Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updates BSK #2429

Merged
merged 3 commits into from
Feb 21, 2024
Merged

Updates BSK #2429

merged 3 commits into from
Feb 21, 2024

Conversation

diegoreymendez
Copy link
Contributor

@diegoreymendez diegoreymendez commented Feb 4, 2024

Task/Issue URL: https://app.asana.com/0/0/1206462407536023/f
Tech Design URL:

macOS PR: duckduckgo/macos-browser#2128
BSK PR: duckduckgo/BrowserServicesKit#652

Description

The changes from BSK shouldn't affect iOS. We're only making sure the latest BSK version is integrated.

Testing

  1. Review the changes in BSK to make sure they don't affect iOS.
  2. Build the iOS App and test the VPN connects and works just fine.

Internal references:

Software Engineering Expectations
Technical Design Template

diegoreymendez added a commit to duckduckgo/BrowserServicesKit that referenced this pull request Feb 21, 2024
Task/Issue URL: https://app.asana.com/0/0/1206462407536023/f
Tech Design:

- [Tech Design: How to exclude Data Broker traffic?](https://app.asana.com/0/481882893211075/1206363506060150/f)
- [Tech Design: Mechanism to allow PIR to start excluding its traffic from the VPN tunnel](https://app.asana.com/0/481882893211075/1206446978081253/f)
- [Tech Design: How will the proxy recover from failure?](https://app.asana.com/0/481882893211075/1206446978546262)

iOS PR: duckduckgo/iOS#2429
macOS PR: duckduckgo/macos-browser#2128

What kind of version bump will this require?: Patch
diegoreymendez added a commit to duckduckgo/macos-browser that referenced this pull request Feb 21, 2024
Task/Issue URL: https://app.asana.com/0/0/1206462407536023/f
Tech Design URLs:
- [Tech Design: How to exclude Data Broker
traffic?](https://app.asana.com/0/481882893211075/1206363506060150/f)
- [Tech Design: Mechanism to allow PIR to start excluding its traffic
from the VPN
tunnel](https://app.asana.com/0/481882893211075/1206446978081253/f)
- [Tech Design: How will the proxy recover from
failure?](https://app.asana.com/0/481882893211075/1206446978546262)

iOS PR: duckduckgo/iOS#2429
BSK PR: duckduckgo/BrowserServicesKit#652

## Description

Adds a transparent proxy that allows excluding app and domain traffic
from the VPN.

## Known issues / limitations

###  Issue 1: Exclusion delay on existing flows

When switching off an exclusion, connection flows seem to switch
immediately to routing through the tunnel interface again.

However when turning the exclusion back ON, connection flows seem to
take a bit before routing back through the proxy.

This should not be a big problem as eventually connections start being
excluded correctly again. It's unclear at this point if this is a macOS
bug, or a bug on our proxy - but I don't think this should be a blocker
by any means.
@diegoreymendez diegoreymendez merged commit be3dd4d into main Feb 21, 2024
13 checks passed
@diegoreymendez diegoreymendez deleted the diego/transparent-proxy branch February 21, 2024 21:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants