I’m pretty sure the entry server doesn’t know the destination, as WireGuard encrypts everything, and it wouldn’t make sense for the entry node to already decrypt the traffic. It also protects against ISPs or other companies/institutions monitoring network traffic.
I think so. But with Tor, you of course get the benefit that (ideally) all 3 nodes are run by different parties, which is not the case with multi-hop VPNs. They might be hosted by different server providers, but they are still all administered by the VPN provider.
Yes on Android it allows permanently set split tunneling. Btw, all system apps CAN bypass the VPN if they want. Captive portal, connectivity check and possibly SUPL do this. So GrapheneOS, maybe distros with the same patches, the rest will send your IP to Google.
On Android root you can use Magisk modules to change the SUPL provider. Using an adb permission “captive portal control” can change the captive portal server.
But nothing can change the connectivity check, device attestation and whatnot, which still all go to Google.
Not in a comfortable way unfortunately.
You can launch an app through the Mullvad app which then will be launched bypassing the VPN until it is closed. You cannot permanently blacklist / whitelist specific apps to always / never be routed through the VPN.
Edit: Didn't see the community. On Android it seems to feature a whitelist for apps to not be routed through the app, which seems to be permanent. Not sure why the desktop version does not have that.
Add comment