search

tailscale / tailscale

The easiest, most secure way to use WireGuard and 2FA.
https://tailscale.com
BSD 3-Clause "New" or "Revised" License
19.59k stars 1.54k forks source link

FR: Android killswitch #7703

Open ronfischler opened 1 year ago

ronfischler commented 1 year ago

What are you trying to do?

Running Tailscale app on my Android phone. I have occasionally lost the Active state, and that causes me to lose connection to my exit node, also serving as my DNS proxy, running AdGuard-Home. My phone then returns to a conventional connection to the Internet, definitely not what I want.

How should we solve this?

Implement a "simple to enable" killswitch feature that can be used when an exit node is being used.

What is the impact of not solving this?

If I am traveling in an interesting place in the world, and I lose connection to my Tailscale exit node, (running elsewhere in the world on one of my cloud-based virtual machines,) which is also serving as my DNS service, I don't want to be downgraded to using a local DNS. I want to be disconnected until I get Tailscale active again.

Anything else?

I want Tailscale to have complete control of my Internet connection on my phone.

DentonGentry commented 1 year ago

I have occasionally lost the Active state, and that causes me to lose connection to my exit node

It seems like this is the problem to solve.

FlorentLM commented 1 year ago

On Android 13 you can set Tailscale as an always-on VPN and there is a killswitch baked into Android. Screenshot_20230417-114217_Settings Not sure about previous Android versions though?