os-issue-tracker
os-issue-tracker copied to clipboard
GrapheneOS
add the option of VPN support for hotspot / tethering
VPNs are per-profile and this feature should not be designed to use the current profile's VPN. It's not clear exactly how it should work. Using the Owner profile VPN for this may not be desirable and is somewhat of an anti-feature since it encourages unnecessarily grouping traffic together by making that easier than the more private approach of separate tunnels for each profile and connected device.
This would be grandios. I can't understand why AOSP doesn't provide this already. There is no reason not to route all traffic through the VPN.
At the moment, you can simply run the VPN on the devices you have tethered too. This feature is not a high priority.
Would be interested in reviving this issue. I had a usecase today where I wanted to create an open hotspot for semi-trusted people. Routing everything through a VPN would effectively protect me from abuse.
If noone picks it up, I might give it a shot once I've learned enough to work on (seemingly) simple issues.
One use case would be to be able to create a VPN chain with the help of a second GOS device for countries were they target citizens for the use of Tor/VPN by using a mainstream VPS connection as the first exit and at the same time use the second VPS to hide from the mainstream VPS what data passes through.
You don't need multiple devices to chain tunnels.
Please tell me how to do it.
Thanks, you right, but making a LTE VPN router out a GOS device is kinda of an awesome feature for GrapheneOS and really important for some countries.
We don't think sending a bunch of stuff over the same VPN tunnel instead of having a per-device VPN tunnel established is the right approach. It needlessly ties stuff together. At the moment, each profile has a separate VPN, which is within the same device. Reusing the Owner profile VPN for completely separate device would be a major step backwards from the current approach and isn't really what we want to do.
We don't think sending a bunch of stuff over the same VPN tunnel instead of having a per-device VPN tunnel established is the right approach. It needlessly ties stuff together. At the moment, each profile has a separate VPN, which is within the same device. Reusing the Owner profile VPN for completely separate device would be a major step backwards from the current approach and isn't really what we want to do.
Understood. Thanks.