[Fire TV Q&A, Help & Troubleshooting] 4point3:
I sideloaded OpenVPNConnect and OpenVPN(blinkt.de) on my FireTvStick 5.2.1.1.

Both apps are able to connect to my vpn server and according to their own logs routes (especialle for 0.0.0.0) have been created and the sequence is completed.

But in opposite to all other my android devices where the same vpn config works the FireTvStick is not using the vpn.

The output of logcat follows for both applications.

de.blinkt.openvpn.apk:

12-20 19:59:37.588: D/VpnJni(987): Address added on tun0: 10.8.0.10/30
12-20 19:59:37.608: D/ConnectivityService(987): registerNetworkAgent NetworkAgentInfo{ ni{[type: VPN[], state: CONNECTED/CONNECTED, reason: (unspecified), extra: (none), roaming: false, failover: false, isAvailable: true, isConnectedToProvisioningNetwork: false]} network{null} lp{{InterfaceName: tun0 LinkAddresses: [10.8.0.10/30,] Routes: [0.0.0.0/1 -> 0.0.0.0 tun0,128.0.0.0/2 -> 0.0.0.0 tun0,192.0.0.0/9 -> 0.0.0.0 tun0,192.128.0.0/11 -> 0.0.0.0 tun0,192.160.0.0/13 -> 0.0.0.0 tun0,192.168.0.0/17 -> 0.0.0.0 tun0,192.168.128.0/19 -> 0.0.0.0 tun0,192.168.160.0/20 -> 0.0.0.0 tun0,192.168.176.0/23 -> 0.0.0.0 tun0,192.168.179.0/24 -> 0.0.0.0 tun0,192.168.180.0/22 -> 0.0.0.0 tun0,192.168.184.0/21 -> 0.0.0.0 tun0,192.168.192.0/18 -> 0.0.0.0 tun0,192.169.0.0/16 -> 0.0.0.0 tun0,192.170.0.0/15 -> 0.0.0.0 tun0,192.172.0.0/14 -> 0.0.0.0 tun0,192.176.0.0/12 -> 0.0.0.0 tun0,192.192.0.0/10 -> 0.0.0.0 tun0,193.0.0.0/8 -> 0.0.0.0 tun0,194.0.0.0/7 -> 0.0.0.0 tun0,196.0.0.0/6 -> 0.0.0.0 tun0,200.0.0.0/5 -> 0.0.0.0 tun0,208.0.0.0/4 -> 0.0.0.0 tun0,] DnsAddresses: [208.67.222.222,208.67.220.220,] Domains: MTU: 0}} nc{[ Transports: VPN Capabilities: NOT_RESTRICTED&TRUSTED]} Score{0} everValidated{false} lastValidated{false} created{false} explicitlySelected{false} }
12-20 19:59:37.608: D/ConnectivityService(987): Adding iface tun0 to network 110
12-20 19:59:37.628: I/Vpn(987): Established by de.blinkt.openvpn on tun0
12-20 19:59:37.688: E/Netd(153): failed to add interface tun0 to VPN netId 110
12-20 19:59:37.698: E/ConnectivityService(987): Exception adding interface: java.lang.IllegalStateException: command '366 network interface add 110 tun0' failed with '400 366 addInterfaceToNetwork() failed (Invalid argument)'
12-20 19:59:37.698: E/ConnectivityService(987): Unexpected mtu value: 0, tun0
12-20 19:59:37.698: E/Netd(153): interface tun0 not assigned to any netId
...

net.openvpn.openvpn.apk:

12-20 20:00:19.226: D/VpnJni(987): Address added on tun0: 10.8.0.10/30
12-20 20:00:19.246: I/Vpn(987): Established by net.openvpn.openvpn on tun0
12-20 20:00:19.246: D/ConnectivityService(987): registerNetworkAgent NetworkAgentInfo{ ni{[type: VPN[], state: CONNECTED/CONNECTED, reason: (unspecified), extra: (none), roaming: false, failover: false, isAvailable: true, isConnectedToProvisioningNetwork: false]} network{null} lp{{InterfaceName: tun0 LinkAddresses: [10.8.0.10/30,] Routes: [10.8.0.1/32 -> 0.0.0.0 tun0,0.0.0.0/0 -> 0.0.0.0 tun0,::/0 unreachable,] DnsAddresses: [208.67.222.222,208.67.220.220,] Domains: MTU: 0}} nc{[ Transports: VPN Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED]} Score{0} everValidated{false} lastValidated{false} created{false} explicitlySelected{false} }
12-20 20:00:19.246: D/ConnectivityService(987): Adding iface tun0 to network 111
12-20 20:00:19.306: E/Netd(153): failed to add interface tun0 to VPN netId 111
12-20 20:00:19.316: E/ConnectivityService(987): Exception adding interface: java.lang.IllegalStateException: command '401 network interface add 111 tun0' failed with '400 401 addInterfaceToNetwork() failed (Invalid argument)'
12-20 20:00:19.316: E/ConnectivityService(987): Unexpected mtu value: 0, tun0
12-20 20:00:19.316: E/Netd(153): interface tun0 not assigned to any netId
12-20 20:00:19.316: E/ConnectivityService(987): Exception in addRoute for non-gateway: java.lang.IllegalStateException: command '402 network route add 111 tun0 10.8.0.1/32' failed with '400 402 addRoute() failed (No such device)'
12-20 20:00:19.316: E/Netd(153): interface tun0 not assigned to any netId
12-20 20:00:19.326: E/ConnectivityService(987): Exception in addRoute for non-gateway: java.lang.IllegalStateException: command '403 network route add 111 tun0 0.0.0.0/0' failed with '400 403 addRoute() failed (No such device)'
12-20 20:00:19.326: E/Netd(153): interface tun0 not assigned to any netId
12-20 20:00:19.396: E/ConnectivityService(987): Attempting to register duplicate agent for type 17: NetworkAgentInfo{ ni{[type: VPN[], state: CONNECTED/CONNECTED, reason: (unspecified), extra: (none), roaming: false, failover: false, isAvailable: true, isConnectedToProvisioningNetwork: false]} network{111} lp{{InterfaceName: tun0 LinkAddresses: [10.8.0.10/30,] Routes: [10.8.0.1/32 -> 0.0.0.0 tun0,0.0.0.0/0 -> 0.0.0.0 tun0,::/0 unreachable,] DnsAddresses: [208.67.222.222,208.67.220.220,] Domains: MTU: 0}} nc{[ Transports: VPN Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED]} Score{0} everValidated{true} lastValidated{true} created{true} explicitlySelected{false} }

adding a route by hand via "route add default gw 10.8.0.1 dev tun0" is not permitted.

so is the whole thing an rooted/unrooted issue?