Testing CLAT for IPv6-only mobile networks

General
#108

No worries, we might need to tackle that WLAN issue in another scope anyways. There seems to be something to do with the WLAN on the X10 III. Just need to find out what.

The VPN fix was not then complete yet.

And after getting these logs - much appreciated! - it was evident what was wrong. The old implementation to remove routes in ConnMan was made only for host routes and when trying to remove the default route from clat interface when the VPN mode is set it just simply returned “ok” even though nothing could be done. Well, these things are common, apparently I fixed that later on only for IPv6.

There is now 1.32+git194.2 in the build that should address the issue of dropping the clat default route in case VPN is on. The logs show that the process does detect VPN correctly and hopefully now there is an improvement to the use and functionality.

And IPv6 will be unfortunately leaked when running an IPv4 VPN over CLAT that is using the IPv6 as transport. Dropping anything related to IPv6 in that case would, in theory, cripple the network. But one step at a time.

2 Likes
#109

Apparently this is now built and is available for testing.

#110

With 194.2 output on browserleaks.com/ip is the same with vpn enabled or disabled.
VPN and clat interfaces are both up.
Log is on its way.

[Solved] VPN ipv6 leaks with ivpn - 10III
#111

Updated to 1.32+git194.2 - regression observed - now also NordVPN leaks both IPv4 and IPv6 only DNS remains in the target location. Logs have been sent. Voting systematically on ProtoVPN forum for IPv6-enabled VPN but no more points to put in there, maybe other ProtonVPN users here: vote you too!

#112

Right. I’m really not sure how the VPN over clat will be shown there. I have a 1.32+git194.3 in the build soon which could help with that issue. It might be good to also check that if the traffic on the actual interface is encrypted VPN traffic or regular traffic that would show all the HTTPS requests made, for instance.

I noticed that the host route was missing for the VPN. That is added in the new version and figuring out that was a quite a struggle since this might be working better if we’d move whole CLAT as integral part of ConnMan instead of plugin. But that is a completely separate work task, a big one. Having the whole implementation as a plugin requires some not-so-clean approaches.

But let us know how this version pans out. I’ll be away from this for the next few weeks, so no updates unfortunately for a while. The PR to add VPN support is there so if someone has the time, willpower and knowhow please add proposals there if something obvious was missed.

1 Like
#113

I wonder how that can be. That version had only the default route dropped from CLAT when VPN is up. Interesting. But it was quite obvious from the logs you’ve sent (thank you) that there was something else needed, and hopefully 1.32+git194.3 has that addressed.

Checking the output with tcpdump -i clat and tcpdump -i vpn0 (or which vpn interface is used, 0…9) might give some hint where data is going. tcpdump is available in the tools repo.

[Solved] VPN ipv6 leaks with ivpn - 10III
#114

Logs for 1.32+git194.3 sent 2023-03-18.

1 Like
#115

So yesterday I tested hotspot extensively. In the beginning I had to restart the network via the utility. After that, my Steam Deck connected to the phone without any problems. At first it was just a bit of a hassle connecting to Steam, but the internet itself worked because I was able to play Diablo IV. Had no problems with hotspot for about 6 hours. The test continues tonight.

Thank you for the excellent work!

2 Likes
#116

The CLAT changes have now been released in the latest 4.5.0. Don’t forget to remove your testing repo if your mobile data is working now with ssu rr.

Work still continues on VPN compatibility with CLAT.

8 Likes
#117

@abranson and all the people testing and providing logs: Thank you very much for CLAT implementation.

