3 ms·

It drains battery because of VPN service solution, which is only non-rooted solution. Also if you use VPN (like Wireguard), you cannot use both. Every app has

It drains battery because of VPN service solution, which is only non-rooted solution. Also if you use VPN (like Wireguard), you cannot use both. Every app has own settings for allowing WiFi, data, VPN, background data connections natively in Android. I use custom ROM that has turned off internet connection for all apps by default and you need manually allow them to connect. Which solve mine problem with constant unwanted connections. If you want really control over traffic on Android and combine with VPN, try ReThing DNS. https://www.rethinkdns.com/ https://www.rethinkdns.com/

g-b-r 2y ago
> It drains battery because of VPN service solution It doesn't really, just try it (and take actual battery duration measurements, Android misreports VPN apps battery usages)
- t0bia_s 2y ago
  I did, battery drains 5-10% faster.
  - g-b-r 2y ago
    If it's so, it's not a lot for privacy and security --- ReThink DNS uses the VPN service as well, by the way. And it is possible to use two VPN apps, see https://news.ycombinator.com/item?id=41933464 https://news.ycombinator.com/item?id=41933464 (yes, the battery usage adds up). Rethink DNS seems fine, anyhow.
    - ignoramous 2y ago
      (I work on rdns) > ReThink DNS uses the VPN service as well, by the way. Rethink (since a year ago) has had the ability forward connections per-app to multiple WireGuard upstreams at the same time. https://old.reddit.com/r/rethinkdns/comments/15r1eq9/v055_multiple_wireguard_vpns/ https://old.reddit.com/r/rethinkdns/comments/15r1eq9/v055_mu... / https://archive.md/RqUPe https://archive.md/RqUPe (to us, it turned out to be a deceptively difficult thing to integrate with the rest of the firewall).
      - thatloststudent 2y ago
        Not really on topic, but is there any plan on integrating tailscale with it? There's a userspace mode for tailscale that exposes a socks proxy, but you currently have to spawn that with Termux or another terminal, then forward your traffic on Rethink.
        ignoramous 2y ago
        Yes (short of anyone sponsoring us to implement it immediately) we do plan to add tsnet support (https://github.com/celzero/rethink-app/issues/1047 https://github.com/celzero/rethink-app/issues/1047) once we iron out existing issues with WireGuard. I'm unsure if we'd be able to support all of Tailscale's features as easily (taildrop, exit nodes etc), we'll see.
    - deleted 2y ago
      [deleted]
baby_souffle 2y ago
> It drains battery because of VPN service solution, which is only non-rooted solution. It's not the _only_ solution. If you're on a modern (read: last 6 years or so) version of android, you can specify a DNS over TLS server to use. If that DNS server also happens to be a PiHole, you have a good filter mechanism that doesn't hit battery life / data quotas quite like an always-on VPN does. It's a bit old, but I put together a basic project for this here: https://github.com/kquinsland/skyhole/ https://github.com/kquinsland/skyhole/
- t0bia_s 2y ago
  I prefer to connect via Wireguard to home network that has DNS filters (ie Pi-hole or NextDNS), because I can benefit with connection to home network any time.

g-b-r 2y ago

> It drains battery because of VPN service solution It doesn't really, just try it (and take actual battery duration measurements, Android misreports VPN apps battery usages)

t0bia_s 2y ago
I did, battery drains 5-10% faster.
- g-b-r 2y ago
  If it's so, it's not a lot for privacy and security --- ReThink DNS uses the VPN service as well, by the way. And it is possible to use two VPN apps, see https://news.ycombinator.com/item?id=41933464 https://news.ycombinator.com/item?id=41933464 (yes, the battery usage adds up). Rethink DNS seems fine, anyhow.
  - ignoramous 2y ago
    (I work on rdns) > ReThink DNS uses the VPN service as well, by the way. Rethink (since a year ago) has had the ability forward connections per-app to multiple WireGuard upstreams at the same time. https://old.reddit.com/r/rethinkdns/comments/15r1eq9/v055_multiple_wireguard_vpns/ https://old.reddit.com/r/rethinkdns/comments/15r1eq9/v055_mu... / https://archive.md/RqUPe https://archive.md/RqUPe (to us, it turned out to be a deceptively difficult thing to integrate with the rest of the firewall).
    - thatloststudent 2y ago
      Not really on topic, but is there any plan on integrating tailscale with it? There's a userspace mode for tailscale that exposes a socks proxy, but you currently have to spawn that with Termux or another terminal, then forward your traffic on Rethink.
      - ignoramous 2y ago
        Yes (short of anyone sponsoring us to implement it immediately) we do plan to add tsnet support (https://github.com/celzero/rethink-app/issues/1047 https://github.com/celzero/rethink-app/issues/1047) once we iron out existing issues with WireGuard. I'm unsure if we'd be able to support all of Tailscale's features as easily (taildrop, exit nodes etc), we'll see.
  - deleted 2y ago
    [deleted]

baby_souffle 2y ago

> It drains battery because of VPN service solution, which is only non-rooted solution. It's not the _only_ solution. If you're on a modern (read: last 6 years or so) version of android, you can specify a DNS over TLS server to use. If that DNS server also happens to be a PiHole, you have a good filter mechanism that doesn't hit battery life / data quotas quite like an always-on VPN does. It's a bit old, but I put together a basic project for this here: https://github.com/kquinsland/skyhole/ https://github.com/kquinsland/skyhole/

t0bia_s 2y ago
I prefer to connect via Wireguard to home network that has DNS filters (ie Pi-hole or NextDNS), because I can benefit with connection to home network any time.