As a user, I want to toggle Kill Switch

[gorkapernas]

Description:

Implement rule that forces system to send all network traffic over the tunnel.

[jurajhilje]

Kill Switch option is available on iOS 14+, but not working properly so it cannot be implemented until fixed by Apple.

More info on the issue: https://developer.apple.com/forums/thread/677156 https://developer.apple.com/forums/thread/677102 https://developer.apple.com/forums/thread/653116 https://developer.apple.com/forums/thread/651004

[jurajhilje]

@gorkapernas Implemented for WireGuard and OpenVPN only, until Apple fixes the bug that affects IKEv2.

[jurajhilje]

@gorkapernas This is available in TestFlight 2.5.0 (7) build.

[jurajhilje]

@gorkapernas New build is available in TF.

[jurajhilje]

@gorkapernas https://developer.apple.com/news/releases/ iOS and iPadOS 15.1 RC is now available, so we can do the final testing for the Kill Switch on this version.

[gorkapernas]

Verified on version 2.5.0 latest beta (21), the KillSwitch works as expected.

• If the user disconnects the VPN manually, the traffic resumes as usual
• If the VPN is connected, but the server is unavailable/lost connection/etc. all internet traffic is blocked
• When Kill Switch is enabled, all network is forced to go through the VPN tunnel, including the traffic to Apple's servers
• There is a small delay when the VPN reconnects for whatever reason e.g. changing networks, servers, joining an untrusted network..., the delay is more noticeable with OpenVPN.

Please note that we could not test Local Network with KillSwitch as the feature to bypass VPN for local networks is in progress -> https://github.com/ivpn/ios-app/issues/136

Lastly, there is one issue with MultiHop for WireGuard + KillSwitch, sometimes there is no traffic when using both, see https://github.com/ivpn/ios-app/issues/208 for further details. Apparently, this is an Apple issue and can be resolved by removing all VPN profiles from iOS settings and reconnecting again.