Can connect to Wiregaurd via Android app, but can't do that on my linux machine.

[FeryET]

Is it a bug?

• I know this is an issue with the app, and contacting Mullvad support is not relevant.

I have checked if others have reported this already

• I have checked the issue tracker to see if others have reported similar issues.

Current Behavior

I can't connect via Wireguard on my linux machine. I only can use OpenVPN. But I have no such issue when I'm using my Android phone, and I can connect via Wireguard on my Android phone. I have tried using the same destinations and servers on both of the devices, but my linux machine still fails to connect.

Expected Behavior

Wireguard connecting.

Steps to Reproduce

1. Use Mullvad.
2. Use wireguard via obfuscation (either of the protocols).

Failure Logs

[2024-12-05 19:10:40.475][mullvad_daemon::management_interface][DEBUG] get_account_data
[2024-12-05 19:10:40.980][talpid_wireguard][WARN] Timeout while negotiating ephemeral peer
[2024-12-05 19:10:41.045][talpid_core::tunnel_state_machine::connecting_state][DEBUG] WireGuard tunnel timed out
[2024-12-05 19:10:41.045][talpid_core::tunnel_state_machine::connecting_state][DEBUG] The tunnel disconnected unexpectedly
[2024-12-05 19:10:41.045][talpid_core::tunnel_state_machine::connecting_state][DEBUG] Tunnel monitor exited with block reason: None
[2024-12-05 19:10:41.045][talpid_routing::imp::imp][DEBUG] Clearing routes
[2024-12-05 19:10:41.047][mullvad_daemon][DEBUG] New tunnel state: Disconnecting(Reconnect)
[2024-12-05 19:10:41.049][mullvad_daemon::tunnel][DEBUG] Same IP is NOT being used
[2024-12-05 19:10:41.049][talpid_core::firewall][INFO] Applying firewall policy: Connecting to 146.70.196.194:80/TCP, Allowing LAN, interface: none. Allowing endpoint 193.138.218.71:1236/TCP
[2024-12-05 19:10:41.062][mullvad_daemon][DEBUG] New tunnel state: Connecting { endpoint: TunnelEndpoint { endpoint: Endpoint { address: 146.70.196.194:41707, protocol: Udp }, tunnel_type: Wireguard, quantum_resistant: true, proxy: None, obfuscation: Some(ObfuscationEndpoint { endpoint: Endpoint { address: 146.70.196.194:80, protocol: Tcp }, obfuscation_type: Udp2Tcp }), entry_endpoint: None, tunnel_interface: None, daita: false }, location: Some(GeoIpLocation { ipv4: None, ipv6: None, country: "Hungary", city: Some("Budapest"), latitude: 47.5, longitude: 19.083333, mullvad_exit_ip: true, hostname: Some("hu-bud-wg-101"), bridge_hostname: None, entry_hostname: None, obfuscator_hostname: Some("hu-bud-wg-101") }), feature_indicators: FeatureIndicators(["LAN Sharing", "Quantum Resistance", "Udp2Tcp"]) }
[2024-12-05 19:10:41.062][mullvad_daemon][DEBUG] Settings: openvpn mssfix: unset, wg mtu: unset, wg ip version: any, multihop: off, ipv6 (tun): on, lan: on, pq: auto, obfs: udp2tcp, dns: default
[2024-12-05 19:10:41.064][udp_over_tcp::udp2tcp][INFO] Listening on 127.0.0.1:37564/UDP
[2024-12-05 19:10:41.064][talpid_wireguard][DEBUG] Tunnel MTU: 1380
[2024-12-05 19:10:41.112][talpid_wireguard][DEBUG] Using kernel WireGuard implementation
[2024-12-05 19:10:41.113][talpid_core::firewall][INFO] Applying firewall policy: Connecting to 146.70.196.194:80/TCP over "wg0-mullvad" (ip: 10.131.158.234,fc00:bbbb:bbbb:bb01:d:0:3:9eea, v4 gw: 10.64.0.1, v6 gw: Some(fc00:bbbb:bbbb:bb01::1), allowed in-tunnel traffic: 10.64.0.1:1337/TCP), Allowing LAN. Allowing endpoint 193.138.218.71:1236/TCP
[2024-12-05 19:10:41.115][udp_over_tcp::udp2tcp][INFO] Incoming connection from 127.0.0.1:47861/UDP
[2024-12-05 19:10:41.115][udp_over_tcp::udp2tcp][INFO] Connecting to 146.70.196.194:80/TCP
[2024-12-05 19:10:41.133][talpid_routing::imp::imp][DEBUG] Adding routes: {RequiredRoute { prefix: V4(Ipv4Network { addr: 10.64.0.1, prefix: 32 }), node: RealNode(Node { ip: None, device: Some("wg0-mullvad") }), main_table: true, mtu: None }, RequiredRoute { prefix: V6(Ipv6Network { addr: fc00:bbbb:bbbb:bb01::1, prefix: 128 }), node: RealNode(Node { ip: None, device: Some("wg0-mullvad") }), main_table: true, mtu: None }}
[2024-12-05 19:10:41.133][talpid_wireguard][DEBUG] Requesting ephemeral peer
[2024-12-05 19:10:41.133][talpid_tunnel_config_client][DEBUG] Config client socket MSS: 496
[2024-12-05 19:10:41.147][udp_over_tcp::udp2tcp][INFO] Connected to 146.70.196.194:80/TCP

Operating system version

Ubuntu 24.04

Mullvad VPN app version

2024.8

Additional Information

$ uname -a
[machine name] 6.8.0-49-generic #49-Ubuntu SMP PREEMPT_DYNAMIC Mon Nov  4 02:06:24 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux

[Serock3]

It's a bit hard to diagnose the issue just from the logs. Could you try a few things and tell me if you are able to connect with wireguard:

1. Disable obfuscation
2. Disable quantum-resistant tunnel
3. Test with the previous version of the app 2024.7

You can find the 2024.7 version here https://releases.mullvad.net/desktop/releases/2024.7/?C=M&O=D. The build is signed, which you can verify by following this guide https://mullvad.net/en/help/verifying-signatures.

[pushkin-]

I have a similar issue. Not sure if identical to what's reported. But switching from Wireguard to OpenVPN allows it to connect.

2025.1 version
linux is popos 22.04

[MarkusPettersson98]

Hi @pushkin- , would you mind testing the patched pre-release build found here: #7416 (comment)? 😊

[pushkin-]

@MarkusPettersson98 I can't actually repro the issue anymore, even before updating to the latest version. I tried switching OpenVPN to WireGuard (and now back to Automatic) and it connects now

[MarkusPettersson98]

That's good! 😊

[MarkusPettersson98]

OP @FeryET, do you still experience issues on the latest 2025.2 release?