DNS traffic can leak outside the VPN tunnel on Android

Re:DNS traffic can leak outside the VPN tunnel on Android by Asmod4n on Friday May 03, 2024 @12:19PM (#40249383)

The Problem with Android in regards to DNS: you just can't set your own IPv6 DNS Server on that platform, it gets changed anytime anything happens to your wifi. There is no app, even for rooted android, which can disable the operating system from changing it.

When you are stuck with a router that always hands out IPv6 Adresses and doesn't let you turn that off you are just screwed.

I don't even know if you could install a firewall appliance behind that router and strip out the IPv6 DNS Servers it advertises.

[ Parent | on HN ]

Re:DNS traffic can leak outside the VPN tunnel on Android by jsheard on Friday May 03, 2024 @01:15PM (#40249962)

What if you use the system-level support for DNS-over-TLS instead of setting the DNS server IP addresses? That's a global setting so it should apply regardless of which network you're on, or what happens on it. If you care about DNS requests leaking you should be using DoT or DoH anyway.

[ Parent | on HN ]

Re:DNS traffic can leak outside the VPN tunnel on Android by nickburns on Friday May 03, 2024 @01:44PM (#40250280)

doesn't matter. plenty of elaboration elsewhere in the discussion.

[ Parent | on HN ]

Re:DNS traffic can leak outside the VPN tunnel on Android by aritashion on Friday May 03, 2024 @03:23PM (#40251299)

Doesn't rethink let you change ipv6 dns?

[ Parent | on HN ]

Re:DNS traffic can leak outside the VPN tunnel on Android by stainablesteel on Friday May 03, 2024 @12:29PM (#40249487)

so that's what happens on when the phone is the main interface

does this happen with wifi tethering too? if i have a vpn set up on a laptop that i connect through the phone's wifi will that leak in the same way?

[ Parent | on HN ]