[ERROR] [libsdwan] __configure_sdwan_dns: failed to add

ironrobin · February 15, 2023, 6:58am

After updating to a newer kernel, Twingate no longer works, and breaks name resolution.

Stopping twingate returns things to normal.

version: twingate 1.0.77+70315 | 0.140.0
kernel: 6.2.0-rc7-next
arch: arm64 linux

I will paste the journal output:

Feb 15 00:51:49 naga systemd[1]: Started Twingate Remote Access Client.
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.600666-0600] [INFO] [client] Starting Twingate Client 1.0.77+70315
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.600846-0600] [INFO] [client] Arch Linux ARM
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.600971-0600] [INFO] [client] Configured Desktop client
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.636085-0600] [WARNING] [client] Failed to open /etc/twingate/user_intention_file: No such file or directory
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.636217-0600] [INFO] [client] os_last_update_date: current package manager: pacman(3)
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.638800-0600] [INFO] [client] current firewall: 'iptables(3)', enabled - 1
Feb 15 00:51:49 naga twingated[13851]: Device nvme0n1p6 not found
Feb 15 00:51:49 naga twingated[13851]: Device nvme0n1p6 not found
Feb 15 00:51:49 naga twingated[13851]: Device nvme0n1p6 not found
Feb 15 00:51:49 naga twingated[13851]: Device nvme0n1p6 not found
Feb 15 00:51:49 naga twingated[13851]: Device nvme0n1p6 not found
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.649977-0600] [INFO] [client] disks_info dev_path '/dev/nvme0n1p6', mnt: '/', is_encrypted: 0
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.649989-0600] [INFO] [client] disks_info dev_path '/dev/nvme0n1p6', mnt: '/etc/twingate', is_encrypted: 0
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.649996-0600] [INFO] [client] disks_info dev_path '/dev/nvme0n1p6', mnt: '/usr', is_encrypted: 0
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.650002-0600] [INFO] [client] disks_info dev_path '/dev/nvme0n1p6', mnt: '/var/lib/twingate', is_encrypted: 0
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.650006-0600] [INFO] [client] disks_info dev_path '/dev/nvme0n1p6', mnt: '/var/tmp', is_encrypted: 0
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.650011-0600] [INFO] [client] at least partition '/dev/nvme0n1p6' isn't encrypted
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.650020-0600] [INFO] [client] date of last os update: '2023-02-13 23:56:01(1676354161)'
Feb 15 00:51:49 naga twingated[13851]: is firewall enabled: iptables(1)
Feb 15 00:51:49 naga twingated[13851]: is hard drive encrypted: 0
Feb 15 00:51:49 naga twingated[13851]: is screen lock enabled: 0
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.650038-0600] [INFO] [client] Device info: '{"friendly_name":"Naga","device_os":"linux","device_os_version":"","computer_hostname":"naga","local_username":"root","device_type":"laptop","serial_number":"PW025KD7","device_manufacturer":"LENOVO","device_model":"21BX0015US","meta":{"chassis_type":"Notebook","system_family":"ThinkPad X13s Gen 1"}}'
Feb 15 00:51:49 naga twingated[13851]: array [
Feb 15 00:51:49 naga twingated[13851]:    dict_entry {
Feb 15 00:51:49 naga twingated[13851]:       connection
Feb 15 00:51:49 naga twingated[13851]:       array [
Feb 15 00:51:49 naga twingated[13851]:          dict_entry {
Feb 15 00:51:49 naga twingated[13851]:             id
Feb 15 00:51:49 naga twingated[13851]:             variant {
Feb 15 00:51:49 naga twingated[13851]:                sdwan0
Feb 15 00:51:49 naga twingated[13851]:             }
Feb 15 00:51:49 naga twingated[13851]:          }
Feb 15 00:51:49 naga twingated[13851]:          dict_entry {
Feb 15 00:51:49 naga twingated[13851]:             interface-name
Feb 15 00:51:49 naga twingated[13851]:             variant {
Feb 15 00:51:49 naga twingated[13851]:                sdwan0
Feb 15 00:51:49 naga twingated[13851]:             }
Feb 15 00:51:49 naga twingated[13851]:          }
Feb 15 00:51:49 naga twingated[13851]:          dict_entry {
Feb 15 00:51:49 naga twingated[13851]:             autoconnect
Feb 15 00:51:49 naga twingated[13851]:             variant {
Feb 15 00:51:49 naga twingated[13851]:                0
