79 lines
2.2 KiB
Markdown
79 lines
2.2 KiB
Markdown
# Desktop Client
|
|
|
|
It can:
|
|
|
|
- Check whether Linux TUN support exists.
|
|
- Find `adb`.
|
|
- Check whether the Android VPN Share app is installed.
|
|
- Check whether the Android gateway foreground service is running.
|
|
- Bring the Android app to the foreground.
|
|
- Start the Android gateway and create `adb forward tcp:10808 tcp:10808`.
|
|
- Provide a local `socks5h://127.0.0.1:10808` proxy endpoint.
|
|
- On Linux, create a `vpnshare0` TUN device and route OS traffic through the
|
|
phone using `tun2socks`.
|
|
- Forward DNS/UDP through the Android gateway using SOCKS5 UDP-over-TCP.
|
|
|
|
It cannot yet pair with the phone over VSHP or provide native Windows/macOS TUN
|
|
drivers.
|
|
|
|
## Build
|
|
|
|
```bash
|
|
cargo build -p vpnshare-desktop
|
|
```
|
|
|
|
## Run
|
|
|
|
```bash
|
|
./target/debug/vpnshare-desktop status
|
|
./target/debug/vpnshare-desktop connect
|
|
sudo ./target/debug/vpnshare-desktop system-gateway
|
|
./target/debug/vpnshare-desktop android-launch
|
|
```
|
|
|
|
If `adb` is not on `PATH`, point the CLI to it:
|
|
|
|
```bash
|
|
VPN_SHARE_ADB=/path/to/adb ./target/debug/vpnshare-desktop status
|
|
```
|
|
|
|
After `connect`, use the local SOCKS5 proxy with apps that support SOCKS:
|
|
|
|
```bash
|
|
ALL_PROXY=socks5h://127.0.0.1:10808 curl https://ifconfig.me
|
|
chromium --proxy-server=socks5h://127.0.0.1:10808
|
|
```
|
|
|
|
The `socks5h` form is important because DNS names are resolved through the
|
|
phone-side gateway instead of the desktop.
|
|
|
|
## Linux System Gateway
|
|
|
|
For normal OS/app routing on Linux:
|
|
|
|
1. Connect the phone with USB debugging enabled.
|
|
2. Start the Android VPN app you want to share.
|
|
3. Run `./target/debug/vpnshare-desktop connect`.
|
|
4. Run `sudo ./target/debug/vpnshare-desktop system-gateway`.
|
|
5. Keep the `system-gateway` process open while sharing.
|
|
|
|
`system-gateway` creates `vpnshare0`, starts `tun2socks`, installs split-default
|
|
routes (`0.0.0.0/1` and `128.0.0.0/1`), and configures systemd-resolved DNS on
|
|
`vpnshare0` when `resolvectl` is available.
|
|
|
|
Cleanup command:
|
|
|
|
```bash
|
|
sudo ./target/debug/vpnshare-desktop cleanup
|
|
```
|
|
|
|
## Next Implementation Step
|
|
|
|
The next milestone is replacing the interim SOCKS transport with the full VSHP
|
|
packet tunnel:
|
|
|
|
1. Connect to the Android gateway over USB/WiFi/hotspot transports.
|
|
2. Pair using VSHP.
|
|
3. Encrypt IP packet frames end to end.
|
|
4. Add Windows/macOS packet adapters.
|