Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add in app allowedIps calculator #446

Open
Chris56 opened this issue Nov 14, 2024 · 6 comments
Open

Add in app allowedIps calculator #446

Chris56 opened this issue Nov 14, 2024 · 6 comments
Assignees
Labels
enhancement New feature or request

Comments

@Chris56
Copy link

Chris56 commented Nov 14, 2024

When a tunnel defines a default route, i.e. AllowedIPs = 0.0.0.0/0
The access to the local network is not possible anymore.
This is different on Linux desktop and at least the tunnel packets themselves MUST run throuch the local net.
No way to reach the local resources

Smartphone (please complete the following information):

  • Device: any
  • Android Version: serveral, e.g.13
  • App Version [e.g. 3.3.3] 3.6.0
  • Backend: [e.g. Kernel, Userspace]

To Reproduce
Just define a default route in conf file.

Expected behavior
Apart from the default route throght the tunnel an additional route to the local network.

@Chris56 Chris56 added the bug Something isn't working label Nov 14, 2024
@zaneschepke
Copy link
Owner

Hello! Please see the FAQ for how to resolve this.

In the near future, I'm looking to add settings to the config screen to exclude private IPs from the tunnel w/custom ranges, but (for now) the directions in the FAQ are the best way to resolve this.

@Chris56
Copy link
Author

Chris56 commented Nov 15, 2024

Thanks for your reply.
I used this as an awkward workaround before.
But apart from splitting 0.0.0.0/0 into a lengthy list: every time the android device moves to another local network, you will have to change the config. However, the config file should be agnostic of the network the device happens to be in.
The (quite simple) Linux solution is creating a different routing table for the new default route, which is only being used, in case there is no local route defined for the particular destination ip: "ip -4 rule add table main suppress_prefixlength 0"

@Chris56
Copy link
Author

Chris56 commented Nov 23, 2024

I propose to leave it open as long as the additional settings aren't yet implemented and close it only afterwards. That way people will know about the implementation having taken place.

@zaneschepke zaneschepke reopened this Nov 23, 2024
@zaneschepke zaneschepke changed the title Tunnel with default route: no access to local network. Add in app allowedIps calculator Nov 23, 2024
@zaneschepke
Copy link
Owner

Sounds good.

I've changes to name to better reflect what feature this one is requesting in order to be closed.

@zaneschepke zaneschepke added enhancement New feature or request and removed bug Something isn't working labels Nov 23, 2024
@dkoppenh
Copy link

Looks like my feature request #402. Simple toggle switch to allow LAN traffic.

@Chris56
Copy link
Author

Chris56 commented Nov 24, 2024

You are right. The only reason, why I opened a "BUG" was, because the configuration file should know anything about the devices paticular network.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants