HTTP Proxy with VPN Port Forward, possible? #2281

dhenry437 · 2024-05-15T00:24:05Z

dhenry437
May 15, 2024

Hi,

Due to the age of my NAS I am running Gluetun on my PVE server while qBittorrent runs on the NAS.

I've set qB to use the Gluetun's HTTP Proxy and it work's as expected (test using a toorrent Ip leak thing reports the VPN IP).

But now I am trying to get the Port Forwarding side set up and its not working.

Pretty sure I've got it all correct so now I'm wondering is it even possible to VPN port forward over HTTP proxy.

Gluetun

docker-compose

services:
  gluetun:
    image: qmcgaw/gluetun
    container_name: gluetun
    cap_add:
      - NET_ADMIN
    ports:
      - 8888:8888/tcp # HTTP proxy
    devices:
      - /dev/net/tun:/dev/net/tun
    environment:
      - TZ=xxxx
      - FIREWALL_OUTBOUND_SUBNETS=172.20.0.0/16,192.168.0.0/24
      
      # ##### AirVPN #####
      - VPN_SERVICE_PROVIDER=airvpn
      - SERVER_COUNTRIES=xxxx
      - FIREWALL_VPN_INPUT_PORTS=xxxx
      # ----- Wireguard -----
      - VPN_TYPE=wireguard
      - WIREGUARD_PRIVATE_KEY=xxxx
      - WIREGUARD_PRESHARED_KEY=xxxx
      - WIREGUARD_ADDRESSES=xxxx
      
      # ##### HTTP Proxy #####
      - HTTPPROXY=on
      - HTTP_PROXY_LOG=on
    network_mode: bridge
    restart: unless-stopped

