Mullvad

Welcome to the Mullvad VPN client app source code repository. This is the VPN client software for the Mullvad VPN service. For more information about the service, please visit our website, mullvad.net (Also accessible via Tor on our onion service). This repository contains all the source code for the desktop and mobile versions of the app. For desktop this includes the system service/daemon ( mullvad-daemon ), a graphical user interface (GUI) and a command line interface (CLI). The Android app uses the same backing system service for the tunnel and security but has a dedicated frontend in android/. iOS consists of a completely standalone implementation that resides in ios/. You can find our code signing keys as well as instructions for how to cryptographically verify your download on [Mullvad's Open Source page]. See Supported Platforms for details on which operating systems, versions and architectures are supported, and which ones are covered by our automated test suite. Here is a table containing the features of the app across platforms. This is intended to reflect the current state of the latest code in git, not necessarily any existing release. This app is a privacy preserving VPN client. As such it goes to great lengths to stop traffic leaks. And basically all settings default to the more secure/private option. The user has to explicitly allow more loose rules if desired. See the [dedicated security document] for details on what the app blocks and allows, as well as how it does it. All merge commits to the main branch must be PGP (gpg) signed in git. This signs off the entire feature branch. The individual commits in the feature branch do not need to be signed, unless they change one or more of the files deemed extra important. The list of files requiring signatures to every commit that change them is defined in the verify-locked-down-signatures workflow. This app is audited by external security experts and penetration testers every second year. We also carry out feature specific audits for certain security critical features and changes. The results of these audits are always made public in their unredacted original form, for full transparency towards the users. See the audits readme for this. Moreover, we welcome any individual to review the security of this app and submit any found issue to us. See SECURITY.md for more. This repository contains submodules needed for building the app. However, some of those submodules also have further submodules that are quite large and not needed to build the app. So unless you want the source code for all submodules you should avoid a recursive clone of the repository. Instead clone the repository normally and then get one level of submodules: This repository has a git submodule at dist-assets/binaries . This submodule contains binaries and build scripts for third party code we need to bundle with the app, such as Wintun. This submodule conforms to the same integrity/security standards as this repository. Every merge commit should be signed. And this main repository should only ever point to a signed merge commit of the binaries submodule. See the build instructions for help building the app on desktop platforms. TALPID FIREWALL DEBUG - Helps debugging the firewall. Does different things depending on platform: Linux: Set to "1" to add packet counters to all firewall rules. macOS: Makes rules log the packets they match to the pflog0 interface. Set to "all" to add logging to all rules. Set to "pass" to add logging to rules allowing packets. Set to "drop" to add logging to rules blocking packets. TALPID FIREWALL DONT SET ARP IGNORE - Set this variable to 1 to stop the daemon from setting the net.ipv4.conf.all.arp ignore kernel parameter to 2 on Linux when a tunnel is established. The kernel config parameter is set by default, because otherwise an attacker who can send ARP requests to the device running Mullvad can figure out the in-tunnel IP. TALPID DNS MODULE - Allows c