-
Konduit v0.1.0-beta.10 Pre-Release
eugen released this
2026-07-23 18:53:57 +00:00 | 1 commits to master since this releaseBeta 10 — Linux Full-Tunnel DNS/IPv6 Leak Fix
Fixed
Browsing broke intermittently while connected on Linux, despite the tunnel itself working
Full-tunnel connect never demoted the physical network interface as a
default DNS resolver in systemd-resolved, so DNS queries could be answered
by either the ISP's DNS or the VPN's DNS interchangeably — a split-brain
that produced inconsistent, sometimes partial (IPv6-only) answers. On top
of that, full-tunnel mode only installed an IPv4 default route, so any
destination that resolved to an IPv6 address leaked straight out the
physical interface instead of through the tunnel, or hung waiting on an
unreachable path — the exact failure mode that stalled page loads in
Chromium-based browsers while simple single-request tools (curl) still
appeared to work fine.The client now snapshots and blanks the physical interface's DNS servers
for the duration of the VPN session (restoring them exactly on disconnect),
and installs an IPv6 "unreachable" default route so IPv6 attempts fail
instantly and clients fall back to IPv4 through the tunnel instead of
stalling.Downloads