Convert trusted networks to on-demand activation

[keeshux]

Like WireGuard does, with only/except matching policy.

[fumoboy007]

Is this related to not being able to explicitly connect on a trusted network?

[keeshux]

Exactly, that's the idea.

[somebody-somewhere-over-the-rainbow]

would that also add the ability to connect on-demand in the iOS sense, meaning by app. This would be awesome as well. Meaning a VPN connection is established when a specific app is used (and ideally only that traffic is routed via this specific tunnel)

[keeshux]

Nope, it's not related.

[somebody-somewhere-over-the-rainbow]

I was referencing the function outlined here:
https://developer.apple.com/documentation/networkextension/personal_vpn/vpn_on_demand_rules

[keeshux]

I see, but it has nothing to do with what you expect it to accomplish!

[somebody-somewhere-over-the-rainbow]

Does it make sense to open the topic for discussion as a future feature? I do not know the level of interest for this. I would imagine that everyone that uses the VPN to bypass geo restrictions on certain apps (hulu, cnn and many other apps) would love this feature ...

[keeshux]

I understand the need and also like the feature, but I wouldn't do it unless Apple makes it native. Not in OpenVPN at least. If WireGuard supports it, that's another story for later.

[somebody-somewhere-over-the-rainbow]

okay, my understanding was that is is nativly supported (at least for ikev2 and ipsec)

[keeshux]

I mean that "on demand rules" are not rules for a "per app VPN".

[mikicof]

I’ve seen on other vpn apps that you can include a list of domains to be added to the connect on demand rules so it will only connect to the vpn when any connection is done to them…
That would be great for my home network, don’t know if related to this or better on another thread.

[juev]

This function is present on Shadowrocket.

It great function. For example, I setup disconnect from vpn when my iPhone will sleep, and connect to vpn when I open domain from list. Another one, we can setup vpn only for specific domains. All other request will use direct connection.

When we activate vpn only when we open specific domains, we will economy our battery energy.