KPNTunnel Revolution (Official)

説明 KPNTunnel Revolution (Official)

Site Editorial Commentary：Secure Connection through SSH Tunnel + SSL Support with flexible customization

KPNTunnel Revolution (Official): A next-generation tunneling app designed for enhanced security and performance.

What is the "Revolution" project/series/edition of KPNTunnel?

> This is an ongoing project focused on delivering experimental features and a fresh, lightweight style for KPN Tunnel (Official).
> Rebuilt from the ground up for optimized core performance and a streamlined user experience.
> It is the first app to tunnel through a built-in SSH Tunnel over an SSL/TLS connection. While SSH Tunneling is inherently secure, we've added an extra layer of security with SSL/TLS for enhanced protection. Instructions on how to use SSH Tunnel over SSL/TLS can be found in the "About" section of this App.

* Key Features:
+ Direct Proxy: Tunnel directly to the SSH Server via SSH Tunnel.
+ Direct SSL/TLS: Tunnel directly to the SSH Server via SSH Tunnel over SSL/TLS Connection.
+ HTTP Proxy: Tunnel through SSH Tunnel over HTTP Proxy.
+ SSL/TLS Proxy: Tunnel through SSH Tunnel over SSL/TLS Proxy.
+ SSL/TLS Proxy > HTTP Proxy: Tunnel through SSH Tunnel with TLS/SSL over HTTP Proxy.
+ Many more advanced tunneling options.

Known Bugs/Issues:
- Android 4.0: Only supports TLSv1 and SSLv3 (due to Android System limitations). Ensure your TLS/SSL server supports these protocols.
- Android 4.1-4.2: TLSv1.1 and TLSv1.2 are not enabled by default. We've added a force-enable feature for improved security.
- For any other issues or bugs, please contact the developer.

* Root Access Requirement:
> Root access is required for certain features, including:
+ vpn Tether: Bypass Hotspot Tether restrictions through the VPN Interface.
+ More features requiring root access will be added soon.

* SSH+SSL Server Requirements:
+ When using TLS/SSL mode, the stunnel4 library must be installed and configured. You can find the original stunnel4 library at http://stunnel.org.
+ Search for "how to setup/install stunnel4" on Google, Yahoo, Bing, or your preferred search engine for OS-specific instructions for your Virtual Private Server (VPS).
+ In "Direct TLS/SSL" & "TLS/SSL Proxy > HTTP Proxy" modes, configure stunnel to connect to the SSH (dropbear/openssh) server port.
+ In "TLS/SSL Proxy" mode, configure stunnel to connect to the squid port.
+ We recommend enabling all TLS and SSL protocol versions for compatibility with Android 4.0 and newer. See the bug/issue section above for details.

* TLS/SSL Client Side (KPNTunnel Revolution App):
+ We utilize TLS/SSL Socket with TrustAll Cert (X509 Certificate), eliminating the need for a client key & cert from the SSL Server. While this method is currently less secure, future updates may include support for client key & cert for enhanced connection security. Stay tuned! :)