5 Likes
#118

I want to thank you all developers for your tremendous effort, and I am ready to test what I can. I have an Xperia III with an Italian Vodafone SIM in slot 1displaying in 4.5.0.19 exactly the same behavior as in 4.5.0.18, as follows (slot 2 is empty)

  1. the clat interface shows up in no case (at least, I don’t see it)
  2. VoLTE registers OK in all cases
  3. If I choose IP or Dual in the APN configuration, it gets an IP address but says “limited connectivity”, doesn’t even ping the gateway, so no joy
  4. If I choose IP6, it does get an IP6 address on rmnet_data0@rmnet_ipa0 and an IP4 address at rmnet_data1@rmnet_ipa0, happily says “enabled” (not “connected”), but in fact the network is unreachable, no double triangle icon shows up near the 4G indicator, but in the upper menu the mobile data icon is lit, as if the service was enabled.
  5. Another difference between IP and IP6 is that with IP, if I try to ping the gateway it waits forever, while with IP6 it says Network unreachable immediately.

Am I missing something? How could I help solving this? Thank you very much!

3 Likes
#119

A few things to verify/clarify/try:

  • Make sure your data call settings are reset to default. There’s a menu option at the top of its page to do that. I guess it probably should be ‘dual’, as most are, but leave it as default. Often in these situations it won’t work if you request ‘IPv6’ even if that’s what you end up getting.

  • There still seems to be a bug where a previously obtained IPv4 address isn’t released, and keeps popping up again even though it’s invalid. Once you’ve reset the data call settings, make sure you reboot to completely reinitialize everything so there are no lingering false addresses hanging around. It sounds like this might be what is causing the issues you state.

  • If you have VoLTE enabled, that uses one of those rmnet interfaces, with an IPv6 configuration. In normal operation on CLAT-requiring networks you will have two IPv6 interfaces running. The VoLTE interface will not carry internet traffic. It might be worth disabling it while you debug this, to avoid confusion.

Hope that helps.

2 Likes
#120

Mobile data do not work at all, and never worked (except in the time interval between flashing and rebooting), on the Xperia 10 III with Vodafone IT: Unable to use mobile data on Sony Xperia 10 III 4.4.0.64

2 Likes
#121

Confirm. Nothing changed, im still without mobile data. Plus PL.

2 Likes
#122

Some positive news (expected, but always welcome), after 4.5.0.19 update (CLAT), after removing connman 1.32+git194.3 + the clat test repository, the phone can be used as hotspot with my IPv6-only operator. With plain vanilla 4.5.0.18 the hotspot did not work. CLAT is doing its work OK!

VPNs (Nord- and Proton-) still do not work (expected): one new ‘feature’ with those still useless VPN settings is that if you have the Advanced → Disable IPv6 Yes and you attempt to turn that VPN on, it is a kiss of death to the network connection, the VPN will not connect but the non-VPN network will not come back, either. If the setting remains Default, the VPN connects but has no effect whatsoever (ipleak dot net site). Same operator, different SIM, same network, a gulag phone: both (paid) VPNs work as expected on the aforementioned lP-leak test site. When needed, I can provide more logs, as I did above.

Thank you for this update!

3 Likes
Internet sharing via IP6?
#123

Sony Xperia 10III user here. On 4.5.19 ja mobil (t-mobile de/congstar reseller) hotspot now working with protocol dual - which did not work before.
Thanks for your work!

3 Likes
#124

There seem to be issues still with a couple of providers. Can’t say for certain that CLAT is the answer to these, but if anyone on those networks could collect some logs as described at the top of this thread then it’s possible that they might give a clue towards how this fix could be extended to cover those networks. Please make sure that your data call settings are set to the default for your testing.

1 Like
#125

The Xperia 10 that I use as internet gateway ‘for everything in the house’ provides now a much more ‘reactive’ connection, will say, response to user actions (clicks, interactive pages) is noteable faster now. Pages with a lot of pictures (e.g. gmx.at, orf.at) load much faster now.
This is both on the phone and on a laptop connected with the mobile access point of the phone.
Provider is Vodafone Spain.
Thank you so much!

1 Like
#126

To all of you with Vodafone as provider, try to set connection type for the Vodafone SIM slot to IP only!
In my case Vodafone Germany still provides IPv4 addresses and it help to solve my connections problems with Vodafone under 4.5.0.19.
(IPv4 mobile data connection not possible - #106 by Fubo)

#127

It does not work for Vodafone IT, since it only provides an IPv6 address.