Bug: gluetun is always trying port 53 for connection when downloaded OpenVPN files from PureVPN reference port 1194.

[reedog117]

Is this urgent?

Yes

Host OS

Rocky Linux 10

CPU arch

x86_64

VPN service provider

PureVPN

What are you using to run the container

docker-compose

What is the version of Gluetun

Running version latest built on 2026-02-20T17:16:46.684Z (commit 0c3e5d9)

What's the problem 🤔

gluetun is always trying port 53 for connection when downloaded OpenVPN files from PureVPN reference port 1194. See https://support.purevpn.com/purevpn/openvpn-files which is used by the updater. If you examine the ovpn files provided, they are all referencing 1194 for udp or 80 for tcp.

I also tried setting environment variable OPENVPN_ENDPOINT_PROVIDER to 1194 but this is ignored since I'm telling it to use PureVPN.

Looking at the server list, there's only a reference to using tcp or udp without any reference to a port number.

Share your logs (at least 10 lines)

026-02-22T00:50:30-05:00 INFO [routing] default route found: interface eth0, gateway 172.18.0.1, assigned IP 172.18.0.5 and family v4
2026-02-22T00:50:30-05:00 INFO [routing] adding route for 0.0.0.0/0
2026-02-22T00:50:30-05:00 INFO [firewall] setting allowed subnets...
2026-02-22T00:50:30-05:00 INFO [routing] default route found: interface eth0, gateway 172.18.0.1, assigned IP 172.18.0.5 and family v4
2026-02-22T00:50:30-05:00 INFO [healthcheck] listening on 127.0.0.1:9999
2026-02-22T00:50:30-05:00 INFO [dns] using plaintext DNS at address 1.1.1.1
2026-02-22T00:50:30-05:00 INFO [http server] http server listening on [::]:8000
2026-02-22T00:50:30-05:00 INFO [firewall] allowing VPN connection...
2026-02-22T00:50:30-05:00 INFO [openvpn] OpenVPN 2.6.16 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
2026-02-22T00:50:30-05:00 INFO [openvpn] library versions: OpenSSL 3.5.5 27 Jan 2026, LZO 2.10
2026-02-22T00:50:30-05:00 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]149.40.49.133:53
2026-02-22T00:50:30-05:00 INFO [openvpn] UDPv4 link local: (not bound)
2026-02-22T00:50:30-05:00 INFO [openvpn] UDPv4 link remote: [AF_INET]149.40.49.133:53
2026-02-22T00:51:30-05:00 WARN [openvpn] TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
🚒🚒🚒🚒🚒🚨🚨🚨🚨🚨🚨🚒🚒🚒🚒🚒
That error usually happens because either:

1. The VPN server IP address you are trying to connect to is no longer valid 🔌
   Check out https://github.com/qdm12/gluetun-wiki/blob/main/setup/servers.md#update-the-vpn-servers-list

2. The VPN server crashed 💥, try changing your VPN servers filtering options such as SERVER_REGIONS

3. Your Internet connection is not working 🤯, ensure it works

4. Something else ➡️ https://github.com/qdm12/gluetun/issues/new/choose

2026-02-22T00:51:30-05:00 INFO [openvpn] TLS Error: TLS handshake failed
2026-02-22T00:51:30-05:00 INFO [openvpn] SIGTERM received, sending exit notification to peer
2026-02-22T00:51:30-05:00 INFO [openvpn] SIGTERM[soft,tls-error] received, process exiting
2026-02-22T00:51:30-05:00 INFO [vpn] retrying in 15s
2026-02-22T00:51:45-05:00 INFO [firewall] allowing VPN connection...
2026-02-22T00:51:45-05:00 INFO [openvpn] OpenVPN 2.6.16 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
2026-02-22T00:51:45-05:00 INFO [openvpn] library versions: OpenSSL 3.5.5 27 Jan 2026, LZO 2.10
2026-02-22T00:51:45-05:00 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]172.111.241.6:53
2026-02-22T00:51:45-05:00 INFO [openvpn] UDPv4 link local: (not bound)
2026-02-22T00:51:45-05:00 INFO [openvpn] UDPv4 link remote: [AF_INET]172.111.241.6:53
2026-02-22T00:52:45-05:00 WARN [openvpn] TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
🚒🚒🚒🚒🚒🚨🚨🚨🚨🚨🚨🚒🚒🚒🚒🚒
That error usually happens because either:

