mullvadvpn/talpid-openvpn/src/process, branch decrease-leaks-during-reconnectThe Mullvad VPN client app for desktop and mobilehttp://git.waynecole.info/mullvadvpn/atom?h=decrease-leaks-during-reconnect2024-02-19T14:28:02ZFix redundant imports2024-02-19T14:28:02ZDavid Lönnhagerdavid.l@mullvad.net2024-02-19T09:07:28Zurn:sha1:07bf94820842bd3a034ca4e9b32641d7ef1c5e78Run `cargo +nightly fmt`2024-01-05T16:02:12ZSebastian Holminsebastian.holmin@mullvad.net2024-01-04T04:46:23Zurn:sha1:5131624541f6a9f456de347b62f69f4c5591c5c4Allow app to use custom socks5 and shadwosocks proxies2024-01-03T13:38:41ZJonathanjonathan@mullvad.net2023-12-05T09:03:08Zurn:sha1:4fdc34acbba60d5092e45ce3e513d30ec996c317
This PR has a couple of different purposes
- Allow users to use socks5 local proxies with the CLI without
having to be root nor use split-tunneling. This only works for
OpenVPN.
- Unify the types used by different proxy parts of the codebase,
such as the Access Methods as well as some already existing
OpenVPN proxy code.
This PR changes the firewall on all desktop platforms as well as changes
the routing table slightly on MacOS and Windows.
On Linux the firewall code is modified to apply the appropriate firewall
marks to all packages that go to a remote endpoint corresponding to the
remote part of a local socks5 proxy. The firewall marks will allow the
routing to be done without having to modify the routing table.
On MacOS and Windows the routing table is modified to allow packages to
go to that same endpoint to pass outside the VPN tunnel, it will
additionally punch a hole in the firewall.
The PR also migrates the settings file from version 7 to version 8 in order
to properly and neatly unify Proxy related types.
Finally it provides some slight extensions to the gRPC interface in
order to allow for control over the custom proxy settings.
Update OpenVPN monitor2023-10-12T13:05:32ZDavid Lönnhagerdavid.l@mullvad.net2023-10-11T19:15:36Zurn:sha1:7f8b7e9f4de225075f3ae63026f54689d356f982Remove dependency on `duct`2023-10-11T15:11:03ZMarkus Petterssonmarkus.pettersson@mullvad.net2023-10-09T07:05:50Zurn:sha1:71caac0f4616d6ac27ae748427990093b8bdbd5c
Remove the dependency on `duct` from `talpid-openvpn`, since we can use
`tokio` to spawn processes instead.
Remove dependency `is-terminal` from `talpid-openvpn`2023-10-11T15:10:59ZMarkus Petterssonmarkus.pettersson@mullvad.net2023-10-04T09:54:29Zurn:sha1:105dd14971213a524ae6c22638e48f2ffa5589db
`std::io::IsTerminal` has been since Rust `1.70`, which allows us to
migrate away from `is_terminal::IsTerminal`.
Improve documentation on OpenVpnProcHandle2023-07-07T12:52:18ZLinus Färnstrandfaern@faern.net2023-07-06T14:03:14Zurn:sha1:7455706dc037898f445d262f6359a4a53c4392a0Silence OpenVPN 'replay attack' warnings.2023-06-28T10:07:48ZMarkus Petterssonmarkus.pettersson@mullvad.net2023-06-26T13:21:58Zurn:sha1:d933bfd7bcce68bd043f6fdcbfa61267845176d8
Make the logs less verbose and easier to read by silencing 'replay
attack' warnings.
There are lots of false positives showing up in regular UDP connections,
and since we don’t act on potential replays or warn our users (it’s
pretty hidden in the logs) they don’t really serve much purpose to be
there. The warning should not pose any threat to the user.
Use netlink for openvpn2023-02-22T13:05:17ZDavid Lönnhagerdavid.l@mullvad.net2023-02-20T14:19:10Zurn:sha1:c46e5a690322f896c03e4e9c2ac3024bb625141aReplace atty with is-terminal in talpid-openvpn2023-02-01T14:32:08ZLinus Färnstrandfaern@faern.net2023-01-31T13:53:28Zurn:sha1:1666972069c7a4a53a5ca50ec2b9e6cd65115454