"Manual disconnection" → please help!

Zero Trust WARP
1

What is the name of the domain?

no domain

What is the error number?

no error number

What is the error message?

Status update: Disconnected Reason: Manual Disconnection

What is the issue you’re encountering

I’m able to connect successfully through warp-cli, but then I’m always disconnected

What steps have you taken to resolve the issue?

  • recreated another Zero Trust team
  • installed on multiple linux machines (incl. Docker images, lxc, lxd, …). All Ubuntu however

What are the steps to reproduce the issue?

  1. install warp-cli → success
  2. warp-cli registration token https://*.cloudflareaccess.com/auth?token=eyJhbGciOiJS → success
  3. warp-cli connect → success
  4. warp-cli status → “Status update: Disconnected Reason: Manual Disconnection”
2

I’m still trying to troubleshoot. These are the logs from /var/log/cloudflare-warp/cfwarp_service_log.txt. Any idea what could be wrong?

2024-12-13T16:17:43.293Z  INFO main_loop: warp::warp::warp_connection: Starting Warp Connection operation_mode=WarpWithDnsOverHttps dns_mode=DNS Proxy tunnel_mode=Exclude-only Tunnel posture_only=disabl>
2024-12-13T16:17:43.293Z DEBUG main_loop: warp_settings::raw_settings: gateway_id=************************ Using gateway ID
2024-12-13T16:17:43.293Z  INFO main_loop: warp::warp::proxying_dns: Putting DoH connection outside the tunnel
2024-12-13T16:17:43.293Z  INFO main_loop: warp::warp::tunnel: Initiate WARP connection protocol=Wireguard
2024-12-13T16:17:43.293Z DEBUG main_loop: warp::warp_service: Entering main loop arm arm="status_change"
2024-12-13T16:17:43.293Z  INFO main_loop: warp::warp_service: WARP status: Connecting
2024-12-13T16:17:43.293Z DEBUG main_loop: warp::warp_service::ipc_handlers: Sending IPC status update: Connecting
2024-12-13T16:17:43.293Z DEBUG main_loop: warp::warp_service::ipc_handlers: Ipc Broadcast ResponseStatus: Connecting
2024-12-13T16:17:43.293Z DEBUG firewall::change: Firewall allow tunnel ipv4=[162.159.193.2] ipv6=[2606:4700:100::a29f:c102]
2024-12-13T16:17:43.309Z DEBUG firewall::linux: Firewall rules loaded
2024-12-13T16:17:43.309Z DEBUG main_loop:connect_inner{protocol="wireguard"}: warp_edge::happy_eyeballs: Attempting Happy Eyeballs to 162.159.193.2:2408 / [2606:4700:100::a29f:c102]:2408
2024-12-13T16:17:43.309Z DEBUG main_loop:connect_inner{protocol="wireguard"}: warp_edge::happy_eyeballs: Start racer 192.168.86.229:51339 ---> 162.159.193.2:2408
2024-12-13T16:17:43.309Z DEBUG main_loop:connect_inner{protocol="wireguard"}: warp_edge::wireguard_tun: Using existing session affinity tag old_id=1560301056 id=CfConnectionId { colo_id: 78, metal_numbe>
2024-12-13T16:17:43.309Z DEBUG main_loop:connect_inner{protocol="wireguard"}: warp_edge::wireguard_tun: Handshaking wireguard with session tag affinity_tag=1560301056
2024-12-13T16:17:43.309Z DEBUG main_loop:connect_inner{protocol="wireguard"}: warp_edge::wireguard_tun: Sent handshake initiation to 162.159.193.2:2408
2024-12-13T16:17:43.309Z DEBUG main_loop:connect_inner{protocol="wireguard"}: warp_edge::happy_eyeballs: Happy Eyeballs check failed v6=[2606:4700:100::a29f:c102]:2408 err=UdpConnect(Os { code: 101, kin>
2024-12-13T16:17:43.321Z DEBUG main_loop:connect_inner{protocol="wireguard"}: warp_edge::wireguard_tun: Got response from 162.159.193.2:2408
2024-12-13T16:17:43.321Z DEBUG main_loop:connect_inner{protocol="wireguard"}: warp::warp::tunnel: Connected to 162.159.193.2:2408
2024-12-13T16:17:43.321Z  INFO main_loop:connect_inner{protocol="wireguard"}: warp::warp::tunnel: DNS resolver connection is being made outside of the tunnel
2024-12-13T16:17:43.321Z DEBUG main_loop: warp::warp::warp_connection: start_status=Err(IoError(AnnotatedIoError { err: Os { code: 2, kind: NotFound, message: "No such file or directory" }, context: "op>
2024-12-13T16:17:43.321Z  WARN main_loop: warp::warp_service: Tunnel failed to start error=IoError(AnnotatedIoError { err: Os { code: 2, kind: NotFound, message: "No such file or directory" }, context: >
2024-12-13T16:17:43.321Z DEBUG firewall::change: Firewall reset to defaults
2024-12-13T16:17:43.321Z DEBUG main_loop: warp::warp_service: Entering main loop arm arm="tunnel_taskset_errors_fut"
2024-12-13T16:17:43.321Z ERROR main_loop: warp::warp_service: Connection error error=IoError(AnnotatedIoError { err: Os { code: 2, kind: NotFound, message: "No such file or directory" }, context: "open >
2024-12-13T16:17:43.321Z DEBUG firewall::change: Firewall reset to defaults
2024-12-13T16:17:43.321Z DEBUG main_loop: warp::warp_service: Determining disconnected reason from connectivity state net_info=IPv4: [eth0; 192.168.86.229; Ethernet]
DNS servers:
 192.168.86.47:53