Feb 15 00:51:49 naga twingated[13851]:             }
Feb 15 00:51:49 naga twingated[13851]:          }
Feb 15 00:51:49 naga twingated[13851]:          dict_entry {
Feb 15 00:51:49 naga twingated[13851]:             autoconnect-priority
Feb 15 00:51:49 naga twingated[13851]:             variant {
Feb 15 00:51:49 naga twingated[13851]:                999
Feb 15 00:51:49 naga twingated[13851]:             }
Feb 15 00:51:49 naga twingated[13851]:          }
Feb 15 00:51:49 naga twingated[13851]:          dict_entry {
Feb 15 00:51:49 naga twingated[13851]:             type
Feb 15 00:51:49 naga twingated[13851]:             variant {
Feb 15 00:51:49 naga twingated[13851]:                tun
Feb 15 00:51:49 naga twingated[13851]:             }
Feb 15 00:51:49 naga twingated[13851]:          }
Feb 15 00:51:49 naga twingated[13851]:       ]
Feb 15 00:51:49 naga twingated[13851]:    }
Feb 15 00:51:49 naga twingated[13851]:    dict_entry {
Feb 15 00:51:49 naga twingated[13851]:       ipv4
Feb 15 00:51:49 naga twingated[13851]:       array [
Feb 15 00:51:49 naga twingated[13851]:          dict_entry {
Feb 15 00:51:49 naga twingated[13851]:             address-data
Feb 15 00:51:49 naga twingated[13851]:             variant {
Feb 15 00:51:49 naga twingated[13851]:                array [
Feb 15 00:51:49 naga twingated[13851]:                   array [
Feb 15 00:51:49 naga twingated[13851]:                      dict_entry {
Feb 15 00:51:49 naga twingated[13851]:                         address
Feb 15 00:51:49 naga twingated[13851]:                         variant {
Feb 15 00:51:49 naga twingated[13851]:                            100.96.0.2
Feb 15 00:51:49 naga twingated[13851]:                         }
Feb 15 00:51:49 naga twingated[13851]:                      }
Feb 15 00:51:49 naga twingated[13851]:                      dict_entry {
Feb 15 00:51:49 naga twingated[13851]:                         prefix
Feb 15 00:51:49 naga twingated[13851]:                         variant {
Feb 15 00:51:49 naga twingated[13851]:                            32
Feb 15 00:51:49 naga twingated[13851]:                         }
Feb 15 00:51:49 naga twingated[13851]:                      }
Feb 15 00:51:49 naga twingated[13851]:                      dict_entry {
Feb 15 00:51:49 naga twingated[13851]:                         peer
Feb 15 00:51:49 naga twingated[13851]:                         variant {
Feb 15 00:51:49 naga twingated[13851]:                            100.96.0.3
Feb 15 00:51:49 naga twingated[13851]:                         }
Feb 15 00:51:49 naga twingated[13851]:                      }
Feb 15 00:51:49 naga twingated[13851]:                   ]
Feb 15 00:51:49 naga twingated[13851]:                ]
Feb 15 00:51:49 naga twingated[13851]:             }
Feb 15 00:51:49 naga twingated[13851]:          }
Feb 15 00:51:49 naga twingated[13851]:          dict_entry {
Feb 15 00:51:49 naga twingated[13851]:             dns
Feb 15 00:51:49 naga twingated[13851]:             variant {
Feb 15 00:51:49 naga twingated[13851]:                array [
Feb 15 00:51:49 naga twingated[13851]:                   4211105636
Feb 15 00:51:49 naga twingated[13851]:                   4227882852
Feb 15 00:51:49 naga twingated[13851]:                   4244660068
Feb 15 00:51:49 naga twingated[13851]:                   4261437284
Feb 15 00:51:49 naga twingated[13851]:                ]
Feb 15 00:51:49 naga twingated[13851]:             }
Feb 15 00:51:49 naga twingated[13851]:          }
Feb 15 00:51:49 naga twingated[13851]:          dict_entry {
Feb 15 00:51:49 naga twingated[13851]:             dns-search
Feb 15 00:51:49 naga twingated[13851]:             variant {
Feb 15 00:51:49 naga twingated[13851]:                array [
Feb 15 00:51:49 naga twingated[13851]:                   ~.
Feb 15 00:51:49 naga twingated[13851]:                ]
Feb 15 00:51:49 naga twingated[13851]:             }
Feb 15 00:51:49 naga twingated[13851]:          }
Feb 15 00:51:49 naga twingated[13851]:          dict_entry {
Feb 15 00:51:49 naga twingated[13851]:             dns-priority
Feb 15 00:51:49 naga twingated[13851]:             variant {
Feb 15 00:51:49 naga twingated[13851]:                -1
Feb 15 00:51:49 naga twingated[13851]:             }
