Two VPNs at once

Jeff

This is a feature request. I use two different VPNs when I am using different apps. I use tailscale to connect to my home server where I self host photos and files. I then also use Proton VPN for everything else. It's not terribly important, but it is a nuisance to have to switch between VPNs every time I want to access my photos. Now, I know about using a separate profile to run two VPNs at once, but this doesn't really work out for my use case at least, because of how it separates files, when I take a picture, it's only accessible on the profile it was taken on. So If I were to need it an app that wasn't in that profile, It's fairly difficult.Considering Graphene is it's own project, I was wondering if they could remove the one VPN limitation. I realize I could be asking for something that's simply impossible, and if that's the case, just simply ignore me :D. Thanks for reading.

DeletedUser237

Jeff Not really possible. What you could look into is running the VPN of choice on your router and use either tailscale or wireguard to tunnel to your router and exit through it.

Ghostinfinit

Jeff
Tailscale has support for Mullvad VPN and allows you to connect to Tailscale while using Mullvad VPN as your exit.

r134a

Jeff As @DeletedUser237 already suggested to use your router as an exitnode, while u mentioned u have a homeserver, u could also set up any wireguard or ovpn container and configure tailscale in a way to advertise it as an exitnode. I have a similar setup and works great.

U could then place many config files in the wireguard folder, set up a webserver with some drop-down menu with all your conf files, and remotely change 'vpn-country' from a 'ui'/pwa while using tailscale.

As suggested here tailscale also natively supports a mullvad integration to use as an exit-node, but i believe this is a paid option.

GrapheneOS

Jeff

but this doesn't really work out for my use case at least, because of how it separates files, when I take a picture, it's only accessible on the profile it was taken on.

Use a Private Space for more convenience. It's still separated but it's possible to share files between them, etc. with the system file management interfaces.

Jeff

DeletedUser237 Alright, Thanks for the advice!

monozygote

I'm not an expert, but I suppose on a Linux system this should (or already is?) be possible by using split-tunnelling. You can have systmemd dns resolver which defines the affinity to a particular interface for the connection. That interface (I suppose combined with "ip route") can send it to different "TUNs" (one for each VPN) ? That tun interface/device (or whatever it's actually called) can then use the parameters of the vpn it's associated with (destination IP, encryption, authentication and so on) to send it there. You can also have all remaining dests just go to the normal Internet (ie VPN less). So set of domains resolve to VPN-A, another set to VPN-B and remaining to "normal" internet via ISP.

IIRC twingate split-tunneling works like this?

DeletedUser237

monozygote You're referring to Linux namespaces in the first part.

As for split tunneling you can exclude apps from VPN traffic so that it is not being tunneled as per your example in he last sentence, but this does not mean you can create a separate tunnel to VPN/Tor that traffic through something else. The service you mentioned does explain what split tunneling means and how it works.

Cdc

Some VPNs app have split tunneling settings. This kind of setting is also available in OpenVPN for Android app. But some says that OpenVPN isn't the wise choice.

angela

I was just thinking about the same thing. I would like to use Orbot or Invisible as my default VPN but have some connections go through another VPN and then I wish I could run ReThinkDNS on top of that to filter things how I want.

It's not possible because even with custom coding to have multiple settings, GOS is build on AOSP and so any updates would make the custom coding problematic likely.

Really, the best thing to do is beg the ReThink DNS owner for even more custom settings so there can be multiple connections for VPN like this.

Since the maker of that program possibly visits this website, and I'm not to proud to beg, here it goes:

Please celzero, please! I'm begging you! Incorporate these features for us!

Pleeeeaaaase!!!!? 🙏🙏🙏🙏🙏🙏🙏🦶🦶

😅

DeletedUser237

r134a tailscale have this (dis)advantage for me the it requires identity provider to create an account.

r134a

DeletedUser237 Yeah u do need an email to link to your account. Not sure anymore what te requirements were tbh, to make your setup more 'private' there's Headscale though.

DeletedUser237

r134a It's not even that you need an email, if you want to sign up now you need an identity provider to sign up, using Google, apple, Ms etc..

This is not private nor anonymous. Which as I said is both good and bad, but for me this is a no go and unneeded hurdle.