Cloudflare Developers•2mo ago

cloudflared failed to dial to edge with quic only ipv6-only vps

I'm trying to use cloudflared to create a tunnel for a site, but whenever I run cloudflared service install <token> it hangs on 2024-09-24T14:52:33Z INF Using Systemd and doesn't finish. When I look at the logs for cloudflared with systemctl status cloudflared I get the following logs:

Sep 24 14:52:34 tcg-server cloudflared[2186]: 2024-09-24T14:52:34Z INF ICMP proxy will use ::1 in zone lo as source for IPv6
Sep 24 14:52:34 tcg-server cloudflared[2186]: 2024-09-24T14:52:34Z WRN The user running cloudflared process has a GID (group ID) that is not within ping_group_range. You might need to add that user to a group within that range, or instead update the range to encompass a group the user is already in by modif>
Sep 24 14:52:34 tcg-server cloudflared[2186]: 2024-09-24T14:52:34Z WRN ICMP proxy feature is disabled error="cannot create ICMPv4 proxy: Group ID 0 is not between ping group 1 to 0 nor ICMPv6 proxy: socket: permission denied"
Sep 24 14:52:34 tcg-server cloudflared[2186]: 2024-09-24T14:52:34Z INF Starting metrics server on 127.0.0.1:40779/metrics
Sep 24 14:52:34 tcg-server cloudflared[2186]: 2024-09-24T14:52:34Z ERR Failed to create new quic connection error="failed to dial to edge with quic: INTERNAL_ERROR (local): write udp [::]:51255->198.41.192.27:7844: sendmsg: network is unreachable" connIndex=0 event=0 ip=198.41.192.27
Sep 24 14:52:34 tcg-server cloudflared[2186]: 2024-09-24T14:52:34Z INF Retrying connection in up to 2s connIndex=0 event=0 ip=198.41.192.27
(.. repeat 2x w/ different ips ..)

Sep 24 14:52:34 tcg-server cloudflared[2186]: 2024-09-24T14:52:34Z INF ICMP proxy will use ::1 in zone lo as source for IPv6
Sep 24 14:52:34 tcg-server cloudflared[2186]: 2024-09-24T14:52:34Z WRN The user running cloudflared process has a GID (group ID) that is not within ping_group_range. You might need to add that user to a group within that range, or instead update the range to encompass a group the user is already in by modif>
Sep 24 14:52:34 tcg-server cloudflared[2186]: 2024-09-24T14:52:34Z WRN ICMP proxy feature is disabled error="cannot create ICMPv4 proxy: Group ID 0 is not between ping group 1 to 0 nor ICMPv6 proxy: socket: permission denied"
Sep 24 14:52:34 tcg-server cloudflared[2186]: 2024-09-24T14:52:34Z INF Starting metrics server on 127.0.0.1:40779/metrics
Sep 24 14:52:34 tcg-server cloudflared[2186]: 2024-09-24T14:52:34Z ERR Failed to create new quic connection error="failed to dial to edge with quic: INTERNAL_ERROR (local): write udp [::]:51255->198.41.192.27:7844: sendmsg: network is unreachable" connIndex=0 event=0 ip=198.41.192.27
Sep 24 14:52:34 tcg-server cloudflared[2186]: 2024-09-24T14:52:34Z INF Retrying connection in up to 2s connIndex=0 event=0 ip=198.41.192.27
(.. repeat 2x w/ different ips ..)

I've also tried passing using cloudflared --edge-ip-version 6 --edge-bind-address <my server's public ipv6> service install <token> as well, but this doesn't seem to make any difference. :neuroHeart: thanks in advance

3 Replies

bredOP•2mo ago

update: if i manually copy the cloudflared tunnel run --token <token> part, and add in --edge-ip-version 6 --edge-bind-address just after cloudflared it runs fine, looks like this flags aren't getting passed through to the systemd service created via cloudflared service install - is this intentional?

Chaika•2mo ago

yea that's just how it works, have to modify unit file manually should just need --edge-ip-version and not --edge-bind-address

bredOP•2mo ago

❤️ thanks, just a bit difficult to guess awesome, that worked

Gaming

Programming

cloudflared failed to dial to edge with quic only ipv6-only vps