Re: WireGuard App on Android allows only one connection simultaneously

2022-09-22 Thread Christoph Loesch

Hi,

(thanks to mohammad who pointed me in the right direction)

Am 21.09.2022 um 10:29 schrieb Simon Rozman:

Unfortunately, this is a limitation of Android OS supporting only 1 (one) VPN 
connection at a time.


Note: Limitation of not rooted devices. The app works with userspace backend 
until you root your device.

Once rooted you need to allow root-access to the app (it asks for root if your 
device is rooted) and then you can enable the use of kernel module/backend in 
advanced settings.
Then enable option for multiple tunnels at the same time.
Maybe it's worth to put hint for that in the app?

Works great so far.
(Sure, you have to keep an eye on used IP-ranges/routes that could be same on 
different tunnels what could result in unexpected behaviour when used 
simultaneously.)

Thank you very much and kind regards!
Christoph



Re: WireGuard App on Android allows only one connection simultaneously

2022-09-21 Thread Endre Szabo
Hi,

On Wed, Sep 21, 2022 at 08:29:17+, Simon Rozman wrote:
> Unfortunately, this is a limitation of Android OS supporting only 1 (one) VPN 
> connection at a time.
Just a theoretical thought experiment (I don't know Android arch well, I might 
be wrong at any of these points):
 
- AFAIK, having a VPN (VPN app) on an Android involves creating a tun device 
for that app
- kernel RPDB mumbo-jumbo (Android has set that up) will route (all or 
app-specific (based on processid?) selected) traffic to that VPN app
- the VPN app will be left with 'the default routing table' free to establish 
unlimited outbound unencrypted connections
- WG on android is implemented in userspace, in the WG app (using go 
implementation?)
- Since this app has unlimited/untunneled access via 'the default routing 
table' it is free to establish more than 1 WG sessions (of course, in-app 
cryptokey routing and all the usual limitations still apply)
- Current WG app (and especially its widget) will not allow only one VPN 
session at a time.
 
Would it be possible to lift this limitation? Or is this limitation of another 
nature?

--Endre


RE: WireGuard App on Android allows only one connection simultaneously

2022-09-21 Thread Simon Rozman
Hi,

> on Linux multiple connections at the same time are possible, on Windows
> also. I don't have a Mac so I can't test there.
> 
> When having two tunnels configured in the Android App, while one is
> connected if I connect to the second one, the first one disconnects.
> 
> Is there any reason as why the Android App only allows one connection at
> the same time?

Unfortunately, this is a limitation of Android OS supporting only 1 (one) VPN 
connection at a time.

Regards,
Simon


WireGuard App on Android allows only one connection simultaneously

2022-09-20 Thread Christoph Loesch

Hi,

on Linux multiple connections at the same time are possible, on Windows also. I 
don't have a Mac so I can't test there.

When having two tunnels configured in the Android App, while one is connected 
if I connect to the second one, the first one disconnects.

Is there any reason as why the Android App only allows one connection at the 
same time?

Thank you and kind regards,
Christoph