Hello
I am using OpenVPN on iPhone and was looking for a solution for it to not leak my IP ever and configure it with a killswitch.
I tried to search online for a solution with no success.
Im sure there is a way
Thank you
You want to create a vpn tunnel back to your FW (vpn server running on FW). Ideally you’d be using a vpn service (client from FW) to a vpn provider if you were truly concerned about having more privacy.
That said, there’s basically no real reason to use openvpn in favor of wireguard, as wg is faster, and less resource intensive. Instructions on how to create a vpn connection are present on FW’s site; so you should look there. Once the vpn connection is setup you can have the phone automatically connect to the FW’s vpn whenever you leave trusted wifi networks as an example. This is referred to as “on-demand” vpn connection for ios, and the finer details can be set in the wg app.
Sorry what does FW mean? Firewall?
Agreed, use WireGuard whenever possible.
Only reasons to use OpenVPN is (a) you have an IT managed system that allows OVPN connections but not WG (as the case for my corporate laptop, so I carry a Beryl AX). (b) In the very odd situation that WG can’t connect but OVPN can (it’s only happened to me once).
In terms of a “kill switch” I don’t think that the iPhone can truly setup a kill switch as they leak data past a always on VPN (here’s a 2024 article, but it’s been known about for years). Thus you’d really need to use a travel router for 100% coverage.
I would raise the question of if it’s truly needed to have a full time VPN as the majority of the web is now encrypted (via https connections). (I personally have WG as full time, but have a large number of excluded networks.)
This subreddit is intended for Firewalla, not generic “firewalls”.
FW = FireWalla