4 ms·
On Linux I can configure programs to use VPN link or not to use it so I guess it would also be the case with Mac? I would expect apps not to bypass default rout
by ramtatatam 6y ago
On Linux I can configure programs to use VPN link or not to use it so I guess it would also be the case with Mac? I would expect apps not to bypass default route settings, not being Mac user I can only guess default route can be set there, but would OS somehow provide alternative routes if it detects default route is VPN?
- steerablesafe 6y agoOn Linux you can also have network namespaces. It wouldn't surprise me if Mac OS had a similar capability and their apps ran on a different network namespace than the one configurable by the user.
- lsiebert 6y agoNah, they require programs to use their api, and then whitelist their own programs from the api. you can use the following in the terminal the see the list of whitelisted programs: cat /System/Library/Frameworks/NetworkExtension.framework/Versions/A/Resources/Info.plist
- heavyset_go 6y agoLinux offers virtual TUN/TAP[1] devices that encrypt all traffic that is routed through them, along with proxying at the application-level that allows you to tell, say Firefox, to use your VPN. Linux also lets you create VPN connections for individual apps if you use network namespacing. Before Wireguard, I used use network namespaces with OpenVPN[2] to create individual tunnels for different apps, and it worked nicely. [1] https://en.wikipedia.org/wiki/TUN/TAP https://en.wikipedia.org/wiki/TUN/TAP [2] https://github.com/pekman/openvpn-netns https://github.com/pekman/openvpn-netns
- djrogers 6y agoRegular VPN clients that manipulate the default route still work like they always have, this particular issue is related to per-app VPNs, which are not nearly as common, and would generally not be used to redirect OS-native traffic anyway.