[GH-ISSUE #2451] Ubuntu kernel upgrade to 6.17.0-20 is breaking amnezia #1094

Open
opened 2026-10-13 20:34:06 +00:00 by bsakaguchi · 2 comments
Owner

Originally created by @Fleyderer on GitHub (Apr 7, 2026).
Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/2451

Describe the bug

After an unattended kernel upgrade from 6.17.0-14 to 6.17.0-20 on Ubuntu 24.04, DNS resolution stops working when connected via AmneziaWG 2.0 (and XRay too). The tunnel interface amn0 is created and routes are set correctly, but systemd-resolved does not send DNS queries through the tunnel. The same configuration works fine on a phone connected to the same Wi-Fi network.

To Reproduce
Steps to reproduce the behavior:

  1. Just start the app.

Expected behavior
DNS resolving should work

Log files

Screenshots

Desktop (please complete the following information):

  • OS: Ubuntu 24.04 LTS (desktop)
  • Broken kernel: 6.17.0-20-generic
  • Working kernel: 6.17.0-14-generic

Smartphone (please complete the following information):

Server (please complete the following information):

Additional context

  1. VPN connects, amn0 interface is created, IP 10.8.1.4 is assigned
  2. Routes are correct — ip route get 8.8.8.8 shows dev amn0 src 10.8.1.4
  3. ping 8.8.8.8 — works (ICMP through tunnel is fine)
  4. ping google.com — fails (DNS resolution broken)
  5. nslookup google.com 1.1.1.1 — connection refused
  6. nslookup google.com 8.8.8.8 — timed out
  7. ping 10.8.1.1 (tunnel gateway) — 100% packet loss, ICMP Redirect Host from 10.8.1.0
  8. Browser sometimes works because it uses DNS-over-HTTPS internally, bypassing system DNS
  9. Stopping systemd-resolved and writing nameserver 8.8.8.8 directly to /etc/resolv.conf fixes the issue — DNS works immediately
Originally created by @Fleyderer on GitHub (Apr 7, 2026). Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/2451 **Describe the bug** After an unattended kernel upgrade from `6.17.0-14` to `6.17.0-20` on Ubuntu 24.04, DNS resolution stops working when connected via AmneziaWG 2.0 (and XRay too). The tunnel interface `amn0` is created and routes are set correctly, but `systemd-resolved` does not send DNS queries through the tunnel. The same configuration works fine on a phone connected to the same Wi-Fi network. **To Reproduce** Steps to reproduce the behavior: 1. Just start the app. **Expected behavior** DNS resolving should work **Log files** - **Screenshots** - **Desktop (please complete the following information):** - **OS:** Ubuntu 24.04 LTS (desktop) - **Broken kernel:** `6.17.0-20-generic` - **Working kernel:** `6.17.0-14-generic` **Smartphone (please complete the following information):** - **Server (please complete the following information):** - **Additional context** 1. VPN connects, `amn0` interface is created, IP `10.8.1.4` is assigned 2. Routes are correct — `ip route get 8.8.8.8` shows `dev amn0 src 10.8.1.4` 3. `ping 8.8.8.8` — works (ICMP through tunnel is fine) 4. `ping google.com` — fails (DNS resolution broken) 5. `nslookup google.com 1.1.1.1` — **connection refused** 6. `nslookup google.com 8.8.8.8` — **timed out** 7. `ping 10.8.1.1` (tunnel gateway) — **100% packet loss**, ICMP Redirect Host from 10.8.1.0 8. Browser sometimes works because it uses DNS-over-HTTPS internally, bypassing system DNS 9. Stopping `systemd-resolved` and writing `nameserver 8.8.8.8` directly to `/etc/resolv.conf` **fixes the issue** — DNS works immediately
Author
Owner

@IRainman commented on GitHub (Apr 10, 2026):

Can you try CachyOS instead of Ubuntu?

<!-- gh-comment-id:4226254503 --> @IRainman commented on GitHub (Apr 10, 2026): Can you try CachyOS instead of Ubuntu?
Author
Owner

@Fleyderer commented on GitHub (Apr 11, 2026):

Can you try CachyOS instead of Ubuntu?

Unfortunately, I'm too lazy to bother with it, so no 😄

I fixed it just using another kernel, and my job is to report the issue. I would like to PR, but my expertise is not enough here now

<!-- gh-comment-id:4229107365 --> @Fleyderer commented on GitHub (Apr 11, 2026): > Can you try CachyOS instead of Ubuntu? Unfortunately, I'm too lazy to bother with it, so no 😄 I fixed it just using another kernel, and my job is to report the issue. I would like to PR, but my expertise is not enough here now
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
amnezia-vpn/amnezia-client#1094
No description provided.