VPN Full Tunnel

[dev-Blaze]

Summary

Currently the pangolin vpn functionality only allows the clients to connect to private resources and the current private resources cannot be 0.0.0.0/0. would be great if pangolin can also allow Full VPN tunnel as this would allow for safe internet usage while traveling or on unsafe networks while also being able to access private resources VIA ZTNA.

Motivation

Providing safe Wireguard VPN tunnel for regular VPN usage with Pangolin private resources.

Proposed Solution

Full Tunnel Capabilites as wireguard allows this with 0.0.0.0/0

Alternatives Considered

Having to do this via other vpn solutions like tailscale, netbird.

Additional Context

No response

[oschwartz10612]

Love this idea and is planned to include at some point!

[kingtutbvi]

Yes this would be great ,aexit node olm that has access to the internet

[Lokowitz]

Would love to see this for the clients.
Maybe with the option to select the exit node (Gerbil or Newt) and an automatic mode (selecting the fastest).

[mmackowiak]

That would be big, especially that iOS allows only one active VPN connection. This way, I need to choose if I want all traffic to go through VPN to my house or if Pangolin is active.

[pycanis]

I would love to use this as well. Is there any ETA, please?

[Keridos]

Related:
Enable Pangolin Android App to be set as "Always-on VPN" in Android VPN Settings.
That enables notifications from android if it is disconnected and also allows to configure blocking every other route but those via the pangoling vpn.

Edit:
Additionally that would make pangolin a choice for businesses handing out smartphones to their employes.
They need to be able to exert control over default routes on these devices. Currently this is not possible due to this not being implemented. Though additionally policies for the apps settings would also be needed.

[Keridos]

Other discussions that are either duplicates of this or tightly related to this:

• https://github.com/orgs/fosrl/discussions/2380
• https://github.com/orgs/fosrl/discussions/2946
• https://github.com/orgs/fosrl/discussions/2796
• https://github.com/orgs/fosrl/discussions/2334