[Feature request] Possible Android TV/Fire TV effective kill switch implementations?

jan-kleks commented 11 months ago

I have checked if others have suggested this already

[x] I have checked this issue tracker to see if others have reported similar issues.

Feature description

As there is currently no kill switch in the TV version, the app can expose your true IP in an instance of a technical failure. Could any of these ideas work as an effective kill switch (possibly with other third-party VPN apps such as WireGuard for Android TVs as well)?

this VPN is using a separate app on Fire TV running alongside the main program to implement an effective kill switch: https://www.ipvanish.com/blog/vpn-kill-switch-app-fire-tv/
limiting the IP pool used by a user to those from the VPN provider with the system's DNS or proxy functionality
a separate app which is monitoring the connection, and instantly killing selected apps (e.g. P2P clients) on the device in the case of failure. Could run alongside the app from the first point mentioned for an even better protection?
running selected critical apps in separate network namespaces (but I do not know if it is available on Android). See https://superuser.com/a/1262250 or https://firejail.wordpress.com/
running apps in a sandbox which allows them to connect only via the VPN network interface. I don't know, something like: https://github.com/FSpaceCore/SpaceCore

Additional protection:

Built-in functionality to start everything on boot: https://github.com/mullvad/mullvadvpn-app/issues/3419 Unfortunately, the launch on boot apps from the third party providers do not always work in my experience...
Built-in monitor dot functionality: https://monitordot.com/

Alternative solutions

Maybe using a good router as a kill switch? But not everyone has this option.

Type of feature

[X] Better privacy/anonymity
[ ] Better at circumventing censorship
[ ] Easier to use
[ ] Other

Operating System

[X] Android
[ ] iOS
[ ] Windows
[ ] macOS
[ ] Linux

albin-mullvad commented 10 months ago

Hi! Thanks for these suggestions. It's unfortunate that the OS doesn't properly support this functionality, but we'll look into these suggestions to see if it's feasible for us to implement something like this.

MaxSt97 commented 9 months ago

Hi! Thanks for these suggestions. It's unfortunate that the OS doesn't properly support this functionality, but we'll look into these suggestions to see if it's feasible for us to implement something like this.

Any news on this?

jan-kleks commented 9 months ago

@albin-mullvad I have added new (and edited) ideas in the first post.

albin-mullvad commented 9 months ago

Hey! Thanks for the updated ideas. We are currently focusing on some other features and issues, however we have this in our backlog.

mullvad / mullvadvpn-app