135 lines
4 KiB
Bash
135 lines
4 KiB
Bash
|
#!/bin/bash
|
||
|
|
|
||
|
|
# VPN Test Script - Quick verification that VPN is working properly
|
||
|
|
# Run this inside the Docker container
|
||
|
|
|
||
|
|
echo "========================================="
|
||
|
|
echo " VPN Connection Test"
|
||
|
|
echo "========================================="
|
||
|
|
echo ""
|
||
|
|
|
||
|
|
# Colors
|
||
|
|
GREEN='\033[0;32m'
|
||
|
|
RED='\033[0;31m'
|
||
|
|
YELLOW='\033[1;33m'
|
||
|
|
NC='\033[0m' # No Color
|
||
|
|
|
||
|
|
# Test 1: Check VPN Interface
|
||
|
|
echo "1. Checking VPN Interface (tun0)..."
|
||
|
|
if ip addr show tun0 &>/dev/null; then
|
||
|
|
echo -e "${GREEN}✓${NC} VPN interface (tun0) is UP"
|
||
|
|
ip addr show tun0 | grep "inet " | awk '{print " IP: " $2}'
|
||
|
|
else
|
||
|
|
echo -e "${RED}✗${NC} VPN interface (tun0) NOT FOUND"
|
||
|
|
echo " VPN is not connected!"
|
||
|
|
fi
|
||
|
|
echo ""
|
||
|
|
|
||
|
|
# Test 2: Check Routing
|
||
|
|
echo "2. Checking Routing Table..."
|
||
|
|
DEFAULT_ROUTE=$(ip route | grep default)
|
||
|
|
echo " $DEFAULT_ROUTE"
|
||
|
|
if echo "$DEFAULT_ROUTE" | grep -q "tun"; then
|
||
|
|
echo -e "${GREEN}✓${NC} Traffic is routed through VPN"
|
||
|
|
else
|
||
|
|
echo -e "${RED}✗${NC} Traffic is NOT routed through VPN"
|
||
|
|
fi
|
||
|
|
echo ""
|
||
|
|
|
||
|
|
# Test 3: Check DNS
|
||
|
|
echo "3. Checking DNS Configuration..."
|
||
|
|
DNS_SERVERS=$(grep "^nameserver" /etc/resolv.conf | awk '{print $2}')
|
||
|
|
echo " DNS Servers: $DNS_SERVERS"
|
||
|
|
if echo "$DNS_SERVERS" | grep -q "10.2.0"; then
|
||
|
|
echo -e "${GREEN}✓${NC} Using VPN DNS servers"
|
||
|
|
elif echo "$DNS_SERVERS" | grep -E "8.8.8.8|1.1.1.1|8.8.4.4|1.0.0.1" &>/dev/null; then
|
||
|
|
echo -e "${RED}✗${NC} DNS LEAK: Using public DNS servers"
|
||
|
|
else
|
||
|
|
echo -e "${YELLOW}⚠${NC} Using unknown DNS servers"
|
||
|
|
fi
|
||
|
|
echo ""
|
||
|
|
|
||
|
|
# Test 4: Check Public IP
|
||
|
|
echo "4. Checking Public IP Address..."
