mullvad/mullvadvpn-app
Mullvadvpn App
This project is a privacy-focused VPN manager and WireGuard client application designed to establish encrypted tunnels that mask user IP addresses and activity. It focuses on maintaining anonymity through a system that supports account creation without personal identifying information.
The application distinguishes itself with advanced privacy tools, including a multi-hop orchestrator for routing traffic through multiple sequential servers and a network traffic obfuscator that uses Shadowsocks, TCP, and QUIC to bypass deep packet inspection and censorship. It also implements quantum-resistant tunneling to secure traffic against future decryption.
Broad capabilities include the management of secure DNS queries via HTTPS or TLS, split tunneling for application-specific routing, and a strict-firewall kill switch to prevent internet traffic leaks during connection failures. The system also provides a command-line interface for programmatic administration of network tunnels and application settings.
Features
- WireGuard VPN Support - Implements secure network tunnels using the WireGuard protocol with support for custom DNS and split tunneling.
- Encrypted Tunneling - Establishes secure encrypted tunnels to remote servers to mask the user's IP address.
- VPN - Provides the primary mechanism for establishing and managing secure connections to remote VPN servers.
- Encrypted Tunneling - Integrates with the system network stack to route encrypted traffic at the kernel level for high performance.
- Multi-Hop Routing - Routes network traffic through multiple sequential servers to increase privacy and obfuscate the path.
- VPN Kill Switches - Implements a strict firewall kill switch that drops all non-VPN traffic during connection failures.
- VPN Daemons - Implements a privileged background process to manage encrypted network tunnels and system firewall rules.
- Anonymous Authentication - Allows users to establish service connections without providing personal identifying information.
- Network Kill Switches - Implements a strict-firewall kill switch to block all outbound traffic when the secure tunnel fails.
- Privacy-Focused VPN Managers - Manages anonymous accounts and secure network connections without storing personal identifying information.
- Privacy and Anonymity Tools - Supports anonymous account creation and multi-hop routing to mask digital footprints and protect user identity.
- VPN Clients - Provides a cross-platform client for managing the lifecycle of WireGuard VPN connection profiles.
- VPN User Accounts - Manages VPN-specific account numbering, user logins, and service time via voucher redemptions.
- Command Line Interfaces - Provides a command-line interface for programmatic administration of network tunnels and settings.
- Censorship Circumvention Tools - Provides tools to bypass regional network restrictions and access blocked content using bridges and obfuscation.
- VPN Server Selection - Allows users to optimize their connection by selecting specific countries or hosting providers.
- DNS Configuration - Enables customization of DNS servers and activation of content blockers to filter domains.
- DNS Leak Protection - Encrypts DNS queries via DoH or TLS and forces them through the tunnel to prevent identity leaks.
- SOCKS5 - Implements a SOCKS5 client to route internet traffic through remote proxies to reduce CAPTCHAs.
- SOCKS5 Proxies - Routes application-level traffic through a local SOCKS5 proxy to mask user identity.
- Split Tunneling - Provides selective routing to exclude specific IP addresses or applications from the encrypted tunnel.
- Multi-Hop Routing - Routes internet traffic through multiple sequential servers to obfuscate the traffic path and increase privacy.
- Censorship Circumvention Tools - Bypasses restrictive firewalls and access blocks using bridges and specialized protocols.
- DNS Security - Encrypts DNS lookups via DNS-over-HTTPS or DNS-over-TLS to prevent browsing history monitoring.
- Quantum-Resistant Protocols - Creates encrypted tunnels using quantum-resistant protocols to secure traffic against future decryption.
- Network Access Control - Controls whether the device can communicate with other hardware on the local area network.
- Network Traffic Obfuscators - Uses Shadowsocks, TCP, and QUIC to mask VPN traffic and bypass deep packet inspection.
- Traffic Obfuscation - Masks network traffic using Shadowsocks, TCP, and QUIC to bypass deep packet inspection.
- Connection Leak Auditing - Provides tools to scan for information leaks during active connections to ensure browser privacy.
- VPN Command Line Administration - Provides a command-line interface for programmatic administration of network tunnels and settings.
- Proxy And VPN - Listed in the “Proxy And VPN” section of the Awesome Mac awesome list.
- Sécurité et confidentialité - Native VPN client focused on privacy and anonymity.
