iOS Openvpn connect on demand

[privacyuser 0]

With the new openvpn connect for iOS you can activate the feature vpn on demand for leak preventing. See screenshot from client at the App Store So it is possible now to create openvpn profiles for iOS with this feature. Can you make a generator for that or publish new profiles in the future?

[Keksjdjdke 35]

With the new openvpn connect for iOS you can activate the feature vpn on demand for leak preventing. See screenshot from client at the App Store So it is possible now to create openvpn profiles for iOS with this feature. Can you make a generator for that or publish new profiles in the future?

Go to https://docs.openvpn.net/connecting/connecting-to-access-server-with-apple-ios/faq-regarding-openvpn-connect-ios/ and search for

"Can I use iOS 6+ VPN-On-Demand with OpenVPN?". The instruction there explain how you can set up VPN-On-Demand.

[Keksjdjdke 35]

Im not sure whether vpn on demand protects against leaks, from what it looks like is that it is a .profile that Automatically connects to a VPN  and or  automatically on boot, their is no indication that it will protect you against leaks"VPN on demand feature is not designed to preform that protection". 

From my reading the best way to protect against leaks is to open OpenVPN connect and tap on settings, and make sure the following settings are set as shown.

• Enable reconnect on wake up, seamless tunnel and set connection timeout to = "Continuously retry" and network state Detection = active.

Also when generating a .ovpn profile, click iOS, check advance and use any UDP/TCP protocol that is using the "3" IP entry, I also enable "Resolved hosts in .ovpn file"

After you make those changes Thoroughly test and try to cause a IP leak on your end and do more reading on "vpn on demand", I may be wrong about its ability to protect against ip leaks using the vpn on demand. Use http://ipleak.net as a test site.

 

This is what the first part of my .ovpn looks like 

 

client

dev tun

remote 64.42.179.50 443

resolv-retry infinite

nobind

persist-key

persist-tun

auth-nocache

verb 3

explicit-exit-notify 5

remote-cert-tls server

cipher AES-256-CBC

comp-lzo no

proto udp

key-direction 1

[privacyuser 0]

Thx 4 reply community. I have tested this option with seamless tunnel, connection time out and network state detection. With this option you can reduce the leaking. After interrupting the vpn and automatically reconnecting there is leak for 1-3 secs. I have tested. But with on demand no package leave the tunnel at this time. It’s a short leak but dangerous. The governments strategy are one of this. They’re interrupting your connection and if u are clicking one of the links at this time you have been leaked. There are some apps that Apple makes it exclusively for functionality, so they can byepass the tunnel with on demand, too. But not in third party apps. No leaks after bypassing the tunnel in safari browsing with on demand. But this is a another discussion.

[Keksjdjdke 35]

Thx 4 reply community. I have tested this option with seamless tunnel, connection time out and network state detection. With this option you can reduce the leaking. After interrupting the vpn and automatically reconnecting there is leak for 1-3 secs. I have tested. But with on demand no package leave the tunnel at this time. It’s a short leak but dangerous. The governments strategy are one of this. They’re interrupting your connection and if u are clicking one of the links at this time you have been leaked. There are some apps that Apple makes it exclusively for functionality, so they can byepass the tunnel with on demand, too. But not in third party apps. No leaks after bypassing the tunnel in safari browsing with on demand. But this is a another discussion.

If you have a suggestion for Apple on how they can improve iOS, you can post it with relevant details here https://bugreport.apple.com