From: Endre Szabo <endre.szabo@wg-ml-rkaofgr.redir.email>
To: wireguard@lists.zx2c4.com
Subject: Re: WireGuard App on Android allows only one connection simultaneously
Date: Wed, 21 Sep 2022 08:56:21 +0000 [thread overview]
Message-ID: <393311a3ac9b1ed9cb909ba6eb1b364b@wg-ml-rkaofgr.redir.email> (raw)
In-Reply-To: <30014af580cd42edba0121c0d6b99add@rozman.si>
Hi,
On Wed, Sep 21, 2022 at 08:29:17+0000, Simon Rozman wrote:
> Unfortunately, this is a limitation of Android OS supporting only 1 (one) VPN connection at a time.
Just a theoretical thought experiment (I don't know Android arch well, I might be wrong at any of these points):
- AFAIK, having a VPN (VPN app) on an Android involves creating a tun device for that app
- kernel RPDB mumbo-jumbo (Android has set that up) will route (all or app-specific (based on processid?) selected) traffic to that VPN app
- the VPN app will be left with 'the default routing table' free to establish unlimited outbound unencrypted connections
- WG on android is implemented in userspace, in the WG app (using go implementation?)
- Since this app has unlimited/untunneled access via 'the default routing table' it is free to establish more than 1 WG sessions (of course, in-app cryptokey routing and all the usual limitations still apply)
- Current WG app (and especially its widget) will not allow only one VPN session at a time.
Would it be possible to lift this limitation? Or is this limitation of another nature?
--Endre
next prev parent reply other threads:[~2022-09-21 8:56 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-09-20 8:11 Christoph Loesch
2022-09-21 8:29 ` Simon Rozman
2022-09-21 8:56 ` Endre Szabo [this message]
2022-09-22 20:54 ` Christoph Loesch
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=393311a3ac9b1ed9cb909ba6eb1b364b@wg-ml-rkaofgr.redir.email \
--to=endre.szabo@wg-ml-rkaofgr.redir.email \
--cc=wireguard@lists.zx2c4.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).