log

========================================
========================================
=============== gluetun ================
========================================
=========== Made with ❤️ by ============
======= https://github.com/qdm12 =======
========================================
========================================
Running version latest built on 2024-05-10T14:34:10.339Z (commit 1e25372)
🔧 Need help? https://github.com/qdm12/gluetun/discussions/new
🐛 Bug? https://github.com/qdm12/gluetun/issues/new
✨ New feature? https://github.com/qdm12/gluetun/issues/new
☕ Discussion? https://github.com/qdm12/gluetun/discussions/new
💻 Email? [email protected]
💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
2024-05-15T09:25:59+10:00 INFO [routing] default route found: interface eth0, gateway 172.17.0.1, assigned IP 172.17.0.2 and family v4
2024-05-15T09:25:59+10:00 INFO [routing] local ethernet link found: eth0
2024-05-15T09:25:59+10:00 INFO [routing] local ipnet found: 172.17.0.0/16
2024-05-15T09:25:59+10:00 INFO [firewall] enabling...
2024-05-15T09:25:59+10:00 INFO [firewall] enabled successfully
2024-05-15T09:25:59+10:00 INFO [storage] creating /gluetun/servers.json with 19425 hardcoded servers
2024-05-15T09:25:59+10:00 INFO Alpine version: 3.19.1
2024-05-15T09:25:59+10:00 INFO OpenVPN 2.5 version: 2.5.8
2024-05-15T09:25:59+10:00 INFO OpenVPN 2.6 version: 2.6.8
2024-05-15T09:25:59+10:00 INFO Unbound version: 1.20.0
2024-05-15T09:25:59+10:00 INFO IPtables version: v1.8.10
2024-05-15T09:25:59+10:00 INFO Settings summary:
├── VPN settings:
|   ├── VPN provider settings:
|   |   ├── Name: airvpn
|   |   └── Server selection settings:
|   |       ├── VPN type: wireguard
|   |       ├── Countries: xxxx
|   |       └── Wireguard selection settings:
|   └── Wireguard settings:
|       ├── Private key: xxxx
|       ├── Pre-shared key: xxxx
|       ├── Interface addresses:
|       |   └── xxxxx/32
|       ├── Allowed IPs:
|       |   ├── 0.0.0.0/0
|       |   └── ::/0
|       └── Network interface: tun0
|           └── MTU: 1400
├── DNS settings:
|   ├── Keep existing nameserver(s): no
|   ├── DNS server address to use: 127.0.0.1
|   └── DNS over TLS settings:
|       ├── Enabled: yes
|       ├── Update period: every 24h0m0s
|       ├── Unbound settings:
|       |   ├── Authoritative servers:
|       |   |   └── cloudflare
|       |   ├── Caching: yes
|       |   ├── IPv6: no
|       |   ├── Verbosity level: 1
|       |   ├── Verbosity details level: 0
|       |   ├── Validation log level: 0
|       |   ├── System user: root
|       |   └── Allowed networks:
|       |       ├── 0.0.0.0/0
|       |       └── ::/0
|       └── DNS filtering settings:
|           ├── Block malicious: yes
|           ├── Block ads: no
|           ├── Block surveillance: no
|           └── Blocked IP networks:
|               ├── 127.0.0.1/8
|               ├── 10.0.0.0/8
|               ├── 172.16.0.0/12
|               ├── 192.168.0.0/16
|               ├── 169.254.0.0/16
|               ├── ::1/128
|               ├── fc00::/7
|               ├── fe80::/10
|               ├── ::ffff:127.0.0.1/104
|               ├── ::ffff:10.0.0.0/104
|               ├── ::ffff:169.254.0.0/112
|               ├── ::ffff:172.16.0.0/108
|               └── ::ffff:192.168.0.0/112
├── Firewall settings:
|   ├── Enabled: yes
|   ├── VPN input ports:
|   |   └── xxxx
|   └── Outbound subnets:
|       ├── 172.20.0.0/16
|       └── 192.168.0.0/24
├── Log settings:
|   └── Log level: info
├── Health settings:
|   ├── Server listening address: 127.0.0.1:9999
|   ├── Target address: cloudflare.com:443
|   ├── Duration to wait after success: 5s
|   ├── Read header timeout: 100ms
|   ├── Read timeout: 500ms
|   └── VPN wait durations:
|       ├── Initial duration: 6s
|       └── Additional duration: 5s
├── Shadowsocks server settings:
|   └── Enabled: no
├── HTTP proxy settings:
|   ├── Enabled: yes
|   ├── Listening address: :8888
|   ├── User: 
|   ├── Password: [not set]
|   ├── Stealth mode: no
|   ├── Log: no
|   ├── Read header timeout: 1s
|   └── Read timeout: 3s
├── Control server settings:
|   ├── Listening address: :8000
|   └── Logging: yes
├── OS Alpine settings:
|   ├── Process UID: 1000
|   ├── Process GID: 1000
|   └── Timezone: xxxx
├── Public IP settings:
|   ├── Fetching: every 12h0m0s
|   ├── IP file path: /tmp/gluetun/ip
|   └── Public IP data API: ipinfo
└── Version settings:
    └── Enabled: yes
2024-05-15T09:25:59+10:00 INFO [routing] default route found: interface eth0, gateway 172.17.0.1, assigned IP 172.17.0.2 and family v4
2024-05-15T09:25:59+10:00 INFO [routing] adding route for 0.0.0.0/0
2024-05-15T09:25:59+10:00 INFO [firewall] setting allowed subnets...
2024-05-15T09:25:59+10:00 INFO [routing] default route found: interface eth0, gateway 172.17.0.1, assigned IP 172.17.0.2 and family v4
2024-05-15T09:25:59+10:00 INFO [routing] adding route for 172.20.0.0/16
2024-05-15T09:25:59+10:00 INFO [routing] adding route for 192.168.0.0/24
2024-05-15T09:25:59+10:00 INFO [dns] using plaintext DNS at address 1.1.1.1
2024-05-15T09:25:59+10:00 INFO [http server] http server listening on [::]:8000
2024-05-15T09:25:59+10:00 INFO [http proxy] listening on :8888
2024-05-15T09:25:59+10:00 INFO [healthcheck] listening on 127.0.0.1:9999
2024-05-15T09:25:59+10:00 INFO [firewall] allowing VPN connection...
2024-05-15T09:25:59+10:00 INFO [wireguard] Using available kernelspace implementation
2024-05-15T09:25:59+10:00 INFO [wireguard] Connecting to 103.231.91.58:1637
2024-05-15T09:25:59+10:00 INFO [wireguard] Wireguard setup is complete. Note Wireguard is a silent protocol and it may or may not work, without giving any error message. Typically i/o timeout errors indicate the Wireguard connection is not working.
2024-05-15T09:25:59+10:00 INFO [firewall] setting allowed input port xxxx through interface tun0...
2024-05-15T09:25:59+10:00 INFO [dns] downloading DNS over TLS cryptographic files
2024-05-15T09:26:01+10:00 INFO [healthcheck] healthy!
2024-05-15T09:26:01+10:00 INFO [dns] downloading hostnames and IP block lists
2024-05-15T09:26:05+10:00 INFO [dns] init module 0: validator
2024-05-15T09:26:05+10:00 INFO [dns] init module 1: iterator
2024-05-15T09:26:05+10:00 INFO [dns] start of service (unbound 1.20.0).
2024-05-15T09:26:06+10:00 INFO [dns] generate keytag query _ta-4a5c-4f66. NULL IN
2024-05-15T09:26:06+10:00 INFO [dns] generate keytag query _ta-4a5c-4f66. NULL IN
2024-05-15T09:26:06+10:00 INFO [dns] ready
2024-05-15T09:26:07+10:00 WARN [ip getter] too many requests sent for this month from https://ipinfo.io/: 429 429 Too Many Requests; not retrying.
2024-05-15T09:26:07+10:00 INFO [vpn] You are running on the bleeding edge of latest!

qBittorent

docker-compose

services:
  qbittorrent:
    image: linuxserver/qbittorrent:latest
    container_name: qbittorrent
    environment:
      - PUID=0
      - PGID=0 
      - TZ=xxxx
      - WEBUI_PORT=8090
    volumes:
      - /volume1/docker/qbittorrent:/config
      - /volume1/media:/mnt/media
    ports:
      - 8090:8090
      - 19619:19619
      - 19619:19619/udp
    network_mode: bridge
    restart: unless-stopped

Connection Settings

The port is configured in airVPN

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

HTTP Proxy with VPN Port Forward, possible? #2281

{{title}}

{{editor}}'s edit

{{editor}}'s edit

Replies: 0 comments

Select a reply

HTTP Proxy with VPN Port Forward, possible? #2281

dhenry437 May 15, 2024

Gluetun

qBittorent

Replies: 0 comments

dhenry437
May 15, 2024