTIONS IMPORT: route options modified
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 OPTIONS IMPORT: route-related options modified
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 OPTIONS IMPORT: peer-id set
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 OPTIONS IMPORT: adjusting link_mtu to 1659
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 OPTIONS IMPORT: data channel crypto options modified
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 Data Channel: using negotiated cipher 'AES-256-GCM'
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 Preserving previous TUN/TAP instance: tun0
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 NOTE: Pulled options changed on restart, will need to close and reopen TUN/TAP device.
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 /sbin/ip route del 149.34.244.149/32
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 /sbin/ip route del 0.0.0.0/1
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 /sbin/ip route del 128.0.0.0/1
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 Closing TUN/TAP interface
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:53 /sbin/ip addr del dev tun0 10.83.0.2/16
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:54 ROUTE_GATEWAY 192.168.144.1/255.255.240.0 IFACE=eth0 HWADDR=02:42:c0:a8:90:02
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:54 TUN/TAP device tun0 opened
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:54 /sbin/ip link set dev tun0 up mtu 1500
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:54 /sbin/ip link set dev tun0 up
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:54 /sbin/ip addr add dev tun0 10.80.0.12/16
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:54 /sbin/ip route add 149.34.244.149/32 via 192.168.144.1
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:54 /sbin/ip route add 0.0.0.0/1 via 10.80.0.1
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:54 /sbin/ip route add 128.0.0.0/1 via 10.80.0.1
openvpn-client-test-openvpn-client-1  | 2023-05-03 13:33:54 Initialization Sequence Completed

Thanks in advance for any hints.
Best Marc