search

dragonfruitnetwork / onionfruit

OnionFruit™ Connect - Tor access client with country selection, bridge configuration, pluggable transports and experimental DNS support
https://dragonfruit.network/onionfruit
Other
207 stars 25 forks source link

Add option to route all TCP and DNS traffic through Tor #23

Closed Doimatcuabautroi closed 2 years ago

Doimatcuabautroi commented 2 years ago

Hello adm. Could you develope some driver like WinTun or TAP for OnionFruit instead of "Act as Proxy Gateway" Client -> Tun/Tap -> Tor Socks -> Internet. (Eg: https://github.com/ambrop72/badvpn/wiki/Tun2socks)

I have see same similar project but it is no longer maintained https://github.com/CrowdStrike/Tortilla

aspriddell commented 2 years ago

A few things to respond to this request:

  1. The cost of maintaining and/or integrating another network routing method is very high. The current proxy method covers (all?) mainstream browsers and a lot of well-known other apps. To the >95% of users that run this program, there is not enough of a demand (from my experience). It also increases the risk of breaking network connectivity should it fail (something I'd rather not deal with from a support perspective).

  2. These adapters can be "brittle", and by that I mean they might break compatibility between OS versions. Because they're drivers, there's no guarantee that they'll work on windows 8.1, 10 and even the upcoming windows 11 (see #22 for what I mean by this). We don't want to be diverting time and effort maintaining somebody else's driver when the proxy does most of what this would have achieved

  3. The current installer has almost no capacity to install drivers, which means the entire auto-updater system would need to be abandoned/restructured (which I'm strongly against seeing as how it's proven effective at mitigating upstream breaking tor changes, like the introduction of servers from the country of "European Union"). It'd also require admin rights which was needed in the past but now allows for more users to engage with the program

  4. If this was added, it's likely that it'll be used for torrenting, which is one way that tor gets annoyed because it strains the network for the rest of the users. (refer to https://blog.torproject.org/bittorrent-over-tor-isnt-good-idea for justification)

Because of considerations like these, it doesn't seem viable in the foreseeable future, sorry.

aspriddell commented 2 years ago

Also should you wish to have DNS requests proxied, you should look at SecurDNS

aspriddell commented 2 years ago

closing due to inactivity (and the question was answered)