Tor for all the apps in a Windows 10 desktop?

Protium_serratum · January 14, 2025, 12:49am

mullvad-exclude doesn’t support Windows.

wireguard-go uses IP_UNICAST_IF and IPV6_UNICAST_IF socket options to bypass its own tunnel, but this method seems to require modifying source code.

github.com

WireGuard/wireguard-go/blob/1f25eac395d68dcb22c77d0717903e9991de1300/conn/conn.go#L60


      
          	Send(bufs [][]byte, ep Endpoint) error
          
          	// ParseEndpoint creates a new endpoint from a string.
          	ParseEndpoint(s string) (Endpoint, error)
          
          	// BatchSize is the number of buffers expected to be passed to
          	// the ReceiveFuncs, and the maximum expected to be passed to SendBatch.
          	BatchSize() int
          }
          
          // BindSocketToInterface is implemented by Bind objects that support being
          // tied to a single network interface. Used by wireguard-windows.
          type BindSocketToInterface interface {
          	BindSocketToInterface4(interfaceIndex uint32, blackhole bool) error
          	BindSocketToInterface6(interfaceIndex uint32, blackhole bool) error
          }
          
          // PeekLookAtSocketFd is implemented by Bind objects that support having their
          // file descriptor peeked at. Used by wireguard-android.
          type PeekLookAtSocketFd interface {
          	PeekLookAtSocketFd4() (fd int, err error)

github.com

WireGuard/wireguard-go/blob/1f25eac395d68dcb22c77d0717903e9991de1300/conn/bind_windows.go#L585-L601


      
          func bindSocketToInterface4(handle windows.Handle, interfaceIndex uint32) error {
          	const IP_UNICAST_IF = 31
          	/* MSDN says for IPv4 this needs to be in net byte order, so that it's like an IP address with leading zeros. */
          	var bytes [4]byte
          	binary.BigEndian.PutUint32(bytes[:], interfaceIndex)
          	interfaceIndex = *(*uint32)(unsafe.Pointer(&bytes[0]))
          	err := windows.SetsockoptInt(handle, windows.IPPROTO_IP, IP_UNICAST_IF, int(interfaceIndex))
          	if err != nil {
          		return err
          	}
          	return nil
          }
          
          func bindSocketToInterface6(handle windows.Handle, interfaceIndex uint32) error {
          	const IPV6_UNICAST_IF = 31
          	return windows.SetsockoptInt(handle, windows.IPPROTO_IPV6, IPV6_UNICAST_IF, int(interfaceIndex))
          }

How do other popular VPN clients bypass their own tunnels on Windows?

blanc · January 23, 2025, 2:28pm

Can I use “socks5://localhost:9150” as the proxy for Firefox browser?