corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a096fa-ccf4-720d-9714-4a6bd938c1f9

Android NAT-T keepalive offload bypasses VPN lockdown

supuk.ch · published 11 September 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at supuk.ch Wayback capture
1blogs citing
First cited
10 Sept 2026
Most recent
11 Sept 2026
Rank this month
not ranked
Links from this post
57
Words captured
9,430

Cited by

Blog
In the post
Date
Mullvad Blog
Another way to leak traffic on Android has been discovered Read at the source ↗
11 Sept 2026
Mullvad Blog
Another way to leak traffic on Android has been discovered Read at the source ↗
10 Sept 2026

Links from this post

Link
Host
https://www.usenix.org/conference/usenixsecurity23/presentation/xue
usenix.org
https://doi.org/10.1515/popets-2015-0006
doi.org
https://arxiv.org/abs/1709.05395
arxiv.org
https://doi.org/10.1145/3278532.3278570
doi.org
https://www.sysnet.ucsd.edu/~voelker/pubs/vpn-imc18.pdf
sysnet.ucsd.edu
https://www.ndss-symposium.org/ndss-paper/auto-draft-244/
ndss-symposium.org
https://arxiv.org/abs/2512.19698
arxiv.org
https://arxiv.org/abs/2604.04099
arxiv.org
https://developer.android.com/reference/android/net/SocketKeepalive
developer.android.com
https://android.googlesource.com/platform/packages/modules/Connectivity/+/2519a78731526d2eb20ae8812acdcab6ef7a09b6/framework/src/android/net/ConnectivityManager.java
android.googlesource.com
https://android.googlesource.com/platform/packages/modules/Connectivity/+/2519a78731526d2eb20ae8812acdcab6ef7a09b6/framework/src/android/net/NattSocketKeepalive.java
android.googlesource.com
https://android.googlesource.com/platform/packages/modules/Connectivity/+/2519a78731526d2eb20ae8812acdcab6ef7a09b6/service/src/com/android/server/ConnectivityService.java
android.googlesource.com
https://android.googlesource.com/platform/packages/modules/Connectivity/+/2519a78731526d2eb20ae8812acdcab6ef7a09b6/service/src/com/android/server/connectivity/KeepaliveTracker.java
android.googlesource.com
https://supuk.ch/software/vpn-leak-guard/06-natt-active-slot-details.png
supuk.ch
https://doi.org/10.1007/978-3-031-97623-0_9
doi.org
https://dblp.org/rec/conf/dimva/JumanaVA25
dblp.org
https://dspacemainprd01.lib.uwaterloo.ca/server/api/core/bitstreams/3b8d7d3b-dfad-4c5d-89ed-d514eb5091b3/content
dspacemainprd01.lib.uwaterloo.ca
https://dspacemainprd01.lib.uwaterloo.ca/server/api/core/bitstreams/d4638be2-30c1-4b56-9d6c-63350b0b7ee2/content
dspacemainprd01.lib.uwaterloo.ca
https://developer.android.com/develop/connectivity/vpn
developer.android.com
https://developer.android.com/reference/android/app/admin/DevicePolicyManager
developer.android.com
https://developer.android.com/reference/android/net/VpnService
developer.android.com
https://android.googlesource.com/platform/frameworks/base/+/94b4c163b7dfe5ce3607f7bb8456f9573f7de57d/services/core/java/com/android/server/connectivity/Vpn.java
android.googlesource.com
https://source.android.com/docs/compatibility/16/android-16-cdd
source.android.com
https://android.googlesource.com/platform/hardware/interfaces/+/1a56e38edc2f2f6189ef405ee1edce554e15cbc0/wifi/aidl/android/hardware/wifi/IWifiStaIface.aidl
android.googlesource.com
https://support.google.com/pixelphone/answer/7158570
support.google.com
https://android.googlesource.com/platform/packages/modules/Connectivity/
android.googlesource.com
https://learn.microsoft.com/en-us/windows-hardware/drivers/network/protocol-offloads-for-ndis-power-management
learn.microsoft.com
https://standards.ieee.org/ieee/802.11v/3695
standards.ieee.org
https://github.com/MotorolaMobilityLLC/vendor-qcom-opensource-wlan-qcacld-2.0/blob/e6075b10e7ce876ba4fd86601fe58aa5791831bd/CORE/SERVICES/COMMON/wmi_unified.h
github.com
https://android.googlesource.com/platform/frameworks/base/+/25bf8f5/core/java/android/net/ConnectivityManager.java
android.googlesource.com
https://source.android.com/docs/compatibility/10/android-10-cdd
source.android.com
https://www.techinsights.com/products/arc-2310-801
techinsights.com
https://investors.broadcom.com/news-releases/news-release-details/broadcom-announces-availability-worlds-first-wi-fi-7-ecosystem
investors.broadcom.com
https://android-developers.googleblog.com/2021/10/android-12-is-live-in-aosp.html
android-developers.googleblog.com
https://f-droid.org/en/docs/All_our_APIs/
f-droid.org
https://apt.izzysoft.de/fdroid/index/info
apt.izzysoft.de
https://android.googlesource.com/platform/packages/modules/Connectivity/+/2519a78731526d2eb20ae8812acdcab6ef7a09b6/service/ServiceConnectivityResources/res/values/config.xml
android.googlesource.com
https://tunnelcrack.mathyvanhoef.com/
tunnelcrack.mathyvanhoef.com
https://tunnelvisionbug.com/
tunnelvisionbug.com
TunnelVision (CVE-2024-3661): How Attackers Can Decloak Routing-Based VPNs For a Total VPN Leak Read at the source ↗
leviathansecurity.com
https://arxiv.org/abs/2208.03505
arxiv.org
https://www.usenix.org/conference/usenixsecurity23/presentation/wu-ka-lok
usenix.org
https://lowlevel.academy/blog/tiny-udp-cannon
lowlevel.academy
https://grapheneos.org/releases
grapheneos.org
https://github.com/GrapheneOS/platform_packages_modules_Connectivity/commit/7930a86931
github.com
https://mullvad.net/en/blog/android-leaks-connectivity-check-traffic
mullvad.net
https://mullvad.net/tr/blog/dns-traffic-can-leak-outside-the-vpn-tunnel-on-android
mullvad.net
https://github.com/GrapheneOS/os-issue-tracker/issues/3443
github.com
https://discuss.grapheneos.org/d/16161-grapheneos-fixing-the-standard-vpn-leak-blocking-is-nearing-completion
discuss.grapheneos.org
https://source.android.com/docs/core/ota/modular-system/ipsec
source.android.com
https://android.googlesource.com/platform/packages/services/Iwlan/+/b9ec687fee0110ee303921431a1eca2b1d35d500/src/com/google/android/iwlan/epdg/EpdgTunnelManager.java
android.googlesource.com
https://android.googlesource.com/platform/packages/modules/Connectivity/+/347fbd34b368d19f0d87e908ea101eed3601a731/Vcn/service-b/src/com/android/server/vcn/VcnGatewayConnection.java
android.googlesource.com
https://blog.google/products-and-platforms/platforms/android/the-android-show-io-2025/
blog.google
https://mullvad.net/nl/blog/any-app-on-recent-android-versions-can-leak-certain-traffic
mullvad.net
https://www.ivpn.net/knowledgebase/android/android-vpn-leak-via-quic/
ivpn.net
https://discuss.grapheneos.org/d/15856-are-vpn-leaks-a-ghost-of-the-past-from-now-on-grapheneos-version-2024091700/6
discuss.grapheneos.org
https://supuk.ch/support
supuk.ch