The Mullvad VPN client app for desktop and mobile http://git.waynecole.info/mullvadvpn/atom?h=decrease-leaks-during-reconnect 2025-07-10T07:37:00Z 2025-07-10T07:37:00Z Sebastian Holmin sebastian.holmin@mullvad.net 2025-07-09T14:18:47Z urn:sha1:3fd1c56d397375a494cf9279ed42122de8548579 2024-01-10T09:42:49Z David Lönnhager david.l@mullvad.net 2024-01-04T16:33:21Z urn:sha1:e162d0b94c6e013e964ef9dff4bde80ccae4d58f 2024-01-03T13:38:41Z Jonathan jonathan@mullvad.net 2023-12-05T09:03:08Z urn:sha1:4fdc34acbba60d5092e45ce3e513d30ec996c317 This PR has a couple of different purposes - Allow users to use socks5 local proxies with the CLI without having to be root nor use split-tunneling. This only works for OpenVPN. - Unify the types used by different proxy parts of the codebase, such as the Access Methods as well as some already existing OpenVPN proxy code. This PR changes the firewall on all desktop platforms as well as changes the routing table slightly on MacOS and Windows. On Linux the firewall code is modified to apply the appropriate firewall marks to all packages that go to a remote endpoint corresponding to the remote part of a local socks5 proxy. The firewall marks will allow the routing to be done without having to modify the routing table. On MacOS and Windows the routing table is modified to allow packages to go to that same endpoint to pass outside the VPN tunnel, it will additionally punch a hole in the firewall. The PR also migrates the settings file from version 7 to version 8 in order to properly and neatly unify Proxy related types. Finally it provides some slight extensions to the gRPC interface in order to allow for control over the custom proxy settings. 2023-11-23T14:14:21Z Sebastian Holmin sebastian.holmin@mullvad.net 2023-11-17T14:15:41Z urn:sha1:fc1fa55b697cfd00a20345d9ded123483cf366d6 2023-11-17T10:09:25Z David Lönnhager david.l@mullvad.net 2023-11-14T13:02:21Z urn:sha1:b5f74368a19746c4cee82a47725ac9f1d386f298 2023-11-13T09:54:42Z David Lönnhager david.l@mullvad.net 2023-11-09T14:18:43Z urn:sha1:14968821c3a0dda206833954db49d3cfed27946f 2023-11-13T09:54:42Z David Lönnhager david.l@mullvad.net 2023-11-09T08:46:32Z urn:sha1:1d4b66058343a9ed93d253e742e5e517fea60ddf 2023-10-09T12:40:08Z Markus Pettersson markus.pettersson@mullvad.net 2023-09-20T13:36:01Z urn:sha1:43cb757d2cbb396a627fb6b970394a7b73d37dc5 - General code cleanup - Fix some typos - Add some doc comments - Address several `TODO` comments - Fix `clippy` warnings - Removed unused dependency `mullvad-api` from `mullvad-cli` - Removed unused dependency `rand` from `mullvad-daemon` - Rename `mullvad proxy` to `mullvad api-access` - Rename `mullvad_types::api_access_method` -> `mullvad_types::access_method` - Remove unused `mullvad api-access edit` arguments - Fix `Display` for `ProxyConfig` printing arguments in the wrong order - Re-phrase `mullvad api-access test` - If the API call failed, point out which tested access method that did not work. - Fix missing `socket_bypass_tx` value for Android - Refactor `ApiAccessMethod` proto definition - Simplify protobuf definitions of `SOCKS5` api access methods - Remove the `Socks5` enum in favor of implementing `Socks5Local` and `Socks5Remote` directly. - Move `enabled` and `name` out of the individual messages and put them next to the `oneof access_method` in `ApiAccessMethod` proto definition - Use derived `PartialEq` and `Hash` from `AccessMethod` - Instead of hand-rolling `Hash` and implementing an ad-hoc version of half of `PartialEq`, these can now be derived and used as one would imaging due to the refactoring wherer `name` and `enabled` was moved out of `AccessMethod` into `ApiAccessMethod`. 2023-10-09T12:39:59Z Markus Pettersson markus.pettersson@mullvad.net 2023-08-28T08:10:46Z urn:sha1:44656b65922ee0b8c76db50a22f93e10158e8b59 The `proxy` subcommand will allow for adding/deleting/editing/showing different API access methods using the mullvad CLI. 2023-09-27T08:25:35Z David Lönnhager david.l@mullvad.net 2023-09-20T22:37:07Z urn:sha1:52cdf0bfbed50179b1da5ccad80fa0245a524c1e