Check outbound source addresses on a multi-IP VPN server

Steps and comparison

1. Use ip -4 addr to confirm the source address is assigned locally. The server address a client connects to may differ from the source used for outbound proxy connections.
2. With curl available, run curl -4 -I --interface SOURCE_IP --connect-timeout 5 --max-time 10 https://example.com/ with your own source IP and test domain. Bind only an address assigned locally.

Results and next steps

To compare the same destination, add --resolve example.com:443:TARGET_IP while keeping the original hostname in the URL. An HTTP response verifies that request; retest the actual app download separately.