Hi,
I intercepted the conf file an in ProgramData\Pritunl\Temp and got
dev tun
dev-type tun
connect-retry-max 1
remote serverA 15106 udp
remote serverA 15106 udp
remote serverB 15106 udp
nobind
persist-tun
cipher AES-128-CBC
This one works because the authenticating server is always serverA
And I also got
dev tun
dev-type tun
connect-retry-max 1
remote serverB 15106 udp
remote serverA 15106 udp
remote serverA 15106 udp
nobind
persist-tun
cipher AES-128-CBC
This one does not work because the token is only sent by serverA (only one behind the LB)
When I have this failing config, here is what is in the Pritunl log
[2025-11-18 19:10:58][INFO] ▶ connection: Authorization successful ◆ allow=true ◆ client_disconnect=false ◆ client_disconnect_waiters=0 ◆ client_disconnected=false ◆ client_provider=true ◆ client_startime=1 ◆ data_iface=“” ◆ data_mode=“” ◆ data_remotes=string{“LB*”, “ServerB”, “ServerA”} ◆ data_status=“connecting” ◆ data_timestamp=0 ◆ data_tun_iface=“” ◆ ovpn_auth_failed=false ◆ ovpn_cmd=false ◆ ovpn_connected=false ◆ ovpn_dir=“C:\Program Files (x86)\Pritunl\openvpn” ◆ ovpn_last_auth_failed=-1 ◆ ovpn_management_pass=false ◆ ovpn_management_port=0 ◆ ovpn_path=“C:\Program Files (x86)\Pritunl\openvpn\openvpn.exe” ◆ ovpn_remotes=string{} ◆ ovpn_running=0 ◆ ovpn_tap_iface=“” ◆ profile_device_auth=true ◆ profile_disable_dns=false ◆ profile_disable_gateway=false ◆ profile_dynamic_firewall=false ◆ profile_force_connect=false ◆ profile_force_dns=false ◆ profile_geo_sort=false ◆ profile_id=“649e7c9b9298205a” ◆ profile_mode=“ovpn” ◆ profile_reconnect=true ◆ profile_sso_auth=false ◆ profile_system_profile=false ◆ profile_timeout=false ◆ reason=“” ◆ remote=“ServerA” ◆ remote6=“” ◆ state_closed=false ◆ state_closed_waiters=0 ◆ state_deadline=false ◆ state_delay=false ◆ state_id=“d5f684fef8c8a012” ◆ state_interactive=true ◆ state_no_reconnect=false ◆ state_stop=false ◆ state_system_interactive=false ◆ state_temp_paths=string{} ◆ state_time=time.Date(2025, time.November, 18, 19, 10, 56, 983823200, time.Local) ◆ wg_bash_path=“” ◆ wg_conf_path=“” ◆ wg_conf_path2=“” ◆ wg_connected=false ◆ wg_last_handshake=0 ◆ wg_path=“” ◆ wg_priv_key=false ◆ wg_pub_key=false ◆ wg_quick_path=“” ◆ wg_server_pub_key=false ◆ wg_sso_start=time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC) ◆ wg_sso_token=false ◆ wg_util_path=“”
So I have remote=”ServerA” in Pritunl and still, OpenVPN is started with
remote serverB 15106 udp
remote serverA 15106 udp
remote serverA 15106 udp
Moreover, when it works we have data_remotes=string{“LB*”, “ServerA”, “ServerB”}
So it seems when we get remotes=string{“LB*”, “ServerA”, “ServerB”} it works but data_remotes=string{“LB*”, “ServerB”, “ServerA”} doesn’t , even if we have in all cases remote=“ServerA”
connection: Resolved remotes ◆ public_address=“” ◆ public_address6=“”