Arch default connectivity check - Limited Connectivity after connecting to VPN (openconnect)

Issues & Assistance Networking Support
1

Hello, I am hoping someone might have the answer to this simple question.

TL;DR: Where does Garuda Linux store it's URL for testing internet connectivity and can it be changed?

I use the openconnect vpn client to connect to a vpn service that allows me to access local (LAN) resources and remote (VPN) services as well as browse the internet (currently posting from this connection).

The problem I see via notification (NetworkManager) is that my network connection now has limited connectivity. I have multiple devices connected locally (wired & wireless) so I know the issue is not with my network infrastructure hardware.

I have tested and experienced identical behavior on multiple linux distributions with the same vpn connection and client. After researching the issue, I discovered most distributions will attempt to contact a URL to confirm the now established network connection indeed has internet access.

I was wondering if someone might know this URL and where it might be located in the filesystem?

Thanks,

output of command as requested:

λ garuda-inxi
System:
Kernel: 5.18.1-zen1-1-zen arch: x86_64 bits: 64 compiler: gcc v: 12.1.0
parameters: BOOT_IMAGE=/@/boot/vmlinuz-linux-zen
root=UUID=159c93a0-fb54-4226-9244-a78d704c36cf rw rootflags=subvol=@
quiet
cryptdevice=UUID=a30f9751-1800-4d79-a969-3c083c87c493:luks-a30f9751-1800-4d79-a969-3c083c87c493
root=/dev/mapper/luks-a30f9751-1800-4d79-a969-3c083c87c493 quiet splash
rd.udev.log_priority=3 vt.global_cursor_default=0
resume=/dev/mapper/luks-46677273-9ceb-42ca-8365-85fe6d1c09a4 loglevel=3
Desktop: KDE Plasma v: 5.24.5 tk: Qt v: 5.15.4 info: latte-dock
wm: kwin_x11 vt: 1 dm: SDDM Distro: Garuda Linux base: Arch Linux
Machine:
Type: Laptop System: Dell product: XPS 13 9310 v: N/A
serial: <superuser required> Chassis: type: 10 serial: <superuser required>
Mobo: Dell model: 0DMPXV v: A00 serial: <superuser required> UEFI: Dell
v: 3.6.0 date: 03/17/2022
Battery:
ID-1: BAT0 charge: 40.6 Wh (100.0%) condition: 40.6/51.0 Wh (79.6%)
volts: 8.3 min: 7.6 model: BYD DELL FP86V0B type: Li-poly serial: <filter>
status: full
CPU:
Info: model: 11th Gen Intel Core i7-1185G7 bits: 64 type: MT MCP
arch: Tiger Lake family: 6 model-id: 0x8C (140) stepping: 1 microcode: 0xA4
Topology: cpus: 1x cores: 4 tpc: 2 threads: 8 smt: enabled cache:
L1: 320 KiB desc: d-4x48 KiB; i-4x32 KiB L2: 5 MiB desc: 4x1.2 MiB
L3: 12 MiB desc: 1x12 MiB
Speed (MHz): avg: 1586 high: 2828 min/max: 400/4800 scaling:
driver: intel_pstate governor: powersave cores: 1: 899 2: 2828 3: 1632
4: 963 5: 1510 6: 1429 7: 1480 8: 1954 bogomips: 47923
Flags: avx avx2 ht lm nx pae sse sse2 sse3 sse4_1 sse4_2 ssse3 vmx
Vulnerabilities:
Type: itlb_multihit status: Not affected
Type: l1tf status: Not affected
Type: mds status: Not affected
Type: meltdown status: Not affected
Type: spec_store_bypass
mitigation: Speculative Store Bypass disabled via prctl
Type: spectre_v1
mitigation: usercopy/swapgs barriers and __user pointer sanitization
Type: spectre_v2
mitigation: Enhanced IBRS, IBPB: conditional, RSB filling
Type: srbds status: Not affected
Type: tsx_async_abort status: Not affected
Graphics:
Device-1: Intel TigerLake-LP GT2 [Iris Xe Graphics] vendor: Dell
driver: i915 v: kernel ports: active: DP-5,DP-6 off: eDP-1
empty: DP-1, DP-2, DP-3, DP-4, DP-7, HDMI-A-1 bus-ID: 00:02.0
chip-ID: 8086:9a49 class-ID: 0300
Device-2: Logitech Webcam C310 type: USB driver: snd-usb-audio,uvcvideo
bus-ID: 3-4.1:5 chip-ID: 046d:081b class-ID: 0102 serial: <filter>
Device-3: Microdia Integrated_Webcam_HD type: USB driver: uvcvideo
bus-ID: 3-6:4 chip-ID: 0c45:672a class-ID: 0e02
Display: x11 server: X.Org v: 21.1.3 with: Xwayland v: 22.1.2
compositor: kwin_x11 driver: X: loaded: modesetting
alternate: fbdev,intel,vesa gpu: i915 display-ID: :0 screens: 1
