Firewall

Quad9 Connect is an Android and ChromeOS app that sends your DNS queries to Quad9's secure, private, open recursive DNS service. Quad9 Connect adds additional functionality and features compared to using Android's Private DNS feature to utilize encrypted DNS or configured Quad9 in Chrome on ChromeOS. The application creates a split VPN tunnel with Android API "VpnService" to configure an alternate DNS server on Android and ChromeOS. ## Features - DNS over TLS or DNS over UDP - DNS Query Log - Trusted Networks - Blocked Query Notifications - Local Domains - Excluded Applications

Say hello to a safer, transparent, and secure Android. VPN: Connects to multiple WireGuard VPNs of your choice. Safe: Reveals network activity of installed apps and lets you disable, uninstall, or firewall them. Secure: First line of defense against spyware, ransomware, and malware that steal personal information and takeover accounts. Protects from DNS manipulation typically employed to censor websites, social media, and messaging apps. Fast: DNS Servers deployed to 300+ locations world-wide to ensure your internet is as fast and highly available as it can be. Open: Open source and free of any trackers. ***Features*** Firewall: Prevent apps from connecting to the Internet. Block spyware, malware, ransomware and more. A firewall blocks any app connecting to the Internet over WiFi or Mobile data. Since most forms of surveillance require the data to be sent the network to a server, firewalling them effectively mitigates the threat (File Managers, Alarm Clock, Calculator are few such examples of apps that do not require any Internet access to function). The firewall feature uses Accessibility Service to detect and firewall background applications. Monitoring: Keep tabs on incoming and outgoing Internet traffic. If enabled, the connectivity logs are collected and analyzed. Automated reports flag previously unknown or suspicious connections, and reveal the extent of attempt to steal data by spyware networks. In our tests, around 60% of the traffic is flagged and reported as being initiated by known spyware. Logs generated are made available in near-real time to the user for their own analysis. WireGuard: Secure outgoing Internet traffic. The app uses fast, modern, light-weight, and secure WireGuard protocol to encrypt outgoing connections to any compatible VPN provider of your choice. Anti-censorship: The app encrypts your internet connection to Domain Name System (DNS) server run by Rethink with presence in our 300+ locations world-wide. DNS servers are the address book of the internet: A DNS server provides the exact addresses you need to visit a website or open an app. Data Monitor: Track per-app and per-connection Mobile or WiFi data usage.

Why this app? When you travel near country borders, your phone may automatically connect to a stronger cell tower across the border—even if you never left your country. This can quickly result in costly roaming fees. Manually toggling roaming is inconvenient and easy to forget.Roaming Borders automates the guardrails so you don’t have to. What it does Block roaming when you don’t want it: Select allowed countries; if your device connects outside that list, data traffic is blocked. Avoid surprise charges: Prevent accidental cross-border roaming near national frontiers. Simple presets or full control: Choose ready-made country presets or build your own list for upcoming trips. On-device only: Uses Android’s VpnService as a local firewall. No tunneling to servers. How it works Roaming Borders runs a lightweight, on-device VPN that filters traffic based on your current country. When your current country is not in your allow-list → block data traffic system-wide. When your current country is allowed → allow traffic as normal. When connected to Wi-Fi, the guard pauses automatically and resumes once Wi-Fi disconnects. Note on reboot: After restarting your phone, the guard re-enables after a short delay. To be extra safe, enable Airplane mode before restarting.

A lightweight, privacy focused Android firewall application that blocks network connections for selected apps without requiring VPN. ShizuWall leverages Shizuku to provide powerful network control capabilities. Requires Android 11 (API 30) or higher.

SimpleXray is a high-performance proxy client for Android, built upon the robust Xray-core. It features an innovative approach: directly executing the official Xray-core binary. This method isolates core logic from the app layer, boosting stability and maximizing Xray-core's native performance. SimpleXray aims to provide a stable and efficient network experience. Key Features - Enhanced Stability: By running Xray-core as an independent process, SimpleXray avoids common stability issues, significantly improving reliability. - High Performance: Leverages Xray-core's native speed and efficient tunneling for low latency and high throughput. - User-Friendly: Offers a clean, intuitive UI and simplified setup, making it easy for users to configure and manage connections.