1. The VPN server IP address you are trying to connect to is no longer valid 🔌
   Check out https://github.com/qdm12/gluetun-wiki/blob/main/setup/servers.md#update-the-vpn-servers-list

2. The VPN server crashed 💥, try changing your VPN servers filtering options such as SERVER_REGIONS

3. Your Internet connection is not working 🤯, ensure it works

4. Something else ➡️ https://github.com/qdm12/gluetun/issues/new/choose

2026-02-22T00:52:45-05:00 INFO [openvpn] TLS Error: TLS handshake failed
2026-02-22T00:52:45-05:00 INFO [openvpn] SIGTERM received, sending exit notification to peer
2026-02-22T00:52:45-05:00 INFO [openvpn] SIGTERM[soft,tls-error] received, process exiting
2026-02-22T00:52:45-05:00 INFO [vpn] retrying in 15s
2026-02-22T00:53:00-05:00 INFO [firewall] allowing VPN connection...
2026-02-22T00:53:00-05:00 INFO [openvpn] OpenVPN 2.6.16 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
2026-02-22T00:53:00-05:00 INFO [openvpn] library versions: OpenSSL 3.5.5 27 Jan 2026, LZO 2.10
2026-02-22T00:53:00-05:00 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]172.111.152.6:53
2026-02-22T00:53:00-05:00 INFO [openvpn] UDPv4 link local: (not bound)
2026-02-22T00:53:00-05:00 INFO [openvpn] UDPv4 link remote: [AF_INET]172.111.152.6:53
2026-02-22T00:54:00-05:00 WARN [openvpn] TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
🚒🚒🚒🚒🚒🚨🚨🚨🚨🚨🚨🚒🚒🚒🚒🚒
That error usually happens because either:

1. The VPN server IP address you are trying to connect to is no longer valid 🔌
   Check out https://github.com/qdm12/gluetun-wiki/blob/main/setup/servers.md#update-the-vpn-servers-list

2. The VPN server crashed 💥, try changing your VPN servers filtering options such as SERVER_REGIONS

3. Your Internet connection is not working 🤯, ensure it works

4. Something else ➡️ https://github.com/qdm12/gluetun/issues/new/choose

2026-02-22T00:54:00-05:00 INFO [openvpn] TLS Error: TLS handshake failed
2026-02-22T00:54:00-05:00 INFO [openvpn] SIGTERM received, sending exit notification to peer
2026-02-22T00:54:00-05:00 INFO [openvpn] SIGTERM[soft,tls-error] received, process exiting
2026-02-22T00:54:00-05:00 INFO [vpn] retrying in 15s
2026-02-22T00:54:15-05:00 INFO [firewall] allowing VPN connection...
2026-02-22T00:54:15-05:00 INFO [openvpn] OpenVPN 2.6.16 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
2026-02-22T00:54:15-05:00 INFO [openvpn] library versions: OpenSSL 3.5.5 27 Jan 2026, LZO 2.10
2026-02-22T00:54:15-05:00 INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]172.111.241.6:53
2026-02-22T00:54:15-05:00 INFO [openvpn] UDPv4 link local: (not bound)
2026-02-22T00:54:15-05:00 INFO [openvpn] UDPv4 link remote: [AF_INET]172.111.241.6:53
2026-02-22T00:55:15-05:00 WARN [openvpn] TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
🚒🚒🚒🚒🚒🚨🚨🚨🚨🚨🚨🚒🚒🚒🚒🚒
That error usually happens because either:

