mirror of
https://github.com/amnezia-vpn/amneziawg-android.git
synced 2026-10-13 21:34:07 +00:00
[GH-ISSUE #79] Split Tunneling (Allowlist) Conflicts with Android's "Block Connections Without VPN" (Traffic Leak / Routing Failure) #39
Labels
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
amnezia-vpn/amneziawg-android#39
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @universish on GitHub (Jun 16, 2026).
Original GitHub issue: https://github.com/amnezia-vpn/amneziawg-android/issues/79
Description:
Bug description:
When Android's native "Always-on VPN" and "Block connections without VPN" settings are enabled, and AmneziaVPN is configured to use the "only the apps from the list should have access via VPN" (Allowlist) mode, unlisted apps are still able to access the internet.
Due to Android's Kill Switch rule, unlisted apps (which are supposed to bypass the VPN tunnel) should have their internet access completely blocked by the OS. Since they still have internet access, this indicates either a traffic leak bypassing the OS kill switch, or AmneziaVPN is incorrectly forcing all unlisted apps through the VPN tunnel despite the allowlist configuration. Consequently, LAN-dependent apps like LocalSend fail to operate because the multicast packets are incorrectly routed.
Steps to reproduce:
Expected behavior:
The unlisted web browser should have NO internet connection. Android's "Block connections without VPN" should drop its traffic because it is instructed to bypass the VPN interface.
Actual behavior:
The unlisted web browser successfully connects to the internet.
Environment:
@universish commented on GitHub (Jun 19, 2026):
Oops. I created the issue report in the wrong repository. This bug needs to be moved to the amnezia-client repository. The bug is related to the amnezia VPN Android app, not the amneziawg app.