Topic

OpenVPN: distinguish tunnel, route and DNS failures

Choose the distribution-specific client and inspect resolver ownership before changing DNS hooks.

Updated 2026-10-30

All three installers can stop after package preparation when client files are missing. An active service is a different check from an authenticated tunnel, an intended private route and working internal DNS.

Ubuntu installs a DNS helper only when supplied locally. CentOS 7 and Anolis 8 can generate one unless --no-dns is used; that flag does not remove existing hooks. If only names fail, start with the DNS incident page rather than reinstalling the VPN.