mirror of
https://github.com/amnezia-vpn/amnezia-client.git
synced 2026-10-15 13:52:15 +00:00
[GH-ISSUE #2636] macOS Tahoe 26.5 — AmneziaWG stuck on status, never connected; iOS works on same Wi‑Fi #1197
Open
opened 2026-10-13 20:36:36 +00:00 by bsakaguchi
·
17 comments
No Branch/Tag specified
dev
feat/api-tests
feat/otp-login
fix/show-locked-xray-settings-page-for-servers-without-write-access
fix/serialize-log-record-writes-and-pin-log-date-format-locale
fix/libagw-review-fixes
fix/ios-xray-ipv6-leak
fix/macos-xray-ipv6-leak
feat/add-support-include-split-tunnel
fix/win-xray-app-split-tunneling
fix/bug-when-saving-after-canceling
fix/xray-reconnect-crash
fix/share-empty-config-on-ssh-timeout
fix/ssh-credentials-input
fix/updater-verify-signature
fix/async-ssh-threading
fix/xray-check-inet-and-liveness-monitor
fix/selfhosted-server-installations
feat/add-support-ikev2-macos
fix/icons-different-color-themes
feat/add_support_arm_windows
feat/add-deep-link
feat/fixed-push-notifications-on-VPN-connect-disconnect-2
feat/implement-QR-code-generation-and-scanning
feat/file-password-protection
feature/add-local-proxy
feat/add-support-split-tunnel-macos
feat/tests
fix/android-register-unacknowledged-purchase
fix/share_on_linux
mirroring-to-outside
feat_copy_docker_configs
feat/self-diagnostics-log
feat/amnezia-free-vless-switch
fix/conan_build_android_on_win
fix/linux-reconnect-dns-reliability
fix/windows-connection-stability
fix/linux-reconnect-refactoring
fix/ios-groupidentifier-order
feat/xray-subscription-link
fix/minor-fixes
fix/xray-config-inplace-edit
feat/amnezia-sdk-typed-api
feat/amnezia-sdk-integration
feat/force-update-native
refactor/marketplace-update-popup
feat/force-update
fix/valnurability_dev
chore-xcode-version
fix/empty-i1-i5
build_qt_6_10_1
master
feat/protocol-selection
fix/openvpn_install
feat/locations_change
feat/locations_change_rework
feature/local-proxy-integration
fix/filepicker_atv
fix_valnurability
fix/macos-ne-codesign-4.8.19.0
temp-branch-for-testing
fix/rebased_4_8_19_linux_fix_error
feat/proxy-storage-cache
fix/zeroed-params
fix/killswitch-blocknets-linux
update/translation_RU
fix/self_hosted_reinstall_error
feat/selfhosted-dns
fix/agp_version_up
feat/switch_to_alive_protocol
feat/support_multipeer
server_scripts_update
fix/extended-vless-configuration
chore/apple-ci-cd-macos-versions
feat/add-telemt
fix/android_keystore_read_error
feat/add-mtproxy
chore/bump-qt-version
fix/make_dbus_async
feature/dns
rebase/apple-tv-target-on-conan
fix/outbound_freedom_xray_with_dns_fix
feat/apk_support
feat/fallback-proxy
feat/apple-tv-target
fix/dns_reconnection_issue
feat/fixed-push-notifications-on-VPN-connect-disconnect
fix/linux-firewall
docker-regional-locks
appstore-review-popup
feat/storekit2
fix/uninstall-split-tunnelling-driver
revert-2376-chore/license-file
support_16kb_android
bump_version
feat_add_review_android
bugfix/translation-absence-on-subscription-key-page
feat/location-separation-by-region
bugfix/text-moving-when-resing-window
fix_backup
feature/add-purchase-android
bugfix/moved-text-while-resizing-window
bugfix/incorrect-killswitch-restore-from-backup
fix/backup-exclude-secondary-api-configs
feat/proxy-fields-for-dev-console
bugfix/ovpn-ios-fix
bugfix/linux-bundle-libraries
fix/xray-app-split-win
fix/upload-to-s3
chore/add-release-date-upload
feat_add_webview_support
feature/configuration-transfer-through-qr
feat/bot-key-unlink-device
fix/ad-link-lang-support
fix/qsecuresettings-with-android
feat/add-support-arm64-win
spanish-translations
fix/context-menu
feat/add-system-dns-support
fix/qt6-9-support
fix/qt6_9_support
bugfix/strict-killswitch-ui
android-7
chore/minor-bugfixes
feature/awg-net-fix-macos-wakeup
fixbug/ios18
bugfix/ios-ne-crash
fix/linux-tray-quit-button
cryptpad-support
bugfix/disable-linux-killswitch
