amnezia-vpn/amnezia-client

Fork 0

mirror of https://github.com/amnezia-vpn/amnezia-client.git synced 2026-10-14 21:34:26 +00:00

[GH-ISSUE #2155] Per-app (split) tunnel disconnects silently after 1–5 minutes on LTE (Beeline) despite showing "active" status #956

New issue

Open

opened 2026-10-13 20:31:42 +00:00 by bsakaguchi · 2 comments

bsakaguchi commented

2026-10-13 20:31:42 +00:00

Owner

Originally created by @Evgeenii on GitHub (Jan 25, 2026).
Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/2155

Describe the bug:

When using per-app (split) tunneling, the connection is initially established successfully and the tunnel works as expected. However, after a short period of time (typically between 1 and 5 minutes), the tunnel stops forwarding traffic—even though the connection status remains "active." Affected applications (those included in the tunnel) lose network connectivity and fail to load data.
To restore functionality, I must manually disconnect and then reconnect the tunnel. After reconnection, the selected apps resume normal operation.

=============================

To Reproduce:

Steps to reproduce the behavior:

Configure a VPN profile in AmneziaVPN with per-app (split) tunneling enabled and select one or more applications.
Ensure obfuscation parameters are set, including:
Junk packet count (Jc)
Min/max junk packet sizes (Jmin, Jmax)
Special junk packet padding (S1, S2)
(Without these, the connection fails entirely on LTE.)
Connect to the VPN over LTE (Beeline mobile operator). Verify that the selected apps can access the internet through the tunnel.
Keep the connection active and use the selected apps normally (or leave them idle).
Wait between 1 to 5 minutes. Observe that the VPN status still shows as "connected", but the selected apps stop loading data or fail to reach network resources.
Manually disconnect and reconnect the tunnel.
Confirm that the apps regain connectivity immediately after reconnection.
Expected behavior
The tunnel should maintain stable, uninterrupted connectivity for all configured applications for the entire duration of the session—especially when full obfuscation (including junk packets and special padding) is properly configured and the device is on LTE.

=============================

Log files:

Logs will be attached here.

=============================

Screenshots:

Not applicable.

=============================

Smartphone:

Device: Pixel 10 Pro XL
OS: Android 16
Version: BP4A.260105.004.E1

=============================

Additional context

Amnezia app version: 4.8.12.7 (Jan 15 2026, a45bb5e)
AWG protocol version: 2.0
Issue only occurs on LTE (not observed on Wi-Fi)
Mobile operator: Beeline (Russia)
Obfuscation is mandatory: without Jc, Jmin, Jmax, and special junk packet settings (S1, S2), the tunnel fails to establish at all
Full obfuscation is applied, yet the tunnel becomes non-functional while remaining visually "connected"

AmneziaVPN-Pixel10ProXl-A16-AWG2-25-01-26.log

Originally created by @Evgeenii on GitHub (Jan 25, 2026). Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/2155 **Describe the bug:** When using per-app (split) tunneling, the connection is initially established successfully and the tunnel works as expected. However, after a short period of time (typically between 1 and 5 minutes), the tunnel stops forwarding traffic—even though the connection status remains "active." Affected applications (those included in the tunnel) lose network connectivity and fail to load data. To restore functionality, I must manually disconnect and then reconnect the tunnel. After reconnection, the selected apps resume normal operation. ============================= **To Reproduce:** Steps to reproduce the behavior: Configure a VPN profile in AmneziaVPN with per-app (split) tunneling enabled and select one or more applications. Ensure obfuscation parameters are set, including: Junk packet count (Jc) Min/max junk packet sizes (Jmin, Jmax) Special junk packet padding (S1, S2) (Without these, the connection fails entirely on LTE.) Connect to the VPN over LTE (Beeline mobile operator). Verify that the selected apps can access the internet through the tunnel. Keep the connection active and use the selected apps normally (or leave them idle). Wait between 1 to 5 minutes. Observe that the VPN status still shows as "connected", but the selected apps stop loading data or fail to reach network resources. Manually disconnect and reconnect the tunnel. Confirm that the apps regain connectivity immediately after reconnection. Expected behavior The tunnel should maintain stable, uninterrupted connectivity for all configured applications for the entire duration of the session—especially when full obfuscation (including junk packets and special padding) is properly configured and the device is on LTE. ============================= **Log files:** Logs will be attached here. ============================= **Screenshots:** Not applicable. ============================= **Smartphone:** Device: Pixel 10 Pro XL OS: Android 16 Version: BP4A.260105.004.E1 ============================= **Additional context** Amnezia app version: 4.8.12.7 (Jan 15 2026, a45bb5e) AWG protocol version: 2.0 Issue only occurs on LTE (not observed on Wi-Fi) Mobile operator: Beeline (Russia) Obfuscation is mandatory: without Jc, Jmin, Jmax, and special junk packet settings (S1, S2), the tunnel fails to establish at all Full obfuscation is applied, yet the tunnel becomes non-functional while remaining visually "connected" [AmneziaVPN-Pixel10ProXl-A16-AWG2-25-01-26.log](https://github.com/user-attachments/files/24843106/AmneziaVPN-Pixel10ProXl-A16-AWG2-25-01-26.log)

bsakaguchi commented

2026-10-13 20:31:43 +00:00

Author

Owner

@Evgeenii commented on GitHub (Feb 1, 2026):

I added persistentKeepAlive=15 inside the container in awg0. conf. The connection no longer drops. If anyone has the same issue, this works as a temporary solution

@Evgeenii commented on GitHub (Feb 1, 2026): I added persistentKeepAlive=15 inside the container in awg0. conf. The connection no longer drops. If anyone has the same issue, this works as a temporary solution

bsakaguchi commented

2026-10-13 20:31:43 +00:00

Author

Owner

@kda2495 commented on GitHub (Feb 16, 2026):

Same with MTS, PersistentKeepalive = 15 (or 10, 5) doesn't help. Occurs only on LTE. We need reconnect feature if connection is lost.

@kda2495 commented on GitHub (Feb 16, 2026): Same with MTS, PersistentKeepalive = 15 (or 10, 5) doesn't help. Occurs only on LTE. We need reconnect feature if connection is lost.

No labels

pull-request

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

amnezia-vpn/amnezia-client#956

No description provided.

Rows
Columns