Multiple on-demands (well, way around them)
Posted: Fri Nov 09, 2018 3:38 pm
Greetings,
So I've got this weird idea of using different connection rules based on circumstances, such as device is connected to known or unknown networks, etc.
For example:
1. Force all connections through the VPN, when the device is connected to an unknown WIFI/Ethernet network.
2. Use a split tunnel when the user is connected to known / trusted networks or LTE, e.g. no need to use encrypted traffic, etc.
The primary use case for such a setup would be to pull up VPN automatically for all public or untrusted networks, while use the bear minimum required on those trused (incl mobile carrier, until at least alibaba won't sell pocket-mobile-towers for a buck or two).
I've been experimenting with various ondemand rules, but while I can easily get connect / disconnect options set per lte/wifi networks/domains, etc, I've got a hard time doing this for multiple configurations or parameters (given ondemand rules can't affect connection params, and ondemand will only work with the selected profile only; setting up two different ones with mutually exclusive rules just won't work therefore).
Thought you guys may have alternate ideas on how to approach something like this, even in theory.
Thanks for giving this a thought
Bests,
mb
So I've got this weird idea of using different connection rules based on circumstances, such as device is connected to known or unknown networks, etc.
For example:
1. Force all connections through the VPN, when the device is connected to an unknown WIFI/Ethernet network.
2. Use a split tunnel when the user is connected to known / trusted networks or LTE, e.g. no need to use encrypted traffic, etc.
The primary use case for such a setup would be to pull up VPN automatically for all public or untrusted networks, while use the bear minimum required on those trused (incl mobile carrier, until at least alibaba won't sell pocket-mobile-towers for a buck or two).
I've been experimenting with various ondemand rules, but while I can easily get connect / disconnect options set per lte/wifi networks/domains, etc, I've got a hard time doing this for multiple configurations or parameters (given ondemand rules can't affect connection params, and ondemand will only work with the selected profile only; setting up two different ones with mutually exclusive rules just won't work therefore).
Thought you guys may have alternate ideas on how to approach something like this, even in theory.
Thanks for giving this a thought
Bests,
mb