[strongSwan] mobile client - per app vpn support

Tobias Brunner tobias at strongswan.org
Mon Jun 26 17:37:05 CEST 2017


Hi Stella,

> - There is no option per-app VPN. Is it correct ?

No, but the next release of the app will support this.

> - There is VPN split tunneling in the IP level. Is it correct?

No, but the next release of the app will support this.

> - What does the following option mean: "block ipv4 traffic not destined
> for the vpn" ? 
> I understand it as the traffic not accepted on the VPN server side will
> not be sent to VPN tunnel. Is it correct?

No it will be blocked (basically a route to 0.0.0.0/0 is forced even if
the server narrowed the traffic selector).  So to just treat traffic
that is not destined for the VPN (i.e. does not match the traffic
selector) as if there was no VPN, don't check that box.

Regards,
Tobias


More information about the Users mailing list