Screen-1: 0 s-res: 3840x1080 s-dpi: 96 s-size: 1015x285mm (39.96x11.22")
s-diag: 1054mm (41.51")
Monitor-1: not-matched mapped: DP-3-1 pos: primary,left res: 1920x1080
hz: 60 dpi: 93 size: 522x293mm (20.55x11.54") diag: 599mm (23.57")
modes: N/A
Monitor-2: not-matched mapped: DP-3-2 pos: primary,right res: 1920x1080
hz: 60 dpi: 93 size: 522x293mm (20.55x11.54") diag: 599mm (23.57")
modes: N/A
Monitor-3: eDP-1 note: disabled model: Samsung 0x414f built: 2020
res: 1920x1080 dpi: 305 gamma: 1.2 size: 288x180mm (11.34x7.09")
diag: 340mm (13.4") ratio: 16:10 modes: 3456x2160
OpenGL: renderer: Mesa Intel Xe Graphics (TGL GT2) v: 4.6 Mesa 22.1.0
direct render: Yes
Audio:
Device-1: Intel Tiger Lake-LP Smart Sound Audio vendor: Dell
driver: sof-audio-pci-intel-tgl
alternate: snd_hda_intel,snd_sof_pci_intel_tgl bus-ID: 00:1f.3
chip-ID: 8086:a0c8 class-ID: 0401
Device-2: Logitech Webcam C310 type: USB driver: snd-usb-audio,uvcvideo
bus-ID: 3-4.1:5 chip-ID: 046d:081b class-ID: 0102 serial: <filter>
Device-3: C-Media Blue Snowball type: USB
driver: hid-generic,snd-usb-audio,usbhid bus-ID: 3-4.3.1:8
chip-ID: 0d8c:0005 class-ID: 0300 serial: <filter>
Sound Server-1: ALSA v: k5.18.1-zen1-1-zen running: yes
Sound Server-2: PulseAudio v: 16.0 running: no
Sound Server-3: PipeWire v: 0.3.51 running: yes
Network:
Device-1: Qualcomm QCA6390 Wireless Network Adapter vendor: Rivet Networks
driver: ath11k_pci v: kernel pcie: gen: 2 speed: 5 GT/s lanes: 1 link-max:
gen: 3 speed: 8 GT/s bus-ID: 72:00.0 chip-ID: 17cb:1101 class-ID: 0280
IF: wlp114s0 state: up mac: <filter>
Device-2: Realtek RTL8153 Gigabit Ethernet Adapter type: USB
driver: r8152 bus-ID: 2-3.4:6 chip-ID: 0bda:8153 class-ID: 0000
serial: <filter>
IF: enp0s13f0u3u4 state: down mac: <filter>
IF-ID-1: vpn0 state: up speed: 10 Mbps duplex: full mac: N/A
Drives:
Local Storage: total: 1.86 TiB used: 31.38 GiB (1.6%)
SMART Message: Unable to run smartctl. Root privileges required.
ID-1: /dev/nvme0n1 maj-min: 259:0 vendor: Samsung
model: PM9A1 NVMe 2048GB size: 1.86 TiB block-size: physical: 512 B
logical: 512 B speed: 63.2 Gb/s lanes: 4 type: SSD serial: <filter>
rev: 36308129 temp: 54.9 C scheme: GPT
Partition:
ID-1: / raw-size: 1.83 TiB size: 1.83 TiB (100.00%) used: 31.38 GiB (1.7%)
fs: btrfs dev: /dev/dm-0 maj-min: 254:0
mapped: luks-a30f9751-1800-4d79-a969-3c083c87c493
ID-2: /boot/efi raw-size: 300 MiB size: 299.4 MiB (99.80%)
used: 720 KiB (0.2%) fs: vfat dev: /dev/nvme0n1p1 maj-min: 259:1
ID-3: /home raw-size: 1.83 TiB size: 1.83 TiB (100.00%)
used: 31.38 GiB (1.7%) fs: btrfs dev: /dev/dm-0 maj-min: 254:0
mapped: luks-a30f9751-1800-4d79-a969-3c083c87c493
ID-4: /var/log raw-size: 1.83 TiB size: 1.83 TiB (100.00%)
used: 31.38 GiB (1.7%) fs: btrfs dev: /dev/dm-0 maj-min: 254:0
mapped: luks-a30f9751-1800-4d79-a969-3c083c87c493
ID-5: /var/tmp raw-size: 1.83 TiB size: 1.83 TiB (100.00%)
used: 31.38 GiB (1.7%) fs: btrfs dev: /dev/dm-0 maj-min: 254:0
mapped: luks-a30f9751-1800-4d79-a969-3c083c87c493
Swap:
Kernel: swappiness: 133 (default 60) cache-pressure: 100 (default)
ID-1: swap-1 type: zram size: 31.07 GiB used: 0 KiB (0.0%) priority: 100
dev: /dev/zram0
ID-2: swap-2 type: partition size: 34.17 GiB used: 0 KiB (0.0%)
priority: -2 dev: /dev/dm-1 maj-min: 254:1
mapped: luks-46677273-9ceb-42ca-8365-85fe6d1c09a4
Sensors:
System Temperatures: cpu: 61.0 C mobo: 52.0 C
Fan Speeds (RPM): cpu: 6105 mobo: 5791 fan-2:
Info:
Processes: 350 Uptime: 1h 2m wakeups: 7 Memory: 31.07 GiB
used: 9.06 GiB (29.1%) Init: systemd v: 251 tool: systemctl Compilers:
gcc: 12.1.0 Packages: pacman: 1235 lib: 292 Shell: fish v: 3.4.1
default: Bash v: 5.1.16 running-in: konsole inxi: 3.3.16
Garuda (2.6.3-2):
System install date:     2022-06-01
Last full system update: 2022-06-02
Is partially upgraded:   No
Relevant software:       NetworkManager
Windows dual boot:       No/Undetected
Snapshots:               Snapper
Failed units:
2

