On Thu, 2025-09-25 at 21:16 +0100, Paul Smith wrote:
> Dear All,
> 
> I am trying to find a way to run only specific applications (for
> example, a web browser) over an OpenVPN connection, while keeping the
> rest of the system traffic outside the VPN. My provider gives me .ovpn
> configuration files.
> 
> What I would like is a GUI tool that:
> 
> - integrates well with Fedora (currently on Fedora 42);
> 
> - allows me to assign only certain apps to use the VPN
> (per-application split tunneling);
> 
> - provides a leak-proof kill switch (so if the tunnel drops, no clear
> traffic escapes);
> 
> works with generic OpenVPN .ovpn files.
> 
> I know projects like Qomui exist, but it looks unmaintained and does
> not build cleanly on Fedora.
> 
> My question is: is there a Fedora-compatible GUI program that can
> handle OpenVPN configs with per-application routing and kill-switch
> support?
> 
> If not, what would be the recommended approach in the Fedora ecosystem
> to achieve this safely without writing complex custom scripts?
> 
> Thank you in advance for any advice or suggestions.

Some time ago (several years) I asked a similar question here and did
extensive web searching without coming up with a satisfactory answer.
Many online sources said that network namespaces were the way to go,
e.g.:

https://unix.stackexchange.com/questions/270883/trying-to-run-openvpn-in-network-namespace
https://gist.github.com/Schnouki/fd171bcb2d8c556e8fdf
and quite a few others (these are old links and so may not be current).
Another idea was to use containers.

I never got any of this to work. Now I use ProtonVPN which supports
split tunnelling (as do several others such as MullVad). However these
are all per destination rather than per application. Proton uses
Wireguard but I think it can use OpenVPN if required (though WG appears
to be superior).

poc
-- 
_______________________________________________
users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to