 power_state=None disconnect_reason=None
2024-12-13T16:17:43.321Z  WARN main_loop: warp::warp_service: Disconnecting, but reason is unknown
2024-12-13T16:17:43.323Z DEBUG firewall::linux: Firewall rules loaded
2024-12-13T16:17:43.323Z DEBUG firewall::change: Firewall allow API ips api_ips=[162.159.137.105, 162.159.138.105, 2606:4700:7::a29f:8969, 2606:4700:7::a29f:8a69]
2024-12-13T16:17:43.323Z DEBUG firewall::change: Changing catch all policy Deny->Deny
2024-12-13T16:17:43.323Z DEBUG firewall::change: Firewall allow managed network endpoints managed_network_endpoints=[]
2024-12-13T16:17:43.343Z DEBUG firewall::linux: Firewall rules loaded
2024-12-13T16:17:43.343Z DEBUG main_loop: warp::warp_service: Entering main loop arm arm="status_change"
2024-12-13T16:17:43.343Z  INFO main_loop: warp::warp_service: WARP status: Disconnected(Manual)
2024-12-13T16:17:43.343Z DEBUG main_loop: warp::warp_service::ipc_handlers: Sending IPC status update: Disconnected(Manual)
2024-12-13T16:17:43.343Z DEBUG main_loop: warp::warp_service::ipc_handlers: Ipc Broadcast ResponseStatus: Disconnected(Manual)
2024-12-13T16:17:43.421Z DEBUG actor_connectivity::connectivity: Routes changed:
NewNeighbour; Destination: 192.168.86.47;
NewNeighbour; Destination: 192.168.86.47;
2024-12-13T16:17:43.421Z  WARN network_info::linux::dns_manager::dns_owner: Could not determine resolv.conf file owner: No comment line contained an owner slug
2024-12-13T16:17:47.425Z  WARN network_info::linux::dns_manager::dns_owner: Could not determine resolv.conf file owner: No comment line contained an owner slug
2024-12-13T16:17:48.345Z DEBUG main_loop: warp::warp_service: Entering main loop arm arm="recheck_connectivity_time"
2024-12-13T16:17:48.345Z DEBUG main_loop: warp::warp_service: Checking for connectivity network_info=IPv4: [eth0; 192.168.86.229; Ethernet]
DNS servers:
 192.168.86.47:53


2024-12-13T16:17:48.345Z DEBUG firewall::change: Firewall allow captive portal
2024-12-13T16:17:48.359Z DEBUG firewall::linux: Firewall rules loaded
2024-12-13T16:17:48.410Z DEBUG main_loop:check_connectivity: captive_portal::connectivity: return=ChecksSuccessful
2024-12-13T16:17:48.410Z DEBUG main_loop: warp::warp_service: Reconnecting on successful connectivity check or captive portal detection connectivity_check=ChecksSuccessful
2024-12-13T16:17:48.410Z DEBUG firewall::change: Firewall disallow captive portal
2024-12-13T16:17:48.424Z DEBUG firewall::linux: Firewall rules loaded
2024-12-13T16:17:48.424Z DEBUG firewall::change: Firewall allow API ips api_ips=[162.159.137.105, 162.159.138.105, 2606:4700:7::a29f:8969, 2606:4700:7::a29f:8a69]
2024-12-13T16:17:48.424Z DEBUG firewall::change: Changing catch all policy Deny->Deny
2024-12-13T16:17:48.424Z DEBUG firewall::change: Firewall allow managed network endpoints managed_network_endpoints=[]
2024-12-13T16:17:48.424Z DEBUG firewall::captive_portal: Firewall captive portal expired
2024-12-13T16:17:48.434Z DEBUG firewall::linux: Firewall rules loaded
2024-12-13T16:17:48.434Z DEBUG main_loop: warp::warp_service: Determining disconnected reason from connectivity state net_info=IPv4: [eth0; 192.168.86.229; Ethernet]
DNS servers:
 192.168.86.47:53

 power_state=None disconnect_reason=None
2024-12-13T16:17:48.434Z  WARN main_loop: warp::warp_service: Disconnecting, but reason is unknown
2024-12-13T16:17:48.434Z DEBUG firewall::change: Firewall allow API ips api_ips=[162.159.137.105, 162.159.138.105, 2606:4700:7::a29f:8969, 2606:4700:7::a29f:8a69]
2024-12-13T16:17:48.434Z DEBUG firewall::change: Changing catch all policy Deny->Deny
2024-12-13T16:17:48.434Z DEBUG firewall::change: Firewall allow managed network endpoints managed_network_endpoints=[]
2024-12-13T16:17:48.445Z DEBUG firewall::linux: Firewall rules loaded
2024-12-13T16:17:48.445Z  INFO main_loop: warp::warp_service: captive_portal_fw_until: Until(Instant { tv_sec: 1583770, tv_nsec: 444258332 })
2024-12-13T16:17:48.445Z DEBUG main_loop: warp::warp::proxying_dns: Using auto fallback: true
2024-12-13T16:17:48.445Z DEBUG main_loop: warp::warp::warp_connection: Current Network: IPv4: [eth0; 192.168.86.229; Ethernet]
DNS servers:
 192.168.86.47:53
3

Solved it. I was running it on Ubuntu in a Proxmox LXC.
I added this to the conf file of my container:

lxc.cgroup2.devices.allow: c 10:200 rwm
lxc.mount.entry: /dev/net dev/net none bind,create=dir
4

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.