Originally created by: Engen03
Linux
CachyOS with kernel 6.13.5-2-cachyos
2.5.7
If you set a specific region in Route Options in the application, for example \u2018Russia\u2019, then traffic to some sites goes directly through the physical interface, although VPN is configured in NetworkManager.
region set to other.txt (github.com)
region set to russia.txt (github.com)
As you can see in the tcpdump results taken when visiting ya.ru attached in the files, when the region is set to \u2018other\u2019 all non-local traffic goes through 162.159.192.1, which is the IP address of my VPN (Cloudflare WARP), while when the region is set to \u2018Russia\u2019 the traffic for goes directly through the physical interface to and from the ya.ru domain.
This creates a strong threat of de-anonymisation, and not obvious to the user, as it is specific to some domains.
Regardless of the routing rules within an application, it must respect the system's traffic routing settings.
No response
No response
No response