id summary reporter owner description type status priority milestone component version severity resolution keywords cc 984 iOS: connection stalled on TCP croma25td Antonio Quartulli "I could reproduce this problem on both 1.2.5 and 1.2.6 by simply connecting to my VPN and executing a speedtest. After few seconds the connections stops working and even if the ""VPN"" icon on top bar is present the connection is not working anymore until I close and open again. On 1.1.1 iOS no problems, no problems also on latest Windows and Android clients. I also experience connections restarts (""VPN"" icon going away) when phone goes to sleep or I quit the app by swiping it up. But I can provide logs for that too if necessary. Here my server.conf {{{ port 443 port-share 127.0.0.1 444 proto tcp dev tun sndbuf 0 rcvbuf 0 ca ca.crt cert server.crt key server.key dh dh.pem auth SHA512 tls-auth ta.key 0 topology subnet server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt push ""redirect-gateway def1 bypass-dhcp"" push ""dhcp-option DNS 8.8.8.8"" push ""dhcp-option DNS 8.8.4.4"" keepalive 10 120 cipher AES-256-CBC comp-lzo user nobody group nogroup persist-key persist-tun status openvpn-status.log verb 4 crl-verify crl.pem duplicate-cn tcp-nodelay log-append /var/log/openvpn.log }}} And here the log with verbosity = 4 which shows an error {{{ Wed Jan 17 09:12:14 2018 us=691727 CLIENT_IP:60219 TLS: Initial packet from [AF_INET]CLIENT_IP:60219, sid=9bb30151 3b405fa6 Wed Jan 17 09:12:14 2018 us=839044 CLIENT_IP:60219 VERIFY OK: depth=1, CN=ChangeMe Wed Jan 17 09:12:14 2018 us=839157 CLIENT_IP:60219 VERIFY OK: depth=0, CN=client Wed Jan 17 09:12:14 2018 us=878513 CLIENT_IP:60219 peer info: IV_GUI_VER=net.openvpn.connect.ios_1.2.6-4 Wed Jan 17 09:12:14 2018 us=878553 CLIENT_IP:60219 peer info: IV_VER=3.1.2 Wed Jan 17 09:12:14 2018 us=878559 CLIENT_IP:60219 peer info: IV_PLAT=ios Wed Jan 17 09:12:14 2018 us=878564 CLIENT_IP:60219 peer info: IV_NCP=2 Wed Jan 17 09:12:14 2018 us=878569 CLIENT_IP:60219 peer info: IV_TCPNL=1 Wed Jan 17 09:12:14 2018 us=878574 CLIENT_IP:60219 peer info: IV_PROTO=2 Wed Jan 17 09:12:14 2018 us=878579 CLIENT_IP:60219 peer info: IV_LZO=1 Wed Jan 17 09:12:14 2018 us=878583 CLIENT_IP:60219 peer info: IV_AUTO_SESS=1 Wed Jan 17 09:12:14 2018 us=917487 CLIENT_IP:60219 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA Wed Jan 17 09:12:14 2018 us=917533 CLIENT_IP:60219 [client] Peer Connection Initiated with [AF_INET]CLIENT_IP:60219 Wed Jan 17 09:12:14 2018 us=917558 client/CLIENT_IP:60219 MULTI_sva: pool returned IPv4=10.8.0.2, IPv6=(Not enabled) Wed Jan 17 09:12:14 2018 us=917581 client/CLIENT_IP:60219 MULTI: Learn: 10.8.0.2 -> client/CLIENT_IP:60219 Wed Jan 17 09:12:14 2018 us=917587 client/CLIENT_IP:60219 MULTI: primary virtual IP for client/CLIENT_IP:60219: 10.8.0.2 Wed Jan 17 09:12:14 2018 us=918506 client/CLIENT_IP:60219 PUSH: Received control message: 'PUSH_REQUEST' Wed Jan 17 09:12:14 2018 us=918550 client/CLIENT_IP:60219 SENT CONTROL [client]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,socket-flags TCP_NODELAY,ifconfig 10.8.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1) Wed Jan 17 09:12:14 2018 us=918558 client/CLIENT_IP:60219 Data Channel: using negotiated cipher 'AES-256-GCM' Wed Jan 17 09:12:14 2018 us=918566 client/CLIENT_IP:60219 Data Channel MTU parms [ L:1552 D:1450 EF:52 EB:406 ET:0 EL:3 ] Wed Jan 17 09:12:14 2018 us=918616 client/CLIENT_IP:60219 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key Wed Jan 17 09:12:14 2018 us=918623 client/CLIENT_IP:60219 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key Wed Jan 17 09:12:26 2018 us=695994 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=696014 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=696021 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=696028 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=696034 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=696040 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=942950 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=942979 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=942997 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=943005 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=943011 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=943017 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=943024 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=943030 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=943047 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=943055 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=943061 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=943067 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=943073 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=943079 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=943086 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=943103 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=943110 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=943116 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=943122 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=943128 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=943134 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=943146 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=943256 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=943305 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=957098 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=957171 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=957181 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=958189 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=958228 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=958625 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=958660 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=958682 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:26 2018 us=958689 client/CLIENT_IP:60219 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) Wed Jan 17 09:12:29 2018 us=437614 client/CLIENT_IP:60219 AEAD Decrypt error: bad packet ID (may be a replay): [ #1596 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings Wed Jan 17 09:12:29 2018 us=437658 client/CLIENT_IP:60219 Fatal decryption error (process_incoming_link), restarting Wed Jan 17 09:12:29 2018 us=437665 client/CLIENT_IP:60219 SIGUSR1[soft,decryption-error] received, client-instance restarting Wed Jan 17 09:12:29 2018 us=437721 TCP/UDP: Closing socket }}} Server version {{{ root@server1:/var/log# openvpn --version OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 26 2017 library versions: OpenSSL 1.0.1t 3 May 2016, LZO 2.06 Originally developed by James Yonan Copyright (C) 2002-2017 OpenVPN Technologies, Inc. Compile time defines: enable_async_push=no enable_comp_stub=no enable_crypto=yes enable_crypto_ofb_cfb=yes enable_debug=no enable_def_auth=yes enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_fast_install=yes enable_fragment=yes enable_iproute2=no enable_libtool_lock=yes enable_lz4=yes enable_lzo=yes enable_management=yes enable_multihome=yes enable_pam_dlopen=no enable_password_save=yes enable_pedantic=no enable_pf=yes enable_pkcs11=yes enable_plugin_auth_pam=yes enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_selinux=no enable_server=yes enable_shared=yes enable_shared_with_static_runtimes=no enable_small=no enable_static=yes enable_strict=no enable_strict_options=no enable_systemd=no enable_werror=no enable_win32_dll=yes enable_x509_alt_username=no with_crypto_library=openssl with_gnu_ld=yes with_mem_check=no with_sysroot=no root@server1:/var/log# uname -r 3.16.0-0.bpo.4-amd64 }}}" Bug / Defect closed major OpenVPN Connect OpenVPN Connect for iOS v1.2.6 Not set (select this one, unless your'e a OpenVPN developer) fixed