VPN on owner profile but not necessarily on all other profiles

OldFartCracker

Hi guys,

First of all, thanks for providing a great opt-out of big tech and general mass surveillance! So far I love GrapheneOS.

I relatively new to GOS but still a somewhat knowledgeable techie so I've setup a decent set of profiles for compartmentalization.
Most of my profiles have VPN but for a few select I don't want a VPN. This doesn't seem to work, at least not when on the cellular network. A profile without VPN will work on wifi, though.
I guess I can't be the only one with this requirement!? If not, how can it be done?

As far as I've understood the network is shared but VPN profiles are separate for each profile.

Btw, why does it work when on wifi but not on the cellular network?

Best regards

r134a

Hi and welcome,

That's odd, this should work, it works in my case at least. I believe cellular is shared in the same way network is shared across profiles. Does cellular work without vpn on the owner?

Nevertheless i assume the issue u are experiencing is somewhere related to cellular settings, or perhaps with dns settings?

OldFartCracker

Good to hear that it should work.

On the downside it still doesn't work for me. If I disable always on in the VPN on the owner profile, then my other profiles start to work. And the owner profile works fine without VPN!?
Also, if I enable VPN on the other profile (that shouldn't have) then it works.

I guess it could have something to do with DNS. My VPN on the owner profile uses its own DNS, but I don't have access to DNS settings on other profiles.

OldFartCracker

Ok, I got it working.
I set the private dns setting to false on the owner profile.
Although it being false it still routed the dns through the vpn on the profiles with vpn always on!?
On the profiles without vpn it simply just works now.

What do you think? Is it ok to have it set to false??

n3t_admin

OldFartCracker it is recommended to turn off private DNS when running a VPN.

OldFartCracker

Thanks, then I guess my config is ok.