microsoft / microsoft/WSL

OpenVPN network is not accessible in WSL when connection established from (Windows Host OpenVPN Application), it is accessible only if the connection established inside WSL2 container.

Open
#13,293 17 comments 3 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

network question
Dominant language
C++
Stars
33.7k
Forks
1.8k
Avg merge
3d 17h
Merged PRs (30d)
116

Description

Windows Version

Microsoft Windows [Version 10.0.22631.5699]

WSL Version

2.5.9.0

Are you using WSL 1 or WSL 2?
  • WSL 2
  • WSL 1
Kernel Version

6.6.87.2-1

Distro Version

Kali 2025.1

Other Software

OpenVPN v3.7.2 (4253)

Repro Steps

i used Hack The Box OpenVPN File from https://app.hackthebox.com/starting-point

1- try to run any openVPN file on windows host.
2- ping any available IP on the VPN from within the WSL terminal.
3- you will notice the target IP is unreachable.

as we see in the image below, the openVPN is connected using "Windows OpenVPN App", yet the WSL can't reach the target IP.
Image

then run the same openVPN file from within the WSL terminal.
1- use the command sudo openvpn --config /path/to/vpnFile.ovpn
2- try to ping any available IP on the VPN from within the WSL terminal.
3- the target IP will answer.

in the following image, i ran the same VPN file from within the WSL comtainer, not the Windows OpenVPN App, then used ping command and the target IP was reachable.
Image

Expected Behavior

i expect to Run VPN files from the windows host (not the WSL), and access the VPN from both windows and WSL at the same time.

Actual Behavior

i can't access VPN in WSL if the connection is established from the Windows host.
WSL can access VPN only and only if the connection is established from the WSL container it self.

Diagnostic Logs

The File is 99MB so it github rejected the upload, so i uploaded it to google drive:
WSLNetworkingLogsDriveURL.zip

here is a dummy file for github bot
WslNetworkingLogs-2025-07-26_18-20-19.zip

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the issue with WSL 2, Kali 2025.1, OpenVPN 3.7.2 on the Windows host, and the provided Hack The Box configuration, then inspect the attached WSL networking logs. Verify whether the VPN target remains unreachable from WSL while the host connection is active; done means the VPN is accessible from both Windows and WSL at the same time.

Written by the indexing model from the issue text.

Assessment

Domain
networking, operating-systems
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.