Post

Replies

Boosts

Views

Activity

Reply to VPN network extension not working after 15.1.1 upgrade
@DTS Engineer Completely agree and why I was doing a very intensive code inspection, prior to finding the assert, to make sure things under our control were being alloc'd correctly and that there were no memory stomps. Unfortunately when you have Customers yelling at you, you have to take the win and hope you don't have a ticking time bomb and then move forward with this in the back of your mind. It's the way of the SW world. :-)
Dec ’24
Reply to VPN network extension not working after 15.1.1 upgrade
@DTS Engineer Thank you for all your help on this. I am going to close this as answered. In debugging I found that a thread in the extension was actually throwing a BAD_INSTRUCTION error in the OpenSSL lib we were using. After upgrading to a new version of OpenSSL that fixed the BAD_INSTRUCTION everything now works. Of course the mystery is why does the same client work just fine on 14.x but 15.x it did not? No matter it seems to be working now and that is all that matters. :-) Again thank you.
Dec ’24
Reply to VPN network extension not working after 15.1.1 upgrade
@DTS Engineer So there is nothing else? The fact that our software worked just fine on 15.0 when it first came out and the ONLY thing that changed is upgrading to 15.1.1 points specifically to an issue on the macOS side. I have tested this on various machines, even a brand new out of the box Macbook Air, and get the same results. The fact that no packets are even making it to the TUN interface (via wireshark) points to something in the OS and not our client, correct? Especially when it worked on 15.0. I want to submit a Code Level support ticket but extracting out the code into a focused Xcode project is going to be time consuming.
Dec ’24
Reply to VPN network extension not working after 15.1.1 upgrade
And when connected to the VPN I see the routes setup correctly as well as the DNS settings. But when I try to resolve a host name via dig or nslookup I see no traffic being sent to the utun interface. I have also disabled the firewall and I have no other filters installed. ❯ netstat -nr -f inet Routing tables Internet: Destination Gateway Flags Netif Expire default link#24 UCSg utun9 default 192.168.0.1 UGScIg en0 20.253.190.7 192.168.0.1 UGHS en0 100.127.255.254 link#24 UHWIig utun9 104.18.34.132 192.168.0.1 UGHS en0 127 127.0.0.1 UCS lo0 127.0.0.1 127.0.0.1 UH lo0 169.254 link#11 UCS en0 ! 172.64.153.124 192.168.0.1 UGHS en0 172.86.175.254 172.86.175.254 UH utun9 192.168.0 link#11 UCS en0 ! 192.168.0.1/32 link#11 UCS en0 ! 192.168.0.1 2e:30:44:55:b6:eb UHLWIir en0 1188 192.168.0.232/32 link#11 UCS en0 ! 192.168.0.232 8e:7c:9d:b1:c4:8b UHLWI lo0 192.168.0.255 ff:ff:ff:ff:ff:ff UHLWbI en0 ! 224.0.0/4 link#24 UmCS utun9 224.0.0/4 link#11 UmCSI en0 ! 224.0.0.251 1:0:5e:0:0:fb UHmLWI en0 224.0.0.251 link#24 UHmW3I utun9 3575 255.255.255.255/32 link#24 UCS utun9 255.255.255.255/32 link#11 UCSI en0 ! ❯ cat /etc/resolv.conf # # macOS Notice # # This file is not consulted for DNS hostname resolution, address # resolution, or the DNS query routing mechanism used by most # processes on this system. # # To view the DNS configuration used by this system, use: # scutil --dns # # SEE ALSO # dns-sd(1), scutil(8) # # This file is automatically generated. # nameserver 100.127.255.254 ❯ scutil --dns DNS configuration resolver #1 nameserver[0] : 100.127.255.254 if_index : 24 (utun9) flags : Supplemental, Request A records reach : 0x00000003 (Reachable,Transient Connection) order : 104200 resolver #2 nameserver[0] : 100.127.255.254 if_index : 24 (utun9) flags : Request A records reach : 0x00000003 (Reachable,Transient Connection) order : 200000
Dec ’24
Reply to VPN network extension not working after 15.1.1 upgrade
@DTS Engineer For reference here is the NEPacketTunnelNetworkSettings Tue Dec 03 19:27:38.721 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- { Tue Dec 03 19:27:38.721 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- tunnelRemoteAddress = 172.86.175.254 Tue Dec 03 19:27:38.721 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- DNSSettings = { Tue Dec 03 19:27:38.721 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- protocol = cleartext Tue Dec 03 19:27:38.721 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- server = ( Tue Dec 03 19:27:38.721 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- 100.127.255.254, Tue Dec 03 19:27:38.721 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- ) Tue Dec 03 19:27:38.721 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- matchDomains = ( Tue Dec 03 19:27:38.721 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- , Tue Dec 03 19:27:38.721 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- ) Tue Dec 03 19:27:38.721 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- matchDomainsNoSearch = NO Tue Dec 03 19:27:38.721 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- } Tue Dec 03 19:27:38.721 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- IPv4Settings = { Tue Dec 03 19:27:38.721 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- configMethod = manual Tue Dec 03 19:27:38.721 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- addresses = ( Tue Dec 03 19:27:38.722 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- 172.86.175.254, Tue Dec 03 19:27:38.722 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- ) Tue Dec 03 19:27:38.722 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- subnetMasks = ( Tue Dec 03 19:27:38.722 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- 255.255.255.254, Tue Dec 03 19:27:38.722 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- ) Tue Dec 03 19:27:38.722 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- includedRoutes = ( Tue Dec 03 19:27:38.722 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- { Tue Dec 03 19:27:38.722 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- destinationAddress = 0.0.0.0 Tue Dec 03 19:27:38.722 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- destinationSubnetMask = 0.0.0.0 Tue Dec 03 19:27:38.722 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- }, Tue Dec 03 19:27:38.734 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- ) Tue Dec 03 19:27:38.734 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- excludedRoutes = ( Tue Dec 03 19:27:38.734 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- { Tue Dec 03 19:27:38.735 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- destinationAddress = 20.253.190.7 Tue Dec 03 19:27:38.735 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- destinationSubnetMask = 255.255.255.255 Tue Dec 03 19:27:38.735 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- }, Tue Dec 03 19:27:38.735 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- { Tue Dec 03 19:27:38.735 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- destinationAddress = 172.64.153.124 Tue Dec 03 19:27:38.735 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- destinationSubnetMask = 255.255.255.255 Tue Dec 03 19:27:38.735 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- }, Tue Dec 03 19:27:38.735 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- { Tue Dec 03 19:27:38.735 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- destinationAddress = 104.18.34.132 Tue Dec 03 19:27:38.735 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- destinationSubnetMask = 255.255.255.255 Tue Dec 03 19:27:38.735 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- }, Tue Dec 03 19:27:38.735 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- ) Tue Dec 03 19:27:38.735 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- overridePrimary = NO Tue Dec 03 19:27:38.735 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- } Tue Dec 03 19:27:38.735 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- MTU = 1436 Tue Dec 03 19:27:38.735 2024 UTC [0x0x16debb000] ERROR (TunNetworkInterface:268) --- }
Dec ’24
Reply to VPN network extension not working after 15.1.1 upgrade
Quinn, I was able to test 15.1.1 and our PTP client on a Intel based Mac mini and it worked successfully so either this is an issue with my M1 macbook pro or an issue with M1s in general. I will try and get some more data points. All I know is that traffic on the M1 Macbook Pro, in particular DNS requests, are not making it to the TUN device and because the requests are not getting resolved so no traffic is flowing.
Dec ’24