search

MatsuriDayo / nekoray

Qt based cross-platform GUI proxy configuration manager (backend: sing-box)
https://matsuridayo.github.io/
GNU General Public License v3.0
13.06k stars 1.22k forks source link

Using TUN and system proxy simultaneously #1465

Open LainFromWired opened 1 week ago

LainFromWired commented 1 week ago

Are there any drawbacks in regards to security and performance when checking both the TUN and System Proxy boxes at the same time?

I had used system proxy first, but realized that some programs ignored it, so I switched to TUN. However, when booting up it asks to run the app with admin privileges (or UAC if you disable the internal TUN), and before you restart it via admin, the traffic bypasses the proxy. This is fixed by checking the "system proxy" button in addition to TUN Mode.

Thus the question. It's not a major issue - more for educational purposes.

OS is Windows 10. Nekobox version is 3.26.

LainFromWired commented 6 days ago

Or another scenario. The "System proxy" is ticked off, but is enabled in Windows settings and set to the same parameters Nekobox sets it to (127.0.0.1 and exceptions). That way, if the TUN client crashes, programs and services that can use the system proxy won't be able to connect to the Internet, which is nice. Sort of like a kill switch. Can this cause some potential problems though?

Found something out. In this scenario, when both TUN and system proxy are enabled, the apps that can use system proxy (i.e. Chrome, Steam) use the proxy without TUN, but those that can't (i.e. Putty, CMD), use TUN. I don't know what any of this proves though...