fix/minor-ui-fixes
feature/setup-guid-tun2socks
feature/linux-ipsec
feature/ipsec-linux
refactoring/server-config-in-classes
feature/macos-ipsec
fix/ui-fixes-after-merge-with-d20ed4a
chore/focus_control_after_qt_6.9_migration
feature/integrate-xray-as-a-library
maxos-awg-fix
feature/add-new-awg-docker-image
chore/update-3rd-prebuild
feature/test-news
fix/api-conf-files
bugfix/split-tunneling-with-api-config
bugfix/ios-awg-new-fields
feature/special-handshake-2
feat/xray-api-support
fix/desktop-entry
bugfix/shadowsocks-cipher-setting-not-changing
feature/update-tap
bugfix/openvpn_import_fix
feature/ability-to-change-port-after-installing-xray
bugfix/strict-mode-ovpn
bugfix/win-ipv6-ovpn
bugfix/subnet-adress-setting
exception-podman-docker
bugfix/fix-listviewtype-scrolling
bugfix/win-disabled-ipv6
bugfix/win-ipv6-disabled-ovpn
feature/killswitch-strict-mode
feature/awg-network-check
feature/empty-split-tunneling-list
feature/support-info
chore/update-go-version
checking-Linux-version
update_server_scripts
bugfix/button-selection-easy-setup-page
feature/old-api-proxy
patch/user-checking
fix/correcting-version
support-podman
support_podman
user-checking-patch
feature/check-docker-version
feature/allowed-dns-list
without_lsof
chore/error-body
Update-amneziavpn_ru_RU
shiroow-patch-8
shiroow-patch-7
shiroow-patch-6
shiroow-patch-5
shiroow-patch-4
shiroow-patch-3
shiroow-patch-2
shiroow-patch-1
check_sudo_permissions
feature/euphoria
add_next_octet_to_ip_settings
bugfix/mobile-controllers-init
euphoria
bugfix/android-crush
feature/macox-network-extension
bugfix/pre-release-hotfixes
bugfix/ipsec-pfs
chore/ios-site-links
checking_sudo_permissions
feature/android-tv
improve_navigation_cpp
bugfix/linux-firewall-install
fixbug/wireguard-handshake-time
ReadmeRu_full
feature/xray-user-management
feature/subscription-end-date
chore/clang-format
feature/ru-in-readme
chore/increased-api-timeout
chore/deploy-workflow
bugfix/services-list-scroll
wheel_group_suppor
chore/bump-xcode-version
fixbug/mac-network-extension
feature/android-gpb
feature/page-home-drawer-country-selection
checking-sudo-users
bugfix/service-info-from-response
fixbug/build-macos-ne-2
android-qt-6.7.3
fixbug/build-macos-ne
bugfix/wg-windows-log-folder
feature/psk-key-api-request
bugfix/user-management-qml-warnings
fix/macos-network-extension
fixbug/macos-NE-build
bugfix/fixed-isDevEnv-initialization
bugfix/revert-ios-ovpn
feature/tun2socksSrv
fix/disable_singleapp
feature/awg-wg-name-resolving
feature/disable-dhcp
bugfix/allowed-ips-old-configs
feature/goodbyedpi
feature/add-exception-log
refactoring/remove-ipv6-from-default-routes
refactoring/singleapplication-submodule
macos-dirty-build
test/gateway
Update-amneziavpn_fa_IR.ts
bugfix/ipsec-win
fix/xray-custom-port
improve-tab-navigation
test-win-11
feature/android-tv-remote-control-support
KsZnak-patch-1
feature/awg-wg-qr
bugfix/fix-loopback-splittunel
fix/setup_host_firewall
feature/android-xray
feature/openvpn-pass
feature/connection-string
fix/clickable-errors
bugfix/api_1100_fix
feature/graphview
testsvg
feature/update-win-awg
feature/open-as-amnezia
feature/update-mozilla-upstream
bugfix/qr-code-cutting
feature/native-wg-psk
test/awg-centos
bugfix/hide_error
feature/add-uninstaller-checkbox
bugfix/cancel-button-on-install-page
bugfix/anchors-page-home-warning
awg-udptlspipe
button-focus-fix
revert-677-fix/logger
bugfix/Revert_PR_596
bugfix/allowed-ips-api-configs
bugfix/on-escape-pressed
feature/auto-scroll-for-server-selection-list
fix/ui-fixes
translations/update_fa_IR.ts
feature/new-awg-docker-container
bugfix/awg_ipv6_fix
feature/tab-navigation
fix/username-no-autocapitalization
sure
refactoring/servers-model-cleanup
feature/wg-mtu-setup-ios
3rd_adaptation_to_diff_OS
sudo_not_found
test/docker-ce