Feb 15 00:51:49 naga twingated[13851]:          }
Feb 15 00:51:49 naga twingated[13851]:          dict_entry {
Feb 15 00:51:49 naga twingated[13851]:             method
Feb 15 00:51:49 naga twingated[13851]:             variant {
Feb 15 00:51:49 naga twingated[13851]:                manual
Feb 15 00:51:49 naga twingated[13851]:             }
Feb 15 00:51:49 naga twingated[13851]:          }
Feb 15 00:51:49 naga twingated[13851]:       ]
Feb 15 00:51:49 naga twingated[13851]:    }
Feb 15 00:51:49 naga twingated[13851]:    dict_entry {
Feb 15 00:51:49 naga twingated[13851]:       tun
Feb 15 00:51:49 naga twingated[13851]:       array [
Feb 15 00:51:49 naga twingated[13851]:          dict_entry {
Feb 15 00:51:49 naga twingated[13851]:             mode
Feb 15 00:51:49 naga twingated[13851]:             variant {
Feb 15 00:51:49 naga twingated[13851]:                1
Feb 15 00:51:49 naga twingated[13851]:             }
Feb 15 00:51:49 naga twingated[13851]:          }
Feb 15 00:51:49 naga twingated[13851]:          dict_entry {
Feb 15 00:51:49 naga twingated[13851]:             pi
Feb 15 00:51:49 naga twingated[13851]:             variant {
Feb 15 00:51:49 naga twingated[13851]:                0
Feb 15 00:51:49 naga twingated[13851]:             }
Feb 15 00:51:49 naga twingated[13851]:          }
Feb 15 00:51:49 naga twingated[13851]:       ]
Feb 15 00:51:49 naga twingated[13851]:    }
Feb 15 00:51:49 naga twingated[13851]: ]
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.652709-0600] [INFO] [libsdwan] crypto_module_new() using cipher suites:"ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384", curves: "P-256:P-384:P-521"
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.652792-0600] [INFO] [libsdwan] app_version '1.0.77+70315', libsdwan_version '0.140.0'
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.653561-0600] [INFO] [libsdwan] loaded stored pki
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.654849-0600] [INFO] [libsdwan] HYD: evssl_server_ctx_new: success loading cert and pkey files '(null)', '(null)'
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.655027-0600] [INFO] [libsdwan] HYD: evssl_server_ctx_new: success loading cert and pkey files '(null)', '(null)'
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.656317-0600] [INFO] [client] Using DNS servers: 240.174.143.253, 240.174.143.253,
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.656451-0600] [INFO] [libsdwan] __configure_sdwan_dns: added "240.174.143.253"
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.656481-0600] [ERROR] [libsdwan] __configure_sdwan_dns: failed to add "240.174.143.253"
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.656575-0600] [INFO] [libsdwan] sdwan_dns_set: DNS has been configured successfully
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.658928-0600] [INFO] [libsdwan] Core::set_state: switching state from Uninitialized to Offline
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.658955-0600] [INFO] [client] State: Offline
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.659106-0600] [INFO] [libsdwan] Core::set_state: switching state from Offline to Unrecoverable Error
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.659125-0600] [INFO] [client] State: Unrecoverable Error
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.659175-0600] [WARNING] [libsdwan] controller_t::run_state_machine: STATE_UNRECOVERABLE_ERROR has been activated
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.659195-0600] [INFO] [libsdwan] unconfigure()
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.659243-0600] [WARNING] [libsdwan] HYD: Non-TCP|UDP|ICMP (2) traffic having real IP is gonna bypass viper (UPLINK)[2023-02-15T00:51:49.659263-0600] [WARNING] [libsdwan] HYD: ip_packet_is_valid: unknown transport proto(2)
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.702209-0600] [INFO] [libsdwan] Core::set_state: switching state from Unrecoverable Error to Offline
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.702255-0600] [INFO] [client] State: Offline
Feb 15 00:51:49 naga twingated[13851]: [2023-02-15T00:51:49.702850-0600] [INFO] [client] Exiting Twingate Client
Feb 15 00:51:49 naga systemd[1]: twingate.service: Deactivated successfully.

