VPN leak

netbust

Hello,
I used an LLM for translation, so please excuse any awkward English.
As far as I know, in GrapheneOS, when using the kill switch — even with Private DNS turned off — there is a slight DNS leak unless you’re using the official WireGuard app or the built-in VPN. I heard that in the July patch, VPN leaks were improved. Does this issue still occur? Or is there now no leakage at all when using the VPN kill switch in GrapheneOS?
Thank you.

Skorp

netbust

My understanding that there may be a couple of very niche cases of VPN leaks, mostly related to loopback. Apps that use the VPN slot shouldn't leak DNS if Private DNS is set to "off". If it still leaks under this scenario, then it is very likely an app issue.

netbust

Skorp Thank you. So does that mean that, so far, if I use a third-party VPN there will be leaks, but if I use the official WireGuard app or the built-in VPN, there won’t be any leaks?

Skorp

netbust

You should be able to use the VPN app from the service provider safely. Mullvad, Proton, or IVPN are known to be solid.