bugfix/double_clear_server_from_amnezia
fix/android
client/3rd-prebuilt
revert-559-KsZnak-translation-ru-ex
KsZnak-translation-ru-ex
KsZnak-br1
KsZnak-text-change
feature/api-awg
feature/error-code-output
feature/win_x32_builds
text/debug-output
feature/ovpn3-desktop-cli
bugfix/secureqsettings-deadlock
refactoring/change-settings-when-connected
files_check
ArchLinux-support
second_adaptation_to_diff_os
sudo
refactoring/android-build
adaptation_to_different_os
feature/online_installer_for_v4
update_to_r2
bugfix/return-after-installation
feature/custom_drawer_component
bugfix/split-tunneling
bugfix/existing-awg-container
revert-370-feature/custom_drawer_component
bugfix/adapted_awg_questiondrawer
bugfix/updated_drawer_height_pageserverdata
bugfix/translated_new_source_strings_to_chinese
feature/split-tunneling-config
feature/accessibility-support
branch_connectivity_change_fix
feature/ikev2_android
android_ss_transport
bugfix/macos_fixes
feature/nextcloud-support
feature/macos_network_extension
android_pt_transport_source
feature/ios-openvpn3-pluggable-transport-Cloak
bugfix/cloak_for_desktops_fix
arm-build-macos
fix-macos-build-brew
bugfix/ios-build-openvpnadapter-from-source
feature/download-native-wireguard-config-on-connect
feature/v2ray-container
bugfix/dpkg-busy-checking-stuck
feature/online-installer
dev-killswitch
dev-netadapters
5.0.3.0
5.0.2.1
5.0.2.0
5.0.1.5
5.0.0.5
5.0.0.2
4.8.21.0
4.8.19.0
4.8.18.0
4.8.17.0
4.8.16.0
4.8.15.4
4.8.15.0
4.8.14.5
4.8.14.1
4.8.12.9
4.8.12.8
4.8.12.7
4.8.12.6
4.8.11.4
4.8.11.3
4.8.11.2
4.8.11.1
4.8.11.0
4.8.10.0
4.8.9.2
4.8.9.1
4.8.9.0
4.8.8.3
4.8.8.2
4.8.8.1
4.8.7.2
4.8.7.1
4.8.7.0
4.8.6.0
4.8.5.0
4.8.4.5
4.8.4.4
4.8.4.3
4.8.4.2
4.8.4.1
4.8.4.0
4.8.3.2
4.8.3.1
4.8.2.3
4.8.1.9
4.8.1.0
4.8.0.5
4.7.0.0
4.6.0.3
4.6.0.1
4.5.3.0
4.5.0.0
4.4.0.0
4.3.0.0
4.2.1.0
4.2.0.1
4.1.2.0_cloak_pt_experimental
4.1.0.1
4.0.8
3.1.0
3.0.8
3.0.7
3.0.5
2.1.2
2.1.0
2.0.10
2.0.9
2.0.8
2.0.7
2.0.6
2.0.5
2.0.1
2.0
1.9.1
1.9
1.8
1.7
1.6
1.5
1.4
1.3
1.2
1.1
1.0
No labels
pull-request
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".
No due date set.
Dependencies
No dependencies set.
Reference
amnezia-vpn/amnezia-client#1197
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @vchukaev on GitHub (May 21, 2026).
Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/2636
Describe the bug
On macOS Tahoe (26.3.1–26.5), AmneziaVPN 4.8.15.4 cannot complete an AmneziaWG (
amnezia-awg2) connection to a self-hosted VPS. The app stays on “Connecting…” (or disconnects after a few seconds). Application logs never showParse command: connectedorHandshake completed.The same server and config work on iPhone on the same Wi‑Fi. On Mac,
wg showon the server often shows nolatest handshake, andtcpdumpon UDP port 585 sometimes captures 0 packets while the client appears to be connecting.Additional symptoms:
0.0.0.0/1and128.0.0.0/1are installed viautun4, but traffic does not work (curl/ DNS timeouts).VpnAllExceptSites, route mode 2) does not fix the issue; logs still never showconnected.Settings::VpnOnlyForwardSiteswhile site split is disabled (route mode 0), which looks inconsistent.To Reproduce
Steps to reproduce the behavior:
amnezia-awg2, UDP port 585).docker exec amnezia-awg2 wg showandtcpdump -ni eth0 udp port 585→ often no handshake / no UDP packets.Expected behavior
Daemon connected→Parse command: status, the client should proceed toParse command: connectedandHandshake completed.curl https://ifconfig.meshould show the VPS public IP.wg showshould showlatest handshakeand increasingtransfer.status.Log files
Attach the full application log file. Typical pattern on every attempt:
When split tunnel was enabled:
Same result: only
status, then disconnect — neverconnected.Also seen:
(Full log session: 2026-05-21, macOS Tahoe 26.3.1 → 26.5, AmneziaVPN 4.8.15.4.)