|
||
|
|
PUBLIC_IP=$(curl -s --max-time 10 https://api.ipify.org 2>/dev/null)
|
||
|
|
if [ -z "$PUBLIC_IP" ]; then
|
||
|
|
echo -e "${RED}✗${NC} Could not determine public IP"
|
||
|
|
else
|
||
|
|
echo " Public IP: $PUBLIC_IP"
|
||
|
|
|
||
|
|
# Get IP info
|
||
|
|
IP_INFO=$(curl -s --max-time 10 https://ipinfo.io/$PUBLIC_IP/json 2>/dev/null)
|
||
|
|
if [ ! -z "$IP_INFO" ]; then
|
||
|
|
COUNTRY=$(echo "$IP_INFO" | grep -o '"country": "[^"]*' | cut -d'"' -f4)
|
||
|
|
CITY=$(echo "$IP_INFO" | grep -o '"city": "[^"]*' | cut -d'"' -f4)
|
||
|
|
ORG=$(echo "$IP_INFO" | grep -o '"org": "[^"]*' | cut -d'"' -f4)
|
||
|
|
|
||
|
|
echo " Location: $CITY, $COUNTRY"
|
||
|
|
echo " ISP: $ORG"
|
||
|
|
|
||
|
|
if echo "$ORG" | grep -iq "proton\|vpn"; then
|
||
|
|
echo -e "${GREEN}✓${NC} IP appears to be from VPN provider"
|
||
|
|
else
|
||
|
|
echo -e "${YELLOW}⚠${NC} IP may not be from VPN provider"
|
||
|
|
fi
|
||
|
|
fi
|
||
|
|
fi
|
||
|
|
echo ""
|
||
|
|
|
||
|
|
# Test 5: Check OpenVPN Process
|
||
|
|
echo "5. Checking OpenVPN Process..."
|
||
|
|
if pgrep -f "openvpn.*config" &>/dev/null; then
|
||
|
|
echo -e "${GREEN}✓${NC} OpenVPN process is running"
|
||
|
|
ps aux | grep "[o]penvpn.*config" | awk '{print " PID: " $2}'
|
||
|
|
else
|
||
|
|
echo -e "${RED}✗${NC} OpenVPN process NOT found"
|
||
|
|
fi
|
||
|
|
echo ""
|
||
|
|
|
||
|
|
# Test 6: Check iptables rules
|
||
|
|
echo "6. Checking Firewall Rules..."
|
||
|
|
VPN_RULES=$(iptables -L OUTPUT -n | grep -c "tun")
|
||
|
|
if [ "$VPN_RULES" -gt 0 ]; then
|
||
|
|
echo -e "${GREEN}✓${NC} VPN firewall rules are active ($VPN_RULES rules)"
|
||
|
|
else
|
||
|
|
echo -e "${YELLOW}⚠${NC} No VPN-specific firewall rules found"
|
||
|
|
fi
|
||
|
|
echo ""
|
||
|
|
|
||
|
|
# Summary
|
||
|
|
echo "========================================="
|
||
|
|
echo " Summary"
|
||
|
|
echo "========================================="
|
||
|
|
|
||
|
|
ISSUES=0
|
||
|
|
|
||
|
|
if ! ip addr show tun0 &>/dev/null; then
|
||
|
|
echo -e "${RED}✗${NC} VPN interface not found"
|
||
|
|
ISSUES=$((ISSUES + 1))
|
||
|
|
fi
|
||
|
|
|
||
|
|
if ! ip route | grep default | grep -q "tun"; then
|
||
|
|
echo -e "${RED}✗${NC} Traffic not routed through VPN"
|
||
|
|
ISSUES=$((ISSUES + 1))
|
||
|
|
fi
|
||
|
|
|
||
|
|
if ! grep "^nameserver" /etc/resolv.conf | grep -q "10.2.0"; then
|
||
|
|
echo -e "${RED}✗${NC} Not using VPN DNS"
|
||
|
|
ISSUES=$((ISSUES + 1))
|
||
|
|
fi
|
||
|
|
|
||
|
|
if [ $ISSUES -eq 0 ]; then
|
||
|
|
echo -e "${GREEN}✓ VPN appears to be working correctly!${NC}"
|
||
|
|
else
|
||
|
|
echo -e "${RED}✗ Found $ISSUES issue(s) with VPN connection${NC}"
|
||
|
|
echo ""
|
||
|
|
echo "Troubleshooting steps:"
|
||
|
|
echo "1. Check if VPN is connected in the web UI"
|
||
|
|
echo "2. Try disconnecting and reconnecting"
|
||
|
|
echo "3. Check backend logs: docker logs streamflow"
|
||
|
|
echo "4. Try a different VPN server/country"
|
||
|
|
echo "5. See docs/VPN_TROUBLESHOOTING.md for detailed help"
|
||
|
|
fi
|
||
|
|
|
||
|
|
echo ""
|