ProtonVPN / linux-app

Official ProtonVPN Linux app
https://protonvpn.com/download-linux
GNU General Public License v3.0
403 stars 64 forks source link

Add split-tunneling functionality #19

Open raj-magesh opened 3 years ago

raj-magesh commented 3 years ago

Hi ProtonVPN team!

As far as I can tell, there's no configuration options in the current ProtonVPN desktop client for Linux that allow for split-tunneling. I'd like a few applications to use my work VPN, the others to use ProtonVPN, and still have access to my LAN.

I believe similar functionality is available on your Android app. Do you have a roadmap for implementing this feature?

asorel1942 commented 2 years ago

I am also curious as to when split tunneling will be implemented for Manjaro/Arch.

tategriffin commented 2 years ago

Interested in getting split tunneling working as well. I see the configuration settings in .config/protonvpn, but wasn't able to get it working.

`

"default_protocol": "udp",
"killswitch": 0,
"dns": {
    "dns_status": 1,
    "custom_dns": []
},
"split_tunneling": {
    "split_tunneling_status": 0,
    "ip_list": []
},
"netshield": 2,
"secure_core": 0,
"vpn_accelerator": 1

`

srirambv commented 2 years ago

+1 on this

qoheniac commented 2 years ago

At least, using ProtonVPN and still having access to the LAN seems to be the default on Linux.

njfox commented 2 years ago

I was hacking around and got this mostly implemented, the only problem is there appears to be some sort of bug in the NM library when importing the profile. I'm getting the following error in nm_plugin.py, line 25 when it attempts to import the profile:

nm-connection-error-quark: configuration error: unsupported 3th argument net_gateway to “route” (line 58) (0)

The profile being imported looks like this:

# Split Tunneling
route <custom_ip> 255.255.255.255 net_gateway

Am I understanding this directive wrong or is there an issue in the library? It works totally fine if I run the profile directly with sudo openvpn --config test.config, including the split tunneling.

Possibly relevant upstream bugs:

ghost commented 2 years ago

+2 for dis ;D

calexandru2018 commented 2 years ago

Hello 👋

Thank you all for voicing your oppinions. It is planned to add split-tunneling, although currently we have no ETA. Please be sure to subscribe to our official channels on social media, as this will be shared once this feature is made available.

myartsev commented 2 years ago

+1 for linux split tunneling at the process / application level

Use case: running a bitcoin full node that accepts incoming connections

Manumerique commented 2 years ago

We, linux users, should have access to this kind of functionality even before other OSes, as we are more likely to help and report issues that could concern other OSes. Please help us by letting us help you !

glyphy commented 2 years ago

+1 for local LAN access. Needing to disable VPN every time I want to access another PC on the LAN gets very cumbersome.

qoheniac commented 2 years ago

I can access other devices on the LAN from Linux while Proton VPN is active and I didn't change any settings

no-longer-fun commented 2 years ago

+1 for local LAN access. Needing to disable VPN every time I want to access another PC on the LAN gets very cumbersome.

Lan access is available, I think is the default configuration, I didn't configure anything.

gthb93 commented 2 years ago

+1 for local LAN access. Needing to disable VPN every time I want to access another PC on the LAN gets very cumbersome.

Lan access is available, I think is the default configuration, I didn't configure anything.

Lan access is available only for the subnet of your PC (the one running ProtonVPN). Split tunneling should allow multiple subnets to be added to the exception list (or even better, do not route internal subnets to the VPN interface).

m5x commented 2 years ago

Subscribed to this issue, hopefully there will soon be some progress in the near future. I like what ProtonVPN has to offer but it is not usable for me until it supports split tunneling on Linux. No need for fancy GUI, CLI version would absolutely suffice.

hulloanson commented 2 years ago

+1 for application level split tunneling

Fragefix commented 1 year ago

Really time to implement that!