Screenshots
If applicable, add screenshots of:
ifconfig utun4/netstat -rnshowing0/1and128.0/1viautun4while not fully connectedDesktop (please complete the following information)
2edd7de)amnezia-awg2)Smartphone (please complete the following information)
Server (please complete the following information)
docker ps: container Up, port0.0.0.0:585->585/udpnc -u -vzfrom Mac to server:585: succeeds when VPN is offwg show10.8.1.1/32and10.8.1.2/32); Mac client used10.8.1.2onutun4Additional context
Likely related issues:
Workarounds attempted:
sudo route add -host <server-ip> <wifi-gateway>before connect — helps SSH not freeze; does not consistently fix VPN handshake.sudo networksetup -setdnsservers Wi-Fi 1.1.1.1 1.0.0.1— suggested in #2554 when tunnel is up but DNS is broken (not fully verified here becauseconnectednever appears in logs).Other notes:
tccutil resetfororg.amneziavpn.AmneziaVPN/com.yourcompany.AmneziaVPNfailed (bundle not found); no macOS VPN permission prompt observed on first connect.log streamforAmneziaVPN-service/wireguard-goshows little during connect on Tahoe; application logs are the main diagnostic source.@EternalPatience commented on GitHub (May 21, 2026):
I’m experiencing the same issue. In addition, I can’t connect even to the Amnezia Premium servers, while my phone connects successfully from the same Wi-Fi network.
@Qweron92 commented on GitHub (May 22, 2026):
I have the same issue! Seems that happened after latest MacOS update to the Tahoe 26.5 (but this have to be double confirm).
My log looks like that.
[2026-05-21 08:51:58.156Z] [DEBUG] Amnezia : Logger::setServiceLogsEnabled(): Logs transitioned to be enabled
[2026-05-21 08:51:58.157Z] [INFO] Amnezia : Logging has enabled on AmneziaVPN version 4.8.15.4
2edd7de[2026-05-21 08:51:58.158Z] [INFO] Amnezia : macOS Tahoe (26.5) (x86_64)
[2026-05-21 08:52:24.215Z] [DEBUG] Amnezia : VpnConfigurator::getDnsForConfig "1.1.1.1" "1.0.0.1"
[2026-05-21 08:52:24.216Z] [DEBUG] Amnezia : "Trying to connect to VPN, server index is 0, container is amnezia-awg, route mode is" Settings::VpnOnlyForwardSites
[2026-05-21 08:52:24.216Z] [DEBUG] Amnezia : "Site split tunneling is disabled, route mode is 0"
[2026-05-21 08:52:24.216Z] [DEBUG] Amnezia : "App split tunneling is disabled, route mode is 0"
[2026-05-21 08:52:24.216Z] [DEBUG] Amnezia LocalSocketController : Initializing
[2026-05-21 08:52:24.216Z] [DEBUG] Amnezia LocalSocketController : Connecting to: /var/run/amneziavpn/daemon.socket
[2026-05-21 08:52:24.216Z] [DEBUG] Amnezia LocalSocketController : Daemon connected
[2026-05-21 08:52:24.216Z] [DEBUG] Amnezia LocalSocketController : Check status
[2026-05-21 08:52:24.238Z] [DEBUG] Amnezia LocalSocketController : Reading
[2026-05-21 08:52:24.238Z] [DEBUG] Amnezia LocalSocketController : Parse command: status
[2026-05-21 08:52:38.729Z] [DEBUG] Amnezia LocalSocketController : Deactivating
[2026-05-21 08:52:38.730Z] [DEBUG] Amnezia : VpnProtocol::setConnectionState "Disconnected"
[2026-05-21 08:52:38.730Z] [DEBUG] Amnezia : Connection state: 'Disconnected'
[2026-05-21 08:52:38.804Z] [DEBUG] Amnezia LocalSocketController : Reading
[2026-05-21 08:52:38.804Z] [DEBUG] Amnezia LocalSocketController : Parse command: disconnected
[2026-05-21 08:52:38.805Z] [DEBUG] Amnezia : VpnProtocol::setConnectionState "Disconnected"
[2026-05-21 08:52:38.805Z] [DEBUG] Amnezia : VpnConnection::onConnectionStateChanged: Successfully flushed DNS
[2026-05-21 08:52:38.968Z] [DEBUG] Amnezia : VpnConnection::onConnectionStateChanged: Successfully cleared saved routes
[2026-05-21 08:52:38.968Z] [DEBUG] Amnezia LocalSocketController : Deactivating
[2026-05-21 08:52:38.968Z] [DEBUG] Amnezia : VpnProtocol::setConnectionState "Disconnected"
@Dimak47X commented on GitHub (May 22, 2026):
I have the same problem: my VPN (AmneziaWG 2.0 protocol) on MacOS (Tahoe 26.5) has stopped working recently (apparently related to a MacOS update). The Amnesia VPN app keeps stuttering "Connecting" and won't connect, while the Amnesia WG app switched its status to "Connected" but isn't receiving any packets.
