Is it possible to use addDisallowedApplication instead of protect in VpnService

[zonyitoo]

Current implementation relies on a RPC call from the underlying sslocal to the Application to call VpnService.protect, which is for setting a SO_MARK on the socket file descriptor to bypass all outbound data.

But is it possible to make use of VpnService.Builder.addDisallowedApplication?

[madeye]

It's possible but we want to avoid that.

Because we expect the shadowsocks app itself needs to be proxied, to help testing the connection, fetching remote ACL rules and etc.

[zonyitoo]

Sounds reasonable.

But with addDisallowedApplication will help simplfied the whole process. RPC calls still have extra overhead.

[madeye]

Actually Android system is full of IPC calls: https://developer.android.com/guide/components/aidl

So don't worry about that.

[Mygod]

#1742

[zonyitoo]

2018 ... So what's your plan? @Mygod

[Mygod]

It's abandoned and no plan to revive it. As detailed in the post, it could be used for debugging purposes.