DNS traffic can leak outside the VPN tunnel on Android
We were recently made aware of multiple potential DNS leaks on Android. They stem from bugs in Android itself, and only affect certain apps.
This is a nice write-up from Mullvad. I've been using their services for a while and will continue to do so.
Aren't you all tired of the captcha that we need to solve while using VPNs? Is there a solution (I don't think so)?
Been using Mullvad for over 10 years, first through my dads account and recently bought my own subscription for a year. Very respectable people and a great service. I recommend this to anyone looking for a VPN.
The leaks seem to be limited to direct calls to the C function
getaddrinfo.
The Chrome browser is an example of an app that can use
getaddrinfodirectly.
So a Google browser...
The above applies regardless of whether Always-on VPN and Block connections without VPN is enabled or not, which is not expected OS behavior and should therefore be fixed upstream in the OS.
We’ve been able to confirm that these leaks occur in multiple versions of Android, including the latest version (Android 14).
And a Google OS...
We have reported the issues and suggested improvements to Google and hope that they will address this quickly.
It's a feature, not a bug.
This is not terribly new, and requires more investigation. One of the bugs appears to be due to Mullvad, other is potentially an Android bug.
