Seeking suggestions for how to connect to two subnets via two VPNs on Android (midwest.social)

submitted 1 week ago by sxan@midwest.social to c/privacy@lemmy.ml

4 comments fedilink hide all child comments

On linux, this is trivial. I have my private subnet over Wireguard and hosts with static IPs all on the 10.79.x.y subnet. All other traffic goes through my commercial VPN provider.

Problem is, ya cain't do that on Android, as it supports exactly one VPN connection at a time. The best you can do is white/blacklist traffic to either go through the VPN, or not.

Do how do I achieve this? My commercial VPN provider will not nest and route on their end; I could route all traffic through my VPS servers, but that's a lot of traffic for my little VMs. It may, however, be my only option:

Phone is connected to my VPS over WG VPN
VPS is connected to internet via commercial WG VPN
Routing tables on VPS send 10.79.x.y to destinations over the private VPS
Public destinations get sent over commercial VPS

Am I missing an easier, more efficient work-around for Android's utterly stupid networking limitations?

top 4 comments

sorted by: hot top controversial new old

[-] zer0@programming.dev 2 points 1 week ago

You can use two separate VPNs if you use a work profile to run the second one. I'm not sure if this would work for your use case though. Check out Shelter if you want to give it a try.

[-] BearOfaTime@lemm.ee 1 points 1 week ago* (last edited 1 week ago)

Aren't those VPNs isolated to that profile then? So only apps within that profile use the VPN in the profile?

Just trying to make sure I understand how Android does isolation. I guess if you run the apps that need each VPN in the appropriate profile and Island makes the isolation kind of transparent, it should work.

I've used Island for the app isolation, and a shortcut to an app will simply log in to the associated profile to launch the app. Just never tried with dual VPN.

[-] commander@lemmy.world 1 points 1 week ago* (last edited 1 week ago)

Really I don't know but I remember dealing with a dual vpn years ago with Samsung phones

https://docs.samsungknox.com/dev/knox-sdk/features/mdm-providers/vpn/vpn-chaining/

[-] checksout@piefed.social 1 points 1 week ago

Personally never used WG;
But I had to use I2P + Tor + Firewall on my droid, but as all these require a VPN on non rooted phone, and Android support just one VPN at a time, I am now using Invizible pro which let me do this all from one app and then setup VPN from this app.
Point is find (or create) and app which can access all protocols you are trying to connect.

this post was submitted on 07 Dec 2024

33 points (100.0% liked)

Privacy

32179 readers

158 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS