Jump to content

XR500 hybrid VPN DNS leak test


Recommended Posts

I'm very happy so far with my new xr500. One small thing to ask and see if maybe I'm not setting it up right though. I use ExpressVPN. Setting up the router's hybrid VPN was easy and it does mask my IP. However, when running a DNS leak test, it still shows my real ISP DNS in the test. If I just run the app or chrome extension for ExpressVPN, it masks the IP and uses their DNS servers and the leak tests come back good. So is there a setting I'm missing or is hybrid VPN missing a setting for DNS? Is the DNS settings in the ExpressVPN config file thats copy/pasted into the settings in the router? Thanks.

Link to comment
Share on other sites

2 hours ago, six4bravo said:

I'm very happy so far with my new xr500. One small thing to ask and see if maybe I'm not setting it up right though. I use ExpressVPN. Setting up the router's hybrid VPN was easy and it does mask my IP. However, when running a DNS leak test, it still shows my real ISP DNS in the test. If I just run the app or chrome extension for ExpressVPN, it masks the IP and uses their DNS servers and the leak tests come back good. So is there a setting I'm missing or is hybrid VPN missing a setting for DNS? Is the DNS settings in the ExpressVPN config file thats copy/pasted into the settings in the router? Thanks.

have you tried inputting their dns servers into the routers dns settings?

Link to comment
Share on other sites

  • Administrators
5 hours ago, six4bravo said:

If i did that, wouldn't that make all my traffic use those DNS servers then? I'm just looking to route the devices I have added to hybrid VPN to use the services and DNS, if thats even possible to separate them like that.

You're right - if you enter the VPN DNS into the network settings DNS it will apply to all devices on your network, which I assume you don't want.

Could you paste the ovpn config file you've used into this thread please. We'll probably need to check with a dev if it's sufficient to apply the VPN's DNS too.

Also, could you link us to where you ran the DNS leak test. 

Thanks.

Link to comment
Share on other sites

That is correct, the hybrid VPN settings need to add DNS configuration separate from the rest of the traffic. If you guys work on it and create a beta firmware I'd be willing to test it.

 

DNS leak test:

https://www.expressvpn.com/dns-leak-test

 

ExpressVPN config file is attached.

 

my_expressvpn_usa_-_dallas_udp.ovpn

 

In the linked thread, I see about the same speeds as they mentioned, capped at around 20-25Mbps. While running the ExpressVPN client on windows, it pulls in 150-250Mbps Download and full 12Mbps upload. So speeds are definitely disappointing but i can live with it for now. FYI, on the xr700, the hybrid VPN speeds were double that of the xr500 (around 40ish Mbps) so maybe hardware limited?

Link to comment
Share on other sites

  • Administrators

Thanks for the extra info. 

And that's correct, speeds are limited by the hardware. A router is not as powerful as a PC, so you won't be able to get the same speeds through the router.

Link to comment
Share on other sites

The XR500 use the same Hw as the Netgear R7800. The bigger memory in XR500 is not used...

The R7800 is able to do download speed of 100+ Mbps over OpenVPN with 256 bit encryption.

I have tried it and succeeded with both Voxel and DD-WRT Firmware. DD-WRT is available for XR500!

So its not a HW limitation in the XR500, its in the firmware and how the code is compiled etc.

Voxel has given optimisation information to Netgear but it seems like they have not cared about it?!

Link to comment
Share on other sites

Guest Killhippie
4 hours ago, kamoj said:

The XR500 use the same Hw as the Netgear R7800. The bigger memory in XR500 is not used...

The R7800 is able to do download speed of 100+ Mbps over OpenVPN with 256 bit encryption.

I have tried it and succeeded with both Voxel and DD-WRT Firmware. DD-WRT is available for XR500!

So its not a HW limitation in the XR500, its in the firmware and how the code is compiled etc.

Voxel has given optimisation information to Netgear but it seems like they have not cared about it?!

Have to say kamoj is right, the R7800 performs much better using Voxels firmware than the XR500's with OpenVPN.  Maybe the Devs should have a chat with Voxel, since Netgear ignored him and his fork of Netgears stock is far superior.

Link to comment
Share on other sites

  • 2 weeks later...
  • 6 months later...
  • 2 weeks later...
  • 2 weeks later...

Hi all,

same problem here with ExpressVPN and the XR500 router.

After setting up the Hybrid VPN parameters and correctly activating the VPN, we are experiecing a DNS leak. How to solve this issue?

Installed firmware release: 2.3.2.56

Using the official ExpressVPN app for Android, Windows and macOS we don't experience any problems. Only when using the XR500 router the dns leak occurs, which it makes completely not useful for our needs that router and DumaOS.

When do you plan to release a new firmware in order to solve this issue?

Thank you

Link to comment
Share on other sites

  • Administrators

Hey, welcome to the forum Mike!

This will require a firmware update to fix but unfortunately we can't give any deadlines on when that may be available. A workaround would be to change the routers DNS to the VPNs DNS servers and that should work.

Link to comment
Share on other sites

Hi Fraser,

thank you so much for your answer.

I've made many tests: I've tried the 2 DNS of ExpressVPN (https://www.expressvpn.com/setup#mediastreamer 85.203.37.1 and 85.203.37.2) but the DNS leaking always occurs.

Then I've tried to figure which DNS servers the client app is using, so I've started ExpressVPN app and tried to use the DNS servers reported in this page: https://www.expressvpn.com/dns-leak-test

Take the following ExpressVPN DNS server: 199.66.91.231  Using the following command from a client connected to DumaOS the DNS server gives a correct answer:

nslookup google.com 199.66.91.233

BUT if I try to set the same DNS server into the DumaOS configuration no domain address is correctly resolved! :(

Do you have any suggestion that could be helpful to solve the issue (for example, by modifying the DumaOS configuration AND/OR OpenVPN .ovpn file)?

Thank you

Link to comment
Share on other sites

  • 1 month later...
Guest Killhippie
54 minutes ago, Tripper said:

Any news on if this is getting fixed in the next milestone?

The next Milestone, is now DumaOS 3.0. It may be a few months before anything appears on the horizon. Then you have to figure in Netgears release schedule as the XR500 is their product.

Link to comment
Share on other sites

  • 4 months later...
Guest Killhippie

It will arrive when 3.0 is ready, nobody knows to honest when that is and no one can can tell you a date as there isn't one really.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

×
×
  • Create New...