1. The VPN server IP address you are trying to connect to is no longer valid 🔌
   Check out https://github.com/qdm12/gluetun-wiki/blob/main/setup/servers.md#update-the-vpn-servers-list

2. The VPN server crashed 💥, try changing your VPN servers filtering options such as SERVER_REGIONS

3. Your Internet connection is not working 🤯, ensure it works

4. Something else ➡️ https://github.com/qdm12/gluetun/issues/new/choose

2026-02-22T00:55:15-05:00 INFO [openvpn] TLS Error: TLS handshake failed
2026-02-22T00:55:15-05:00 INFO [openvpn] SIGTERM received, sending exit notification to peer
2026-02-22T00:55:15-05:00 INFO [openvpn] SIGTERM[soft,tls-error] received, process exiting
2026-02-22T00:55:15-05:00 INFO [vpn] retrying in 15s

Share your configuration

gluetun:
    env_file:
      - /opt/.env
    image: qmcgaw/gluetun:latest
    container_name: gluetun
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    restart: unless-stopped
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"
    volumes:
      - /opt/data/iptv/gluetun:/gluetun
    environment:
      - VPN_SERVICE_PROVIDER=purevpn
      - VPN_TYPE=openvpn
      - OPENVPN_USER=${GLUETUN_OPENVPN_USER}
      - OPENVPN_PASSWORD=${GLUETUN_OPENVPN_PASSWORD}
      - OPENVPN_ENDPOINT_PORT=1194
      - OPENVPN_CONNECT_TIMEOUT=15
      - OPENVPN_RETRIES=999
      - OPENVPN_RETRY_DELAY=2
      - OPENVPN_RESTART_DELAY=5
      - UPDATER_PERIOD=12h
      - VPN_AUTO_RECONNECT=true
      - HEALTH_VPN_DURATION_INITIAL=20s
      - TZ=America/New_York
      - SERVER_COUNTRIES=${GLUETUN_SERVER_COUNTRIES}
      - SERVER_REGIONS=${GLUETUN_SERVER_REGIONS}
    networks:
      - proxy

[github-actions]

@qdm12 is more or less the only maintainer of this project and works on it in his free time.
Please:

• do not ask for updates, be patient
• 👍 the issue to show your support instead of commenting
  @qdm12 usually checks issues at least once a week, if this is a new urgent bug,
  revert to an older tagged container image

[reedog117]

Created PRs to remediate this issue. Just awaiting approval!

[reedog117]

Closed #3149 because the zip file is not being updated reliably by the provider. Going to try an alternate method of updating the server list.

[qdm12]

support keeps redirecting me to configuration files that are behind their member's portal

If you are logged in, is there some API call to get all their servers somewhere? You could check your network requests in your browser when you select a config file 🤔 Sounds a bit like desperate try but oh well 😢 And I suppose purevpn doesn't really care to show their servers data publicly on for example a JSON API endpoint I guess...

[reedog117]

The new PR #3165 now dissects one of their GUI VPN installers and extracts both their hardcoded list as well as makes a call out to a hosted CDN that returns a JSON list, then dedupes and processes each of the endpoints. We can't depend solely on the CDN-hosted list because a large majority of their servers are only baked into their official client app.

#3165 also has added functionality for filtering between their p2p-friendly, quantum-resistant, port-forwarding capable, and more obfuscated endpoints.

Did a bunch of testing to ensure the properties properly filter as well as tested connection success rate for various options which is miles better than the current implementation.

[qdm12]

also has added functionality for filtering between their p2p-friendly, quantum-resistant, port-forwarding capable, and more obfuscated endpoints.

can you please separate this in a separate PR? 🙏

[reedog117]

also has added functionality for filtering between their p2p-friendly, quantum-resistant, port-forwarding capable, and more obfuscated endpoints.

can you please separate this in a separate PR? 🙏

I split this into a separate PR but I can't submit the new PR until #3165 is merged since the additional filtering is dependent on the changes in the original PR.