Android TV - VPN connection at startup. Why OpenVPN for Android can do it and Eddie not?

[tranquivox69 27]

Basically all in the title. I know Android TV 10 removed the VPN options (eternal shame on Google for this) that would be relevant for this functionality.
I use AndroidTV 12.
But OpenVPN for Android still manages to connect when the machine starts. Is there a reason why Eddie cannot do it or something I could do to achieve the same result?

Thank you.

[Staff 9993]

@tranquivox69

Hello!

Eddie can not start and connect during the device bootstrap without "Always on VPN". The fact that OpenVPN for Android can is unexpected, as the mentioned option was deemed as compulsory to connect to a VPN during the bootstrap. Can you please tell us your device brand and model?

Kind regards
 

[tranquivox69 27]

1 hour ago, Staff said:

Eddie can not start and connect during the device bootstrap without "Always on VPN". The fact that OpenVPN for Android can is unexpected, as the mentioned option was deemed as compulsory to connect to a VPN during the bootstrap. Can you please tell us your device brand and model?

Same thing with Wireguard: https://github.com/zaneschepke/wgtunnel

I am using a DuneHD Homatics 4K R Plus. I have tested both after a complete reboot (took the power connector out and reinserted, as to avoid any doubt.

Thanks for looking into this. I'd be happy to use Eddie, if at all possible, to serve my needs.

[tranquivox69 27]

One thing: maybe both apps (Open VPN for Android and WG Tunnel) do not actually start the connection at boot. But they do start it immediately when the machine is ready, without user intervention.

This has most definitely added value for the end user, IMHO, it 100% has value for me specifically.
WG Tunnel being open source can probably show what the dev does to achieve this.

[Staff 9993]

12 hours ago, tranquivox69 said:

One thing: maybe both apps (Open VPN for Android and WG Tunnel) do not actually start the connection at boot. But they do start it immediately when the machine is ready, without user intervention.

This has most definitely added value for the end user, IMHO, it 100% has value for me specifically.
WG Tunnel being open source can probably show what the dev does to achieve this.

Hello!

Of course. We will study the matter carefully and we will update this thread.

Kind regards
 

[tranquivox69 27]

I appreciate it. It would surely make Eddie more attractive in the competitive market.

[Staff 9993]

Hello!

The trick (an idea to be verified) is using the current broadcast receiver, implemented in the app since its initial release, without verifying "Always on VPN" (Eddie should not refuse to be configured to start at boot if "Always on VPN" is not available) .

However, this procedure does not work anymore in Android 14 and above, because it is now forbidden to start activities in background. Eddie was planned to pretend "Always on VPN" on various Android versions, otherwise it refuses to start at bootstrap. Since other programs do not verify the activation of that option, they can still start and connect at bootstrap on Android TV 10, 11, 12, 13 versions.

By removing "Always on VPN" and preventing background activities Google closed the loophole of automatic VPN connections during the bootstrap which, we suspect, is detrimental for marketing and profiling reasons. The same decision was taken by various Chinese companies even for Android (and not just TV).

In Android 14 and 15, the "Always on VPN" option becomes mandatory and it will allow start & connection during the bootstrap even though background activities are not allowed.

Therefore the solution cannot be considered as "universal" but yes, we think we can implement it to overcome the current Eddie limitation, at least it will work in Android TV from 10 to 13.

Kind regards
 

[tranquivox69 27]

20 hours ago, Staff said:

Hello!

The trick (an idea to be verified) is using the current broadcast receiver, implemented in the app since its initial release, without verifying "Always on VPN" (Eddie should not refuse to be configured to start at boot if "Always on VPN" is not available) .

However, this procedure does not work anymore in Android 14 and above, because it is now forbidden to start activities in background. Eddie was planned to pretend "Always on VPN" on various Android versions, otherwise it refuses to start at bootstrap. Since other programs do not verify the activation of that option, they can still start and connect at bootstrap on Android TV 10, 11, 12, 13 versions.

By removing "Always on VPN" and preventing background activities Google closed the loophole of automatic VPN connections during the bootstrap which, we suspect, is detrimental for marketing and profiling reasons. The same decision was taken by various Chinese companies even for Android (and not just TV).

In Android 14 and 15, the "Always on VPN" option becomes mandatory and it will allow start & connection during the bootstrap even though background activities are not allowed.

Therefore the solution cannot be considered as "universal" but yes, we think we can implement it to overcome the current Eddie limitation, at least it will work in Android TV from 10 to 13.

Kind regards
 

Thanks a lot for looking into it.

So, as I understand it... till Android 13 it could be possible to have it work as I see WG Tunnel working.

I don't understand the differences you describe for Android 14 and 15. You state "Google closed the loophole of automatic VPN connections during bootstrap". But then "In Android 13 and 14 the "Always On VPN" option becomes mandatory and it will allow start & connection during bootstrap even though background activities are not allowed".

Could you explain again what happens with 14 and 15? Sorry for being thick... And great news about implementing it in Eddie. Definitely looking forward to it.

[Staff 9993]

1 hour ago, tranquivox69 said:

Could you explain again

Hello!

• Android 14 and 15 and Android TV 14 and 15 do not allow background activities;
• Android 14 and 15 however do have "Always on VPN", unless deleted by the manufacturer;
• Android TV 10, 11, 12, 13, 14 and 15 do not have "Always on VPN";
• Android TV 10, 11, 12, 13 allow background activities.

Therefore:

• on Android TV 14 and 15 the connection to a VPN during the device bootstrap remains impossible on an un-rooted device (*);
• on Android 14 and 15 connection to a VPN during the bootstrap is possible in spite of the forbidden background activities, thanks to "Always on VPN";
• on Android TV 10, 11, 12, 13, connection to a VPN during the bootstrap is possible in spite of lack of "Always on VPN" feature because background activities are allowed. However Eddie, unlike the other apps you mentioned, will not take advantage of it, due to a coded limitation according to which it doesn't let you configure app start at bootstrap if "Always on VPN" is not available on any Android TV 10 and higher versions and other specific Android versions. This is Eddie's part that needs to be re-designed and re-implemented in order to allow connection at boot on Android TV 10, 11, 12, and 13.

(*) Except maybe on specific devices for some manufacturer customization thru apps start managers at boot or anything else

Kind regards