Arthur · February 15, 2023, 3:26pm

Hey there,

Can you please run sudo twingate config log-level debug, and then twingate stop and then twingate start and recollect the logs via journalctl as you did above and paste those? The debug level should give us some better insight as to why the client is failing to finish starting.

Thanks!

ironrobin · February 15, 2023, 4:20pm

Arthur · February 15, 2023, 4:30pm

Thank you!

Can you also provide the output of:

nslookup twingate.,com
and
NetworkManager -V

Thanks!

ironrobin · February 15, 2023, 5:03pm

alex@naga /etc/twingate                                         [11:00:23]
> $ nslookup twingate.,com                                                
Server:		8.8.8.8
Address:	8.8.8.8#53

** server can't find twingate.,com: NXDOMAIN

                                                                           
alex@naga /etc/twingate                                         [11:03:00]
> $ nslookup twingate.com                                                 
Server:		8.8.8.8
Address:	8.8.8.8#53

Non-authoritative answer:
Name:	twingate.com
Address: 104.198.14.52

                                                                           
alex@naga /etc/twingate                                         [11:03:04]
> $ NetworkManager -V                                                     
1.42.0-1

Arthur · February 15, 2023, 5:14pm

Ah - yes, unfortunately we’ve just this morning become aware of an issue between our client and Network Manager 1.42 that will result in this behaviour.

We’re currently exploring the best possible way to handle this issue and working on getting a new version out to work around this. As soon as I have more details I will let you know!

ironrobin · February 15, 2023, 6:27pm

Downgrading to NetworkManager 1.40 fixed my issue

Arthur · February 15, 2023, 6:35pm

That’s awesome. Thank you for letting us know and sorry for the inconvenience.

aurelcanciu · February 27, 2023, 2:38pm

@Arthur are there any updates on this issue, any progress made on a potential fix? It’s pretty inconvenient having to downgrade NetworkManager. Thank you!

Arthur · February 27, 2023, 3:16pm

Hi Aurel,

We have a fix in place for our next release which should be coming out soon. I can’t give you an exact date but it is coming!

Thanks,

-arthur

ironrobin · March 13, 2023, 10:55pm

running Twingate 1.0.78+72227 | 0.142.0 and NetworkManager 1.42.4 and things seem to work! thanks

Topic		Replies	Views
Unable to get Twingate client working with networkd Support / Troubleshooting	2	203	November 29, 2023
Unable to join network with Mac. "Unexpected network error. Try again later or contact support" Support / Troubleshooting	1	154	August 17, 2023
Cannot start the linux client Support / Troubleshooting	5	462	May 29, 2023
Twingate Error Invalid Token Support / Troubleshooting	5	423	July 25, 2023
Error: auth.sock socket is not found Support / Troubleshooting	4	412	March 2, 2024

[ERROR] [libsdwan] __configure_sdwan_dns: failed to add

Related Topics