The following workaround helped: go to System Preferences -> Network -> VPN and Filters. In the Filters and Proxy section, I had several filters enabled (Cisco AnyConnect, Kaspersky, and Radio Silence). I tried disabling them all (I had to first exit Cisco and Kaspersky apps), meaning I had a red dot in all the lines. After that, the VPN connected successfully (both in Amnesia VPN and Amnesia WG apps).
So, if you enable even one filter from the "Content Filter" category, the VPN stops working (it doesn't matter which app you enabled the filter for). If all of them are disabled then VPN start working normally. Updating the Amnezia VPN app to the latest version didn't help.
Of course if you want to use Cisco AnyConnect (like in my case) you have to start it and enable all filters back. It looks like something in MacOS broken under the hood in terms of network filtering.
@vchukaev commented on GitHub (May 22, 2026):
It also dont work on previous versions Tahoe
@highel commented on GitHub (May 22, 2026):
yes, upgrading Tahoe 26.1 to Tahoe 26.5 did NOT affect bug with network filters.
@lodagon commented on GitHub (May 22, 2026):
doesn't work on tahoe but works on sonoma on the same wifi;
@V-Nezlo commented on GitHub (May 22, 2026):
Same thing, the connection broke a few days ago. Broke on Mac (26.1) and Manjaro (updated), but still works on two phones and Windows PCs. Reinstalling the app has not helped.
@aaSeleznev commented on GitHub (May 22, 2026):
Having the same problem on Tahoe 26.5 right after the update
Tried this one, and it did help some of my connections. It didn't help with them all though.
@yucheburkov commented on GitHub (May 22, 2026):
Have the same. it looks like something is with DNS. I did roll back to previous versions, but without any success.
Helped only solution, when I fist connect Outline VPN, then Amnezia connects without any issues, and after that disconnecting Outline. Creasy, but it works and with connection to the same server.
@carmiex commented on GitHub (May 22, 2026):
Initially, I thought the problem was directly related to Roskomnadzor, since it initially appeared on Mac devices in Moscow. After two or three days, the server in Samara received the last handshake from the Mac at exactly 2 a.m.
@DG12 commented on GitHub (May 22, 2026):
I have the issue with simply trying to ssh to any other host on the LAN since Tahoe 26.5.
last entries from ssh -v answer are
No problem from older MacBooks
@StanleyOneG commented on GitHub (May 22, 2026):
Confirm the same issue on Tahoe 26.5 here. iOS app works well on the same wifi net
@SergeLyamin commented on GitHub (May 23, 2026):
I'm experiencing similar symptoms on MacOS Sonoma 14.6.1 (23G93). AWG2 broke a few days ago. I turned on Xray, it worked for a couple more days, and then also broke. Updating Amnezia to 4.8.15.4 didn't help.
The protocols work on other devices, including iOS devices, on the same networks.
@insoftjla commented on GitHub (May 24, 2026):
Hi. I had a similar issue and managed to fix it — maybe it will be useful to someone here.
Related: #2650
@Somniari commented on GitHub (May 25, 2026):
This worked, many thanks (Sonoma 14.7.6). Disabled "Content filter" only.
@SergeLyamin commented on GitHub (May 25, 2026):
Yes, it worked! Thank you very much =)
I have Cisco AnyConnect installed. I removed the filters, but I'll probably have to turn them on and off again. It's very inconvenient.
@MasterBin commented on GitHub (May 25, 2026):
Confirm the same issue, other not-macos devices in the same network work fine