closes#935
Fixes issue where foreground service exempt type causes security exception crash on latest android API version without an added vpn profile. Switched to special use type for kernel/proxy foreground service.
This feature allows users to enable DDNS re-resolve that will check for a DDNS change on handshake and/or ping failures without the need for auto tunnel and will dynamically update peers without bouncing the tunnel for added security/privacy.
- Fixes tile toggling random/wrong tunnel.
- Fixes native thread socket bypass crash with lockdown mode
- Removes bouncing logic as DDNS change can now be resolved via a bypassed DoH socket and update the peers endpoints dynamically.
- Restarting active tunnel on manual config changes removed. Will be replaced soon with a modal prompt asking users if they would like to restart (to preserve privacy and prevent leaks).
- Refactor of tunnel start and stop logic for cleaner tunnel startup and shutdowns.
- Various other fixes and changes.
Another big one.
- SOCKS5/HTTP proxy integration via "proxy mode"
- Kill switch (which was hacky and leaky) has been replace by a robust "lockdown mode" which keeps a dummy vpnservice tunnel active, capturing all device traffic and fowarding it to a netstack/gvisor tunnel via the SOCKS5 proxy. If a tunnel requires DNS resolution for peer endpoints, we punch a hole by bypassing a socket for DoH resolution to keep things secure and private.
- DoH support for peer endpoint resolutions for proxy, lockdown, and regular vpn mode (not kernel, yet) with support for cloudflare and Adguard DoH providers.
This is a big one.. oops.
Main changes:
- Make ping monitor more robust and global, with ping target overrides of the default cloudflare fallback target per tunnel (for full tunnels, otherwise we ping the internal tun ip)
- Include ping restart recovery to prevent tun being down if dns failures happen after a bounce
- Ping monitoring itself remains per tunnel and works without auto tunnel active, but moves the restart feature back to be managed by and integrated with auto tunnel to prevent inconsistencies and conflicts
- Ping statistics can be optionally included to be displayed with tun statistics
- Adds the beginnings of monitoring logs for handshake and data packet failures for userspace tuns (to be incorporated with restarts/tun status later)
- Improve tun error notifications, adds ping restart notifications
- Major refactor of auto tunnel logic to make it more modular and extensible for new auto tunnel conditions
- A bunch of other stuff..
Minor changes to Auto-tunnel ui to make starting auto tunnel more intuitive.
Better monitoring of location services and location permission changes to be immediately reflected in network monitor, with warnings displayed on auto tunnel screen if necessary depending on wifi detection method.
Improved detection of when app is backgrounded so we notify user of tunnel errors in notifications vs ui.
Fixes bug where prominent location screen was not showing properly.
Zane Schepke