## Tips to debug VPN issues

Assuming 10.81.1.159 is the services overlay IP we're trying to reach.

Check where the VPN is running:
```
kontena service show vpn
```

Take ssh to the node where VPN is running. On that host:
```
$ docker run -ti --rm --net container:vpn-1 corfr/tcpdump -vvv -i any dst 10.81.1.159
```

Now from the client (which is connected through vpn)
```
ping 10.81.1.159
```

## Other sources for possible info

VPN logs:
```
kontena service logs vpn
```

Weave logs:
```
kontena grid logs -c weave
```

## Tracing the weave interface on host
Requires tcpdump on the host. Let run while pinging from client
```
tcpdump -vvv -i weave dst 10.81.1.159
```
## On the client side

```
$ traceroute -F 10.81.1.159 1500
```

The above should report possible MTU issues within the path