angela Is each profile independent for VPN? If i have vpn 1 on in profile 1 does vpn 2 go through vpn 1 or are they unique? If there is no vpn in profile 2 but one in profile 1, does vpn block connection in profile 2?
userofgos angela read the documentation on the website: https://grapheneos.org/features#improved-vpn-leak-blocking Android VPN configuration is split up for each profile which means work profiles, Private Spaces and secondary users have their own VPN configuration which is a fantastic privacy feature. Android has a standard restriction preventing processes from using a network which the current profile isn't allowed to access. However, this doesn't take multicast packets into account and it's possible to send multicast packets via VPN tunnels belonging to a different profile. GrapheneOS addresses this by extending the standard netfilter configuration with a multicast firewall preventing sending packets through a VPN tunnel which a process isn't supposed to be able to access.