Gluetun
An open-source VPN client container that runs on Docker, supporting WireGuard and OpenVPN protocols. It includes built-in configuration templates for dozens of VPN providers and is commonly used in self-hosted media server stacks (arr stack) as a VPN gateway.
Timeline (last 90 days)
Upgrading qmcgaw's Gluetun container to v3.41.3 can resolve the recent issue of VPN connectivity failures.
Users running a pinned version of the qmcgaw Gluetun container may have recently encountered VPN connectivity failures.
In the arr stack, Gluetun acts as the VPN gateway, with other containers routing all outbound traffic through the encrypted tunnel established by Gluetun via network_mode: service:gluetun.
Gluetun becomes a single point of failure for the entire chain: whenever it loses connection, all containers that depend on it simultaneously lose internet access, while the containers themselves neither exit nor report errors.
Gluetun supports both WireGuard and OpenVPN, the two mainstream VPN protocols, and has built-in configuration templates for dozens of VPN providers (PIA, Mullvad, NordVPN, etc.).
Pinning versions carries higher risk in a VPN scenario than in ordinary web services, because the software itself may have no bugs but external dependencies have changed, and pinning versions causes users to miss new releases that contain fixes.
A few months ago, Gluetun experienced a similar connectivity issue (involving the PIA provider), and v3.41.0 was the fix version at that time.
Gluetun's official image is located in the Docker Hub repository qmcgaw/gluetun.
During troubleshooting, all indexers in Prowlarr reported errors, the root cause being that Gluetun's inability to connect to the VPN caused the entire chain depending on it to fail.
All Facts (6)
In the arr stack, Gluetun acts as the VPN gateway, with other containers routing all outbound traffic through the encrypted tunnel established by Gluetun via network_mode: service:gluetun.
50%UnverifiedGluetun becomes a single point of failure for the entire chain: whenever it loses connection, all containers that depend on it simultaneously lose internet access, while the containers themselves neither exit nor report errors.
50%UnverifiedGluetun supports both WireGuard and OpenVPN, the two mainstream VPN protocols, and has built-in configuration templates for dozens of VPN providers (PIA, Mullvad, NordVPN, etc.).
50%UnverifiedPinning versions carries higher risk in a VPN scenario than in ordinary web services, because the software itself may have no bugs but external dependencies have changed, and pinning versions causes users to miss new releases that contain fixes.
50%UnverifiedGluetun's official image is located in the Docker Hub repository qmcgaw/gluetun.
50%UnverifiedA few months ago, Gluetun experienced a similar connectivity issue (involving the PIA provider), and v3.41.0 was the fix version at that time.
50%