Use VPN for proxy (redirect TCP packets, including HTTP proxy), custom DNS, and custom hosts file.

Currently, Android only has a proxy, which cannot be used alone. You have the following options. 1. **Recommended**: Use Kiwi Browser, which supports extensions, and install Proxy SwitchOmega for use. (OmegaOptions.bak is available under the browser) 2. Use FREE Browser on F-Droid 3. Use SocksTun on F-Droid, fill in 127.0.0.1 for Address, 2500 for Port, check UDP relay over TCP, check the proxy application in APPS, and do not select Global, otherwise the tlsp traffic will be in an endless loop 4. Set up a proxy on the Android system. Reference: https://github.com/maoist2009/AndroifFrag/issues/1 (adb is also possible) ## User Feedback Group (Matrix only at present) github discussions and issues are availabe too. [matrix space](https://matrix.to/#/#tlsp_public:matrix.org) or you may join public groups directly. + better config(such as available ip or mode)： + the tlsp programme itself： + proxy or vpn setting There is a private room. I have been a little lazy in the development of this program recently, mainly for rule maintenance. ## Notes I hope that the second socialist revolution will win soon and this broken wall will be completely smashed. (It is not to say that there can be no censorship of speech in socialism. On the contrary, censorship of speech is necessary to maintain the dictatorship of the proletariat. However, it should be public and gradually expand the participation of the masses) Down with Chinese revisionist imperialism Proletarians of the world, unite!

TrackerControl allows users to monitor and control the widespread, ongoing, hidden data collection in mobile apps about user behaviour ('tracking').To detect tracking, TrackerControl combines the power of the Disconnect blocklist, used by Firefox, and our in-house blocklist is used, created from analysing ~2 000 000 apps! Additionally, TrackerControl supports custom blocklists.This approachreveals the companies behind tracking,allows to block tracking selectively, andexposes the purposes of tracking, such as analytics or advertising.The app also aims to educate about your rights under Data Protection Law, such the EU General Data Protection Regulation (GDPR).Under the hood, TrackerControl uses Android's VPN functionality, to analyse apps' network communications locally on the Android device. This is accomplished through a local VPN server, to enable network traffic analysis by TrackerControl.No root is required, other VPNs or Private DNS are not supported. No external VPN server is used, to keep your data safe! TrackerControl even protects you against DNS cloaking, a popular technique to hide trackers in websites and apps.TrackerControl will always be free and open source, being a research project.

Virtual Hosts app helping developers customized hosts(/system/etc/hosts) File on android devices(no root). support wildcard DNS records.For example: 127.0.0.1 a.com | 127.0.0.1 m.a.com | => 127.0.0.1 .a.com 127.0.0.1 w.m.a.com | Video Demo: https://www.youtube.com/watch?v=pHnsboAnm-A

k3pler is a network connection blocker and packet analyzer built on top of local HTTP proxy. It offers a.o. the following features: * Show network traffic in a list (HTTP Request/Response) * details about requests/responses * Blacklist connection after getting detailed information * Edit/Remove item at blacklist - clear blacklist

personalDNSfilter is a DNS filter proxy written in Java. It hooks into the domain name (DNS) resolution and returns the loopback address for filtered hosts. It can be used for filtering ads and other unwished hosts based on a host list – thus it is a good AdBlock alternative. On Android 4.2 and newer it can be used as effective ad, malware and tracking server filter without root access! It works with any upstream DNS server - filtering is completely local - no phoning home or such things! You can run it locally on your device or centrally as DNS server in your network.

sing-box is a fast, customizable and univsersal proxy platform that can be used to create network proxy servers, clients and transparent proxies. This app allows users to manage and use local and remote sing-box profiles and provides platform specific feature implementations such as the TUN transparent proxy implementation through the Android VpnService.