search

cernekee / ics-openconnect

Android UI for OpenConnect VPN client
GNU General Public License v2.0
358 stars 129 forks source link

option to specify HTTP proxy #40

Open avodonosov opened 5 years ago

avodonosov commented 5 years ago

Hello, could you please add an option to specify proxy URL and auth parameters?

The LibOpenConnect class provides setProxyAuth and setHTTPProxy methods, but UI is not provided by the application.

cernekee commented 5 years ago

Hi Anton, what is the use case? Are you behind a corporate/school firewall and tunneling to another network? Does your network support WPAD?

Normally the Linux version of openconnect tries to build against libproxy to support PAC and similar features. The Android builds don't currently do so; I would assume that most wifi networks that allow random mobile devices do not require going through a proxy.

avodonosov commented 5 years ago

Hello Kevin, thank you for the response.

The use case is that the "guest" network my mobile phone is in doesn't route to the public IP of the VPN server of that company. So when I'm in this "guest" network, there is just no connectivity to the VPN IP.

But from other, outside, networks the VPN is accessible. So I wanted to do a round-trip - connect to a remote proxy and have this proxy to connect to the VPN server (as the proxy is remote, it will see the server)

WPAD won't help me as indeed, there is no proxy in that "guest" network - I hoped to use a remote proxy.

cernekee commented 5 years ago

So I guess this network doesn't advertise the proxy server via WPAD, since it isn't part of their infrastructure?

Is the proxy server using HTTP Basic auth?

I think this would limit you to TCP only, which doesn't have ideal performance...

avodonosov commented 5 years ago

I wanted to install squid as proxy on my own server. Performance might be suboptimal, but it's better than no connection at all :)