RIPDPI

RIPDPI (Routing and Internet Performance Diagnostics Platform Interface) is an Android application for optimizing network connectivity with:

- Local proxy mode - Local VPN redirection mode - Encrypted DNS in VPN mode with DoH/DoT/DNSCrypt - Advanced strategy controls with semantic markers, adaptive split placement, QUIC/TLS/DNS lane separation, per-network policy memory, and automatic probing/audit - Handover-aware live policy re-evaluation across Wi-Fi, cellular, and roaming changes - Integrated diagnostics and passive telemetry - In-repository Rust native modules

RIPDPI runs a local SOCKS5 proxy built from in-repository Rust modules. In VPN mode, it redirects Android traffic through that local proxy using a local TUN-to-SOCKS bridge.

Diagnostics

RIPDPI includes an integrated diagnostics screen for active network checks and passive runtime monitoring.

Implemented diagnostic mechanisms:

- Manual scans in RAW_PATH and IN_PATH modes - Automatic probing profiles in RAW_PATH, plus hidden quick_v1 re-checks after first-seen network handovers - Automatic audit in RAW_PATH with rotating curated target cohorts, full TCP/QUIC matrix evaluation, confidence/coverage scoring, and manual recommendations - DNS integrity checks across UDP DNS and encrypted resolvers (DoH/DoT/DNSCrypt) - Domain reachability checks with TLS and HTTP classification - TCP 16-20 KB cutoff detection with repeated fat-header requests - Whitelist SNI retry detection for restricted TLS paths - Resolver recommendations with diversified DoH/DoT/DNSCrypt path candidates, bootstrap validation, temporary session overrides, and save-to-settings actions - Strategy-probe progress with live TCP/QUIC lane, candidate index, and candidate label during automatic probing/audit - Explicit remediation when automatic probing/audit is unavailable because "Use command line settings" blocks isolated strategy trials - Passive native telemetry while proxy or VPN service is running - Export bundles with summary.txt, report.json, telemetry.csv, and manifest.json

What the app records:

- Android network snapshot: transport, capabilities, DNS, MTU, local addresses, public IP/ASN, captive portal, validation state - Native proxy runtime telemetry: listener lifecycle, accepted clients, route selection and route advances, retry pacing/diversification, host-autolearn state, and native errors - Native tunnel runtime telemetry: tunnel lifecycle, packet and byte counters, resolver id/protocol/endpoint, DNS latency and failure counters, fallback reason, and network handover class

What the app does not record:

- Full packet captures - Traffic payloads - TLS secrets

Settings

The Android UI exposes a broad typed strategy surface beyond the command-line path.

Advanced Strategy Surface

RIPDPI's current Android and native strategy stack includes:

- Semantic markers such as host, endhost, midsld, sniext, and extlen - Adaptive markers such as auto(balanced) and auto(host) that resolve from live TCP_INFO hints - Ordered TCP and UDP chain steps with per-step activation filters - Richer fake TLS mutations (orig, rand, rndsni, dupsid, padencap, size tuning) - Built-in fake payload profile libraries for HTTP, TLS, UDP, and QUIC Initial traffic - Host-targeted fake chunks (hostfake) and Linux/Android-focused fakedsplit / fakeddisorder approximations - Per-network remembered policy replay with hashed network fingerprints and optional VPN-only DNS override - Per-network host autolearn scoping, activation windows, and adaptive fake TTL for TCP fake sends - Separate TCP, QUIC, and DNS strategy families for diagnostics, telemetry, and remembered-policy scoring - Handover-aware full restarts with background quick_v1 strategy probes for first-seen networks - Retry-stealth pacing with jitter, diversified candidate order, and adaptive tuning beyond fake TTL - Diagnostics-side automatic probing and automatic audit with candidate-aware progress, confidence-scored reports, winners-first review, and manual recommendations

Implementation details and the native call path are documented in: https://github.com/po4yka/RIPDPI/blob/main/docs/native/proxy-engine.md

License

BSD 3-Clause "New" or "Revised" License.