diff options
| author | David Lönnhager <david.l@mullvad.net> | 2024-03-25 10:40:58 +0100 |
|---|---|---|
| committer | David Lönnhager <david.l@mullvad.net> | 2024-04-30 16:22:52 +0200 |
| commit | bd5aebe29f246cec84c4174a03151b53bf3a9945 (patch) | |
| tree | 3f3d1e90abad0f6a5392a2d850056433d9b0581e /docs | |
| parent | 8a8dab16902a562f6b8bc93a546273d0e3a3611a (diff) | |
| download | mullvadvpn-bd5aebe29f246cec84c4174a03151b53bf3a9945.tar.xz mullvadvpn-bd5aebe29f246cec84c4174a03151b53bf3a9945.zip | |
Update split tunneling documentation
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/split-tunneling.md | 18 |
1 files changed, 9 insertions, 9 deletions
diff --git a/docs/split-tunneling.md b/docs/split-tunneling.md index bda2ac5de6..722484ad70 100644 --- a/docs/split-tunneling.md +++ b/docs/split-tunneling.md @@ -43,17 +43,17 @@ Some definitions of terms used later to describe behavior: *: On platforms where we have custom firewall integration. This is currently on desktop operating systems, and not mobile. -### Windows and Linux +### Desktop platforms (Windows, Linux, and macOS) -| In-app DNS setting | Normal & Excluded app | -|-|-| -| **Default DNS** | In tunnel (to relay) | -| **Private custom DNS** (e.g. 10.0.1.1) | LAN (to 10.0.1.1) | -| **Public custom DNS** (e.g. 8.8.8.8) | In tunnel (to 8.8.8.8) | +| In-app DNS setting | Normal & Excluded app | +|-|------------------------------------------------| +| **Default DNS** | In tunnel (to relay) | +| **Private custom DNS** (e.g. 10.0.1.1) | LAN (to 10.0.1.1)<br/>**macOS**: Not supported | +| **Public custom DNS** (e.g. 8.8.8.8) | In tunnel (to 8.8.8.8) | -In other words: Normal and excluded processes always behave the same. This is because DNS is -typically handled by a service, e.g. DNS cache on Windows or systemd-resolved's resolver on Linux, -which is not an excluded process. +In other words: Normal and excluded processes behave the same. This is because DNS is typically +handled by a service, e.g. DNS cache on Windows or systemd-resolved's resolver on Linux, which is +not an excluded process. For the sake of simplicity and consistency, requests to public custom DNS resolvers are also sent inside the tunnel when using a plain old static `resolv.conf`, even though it is technically |