VPN Troubleshoot Runbook

Severity: P2

Triggers

• Devices losing VPN connection
• Tunnel ports unreachable
• Exit node health alerts

Steps

1. Check VPN Hub

ssh dev-server "docker logs --tail 20 vpn-hub-v5"
ssh dev-server "curl -s http://localhost:8108/api/status"

2. Check Exit Nodes

for node in exit-int exit-brk exit-sky; do
  echo "=== $node ==="
  ssh $node "systemctl status z-core-exit-node 2>/dev/null || echo 'No service'"
done

3. Check Device Tunnels

ssh dev-server "ss -tlnp | grep -E '225[0-9]|335[0-9]'"

4. Fix Specific Device Tunnel

# Use the z-fix-tunnel agent
/z-fix-tunnel <device-name>