I cannot answer your question in bold above in your OP.

However,

I also have that notification when I connect to my VPN, but it does not affect in any way internet speed nor any other features the VPN is not supposed to block or hinder.

My question to you is “Have you benchmarked and identified that you have speed issues or is speed and any other features considered normal?”

3

Hello @FGD , thanks for your reply.

I have done multiple speed tests through my ISP and speedtest.net from a number of different available hosted locations. I also have transfered multiple large files (8GB+) to the VPN site and consistently see the advertised speed.

IF-ID-1: vpn0 state: up speed: 10 Mbps duplex: full mac: N/A

I don't believe it is related to speed as I've seen reports of similar issues elsewhere related to not being able to access a site that's hosting a 'check_network_status.txt' like this post here:

following the suggested course of action does not appear to resolve the issue even though I am able to access the indicated URL without error in a web browser of my choice

4

The solution of that Manjaro thread is pretty interesting to say the least. :smiley:

  • Are you also experiencing that yellow overlay icon on the bottom right of NetworkManager's systray icon?

  • Then when you click on the NM systray icon, what do you see inside?
    In my case I see my wired connection as CONNECTED and I also see my VPN Provider as being CONNECTED to.
    That Manjaro guy was not seeing the VPN connection. How about you?

  • Also, what exactly does your "limited connection" notification say?
    This?

Limited Connectivity                                           4:47PM
This device appears to be connected to a network but is unable to reach the internet.

Personally, I have always thought this was normal behavior when connecting to VPN as nothing is affected by it.

Now if there is such a file or something pinged by Garuda, like for Manjaro, there are a few people with much better network knowledge here that might know.

1 Like
5

It seems to make sense that NetworkManager simply refers to a website for checking internet connectivity. I will have to read more about the configuration options.

I actually don’t see any specific coloring of the icons that appear to indicate a problem, but I’m running the KDE Dr460nized edition which has a great number of customization to the theme.

I actually do see both connections with status connected as I’m using the NetworkManager plugin for openconnect.

Mine reports:

Wired Ethernet: Connected to Wired connection 1 (limited connectivity)
VPN: Connected to vpn (limited connectivity)

this was also somewhat of interest:

> nmcli general
STATE                  CONNECTIVITY  WIFI-HW  WIFI      WWAN-HW  WWAN
connected (site only)  limited       enabled  disabled  missing  enabled
6

The connectivity check file is located at /usr/lib/NetworkManager/conf.d/20-connectivity.conf, with the following contents:

[connectivity]
uri=http://ping.archlinux.org/nm-check.txt
5 Likes
7

Fabulous! Thanks @tbg

1 Like
8

Just in case anyone happens to stumble across this, I did "solve" my problem by creating the following:

File: /etc/NetworkManager/conf.d/20-connectivity.conf
[connectivity-vpn0]
enabled=false

vpn0 was the name of my vpn interface that didn't support connectivity checking
I have not experienced the same notification since

3 Likes
9

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.