Tunguska

Tunguska is a security-focused Android VPN client for managed encrypted tunnels. It is built around a saved profile library, explicit routing policy, runtime compatibility guidance, and fail-closed Android VPN behavior rather than one specific protocol family.

Tunguska prioritizes user control, runtime capability clarity, and privacy-safe daily operation:

encrypted local profile library with explicit active-profile selection staged local profile import review before manual profile storage changes provider subscription feeds with automatic add/import, automatic refresh, read-only subscribed profiles, and a top-level Subscriptions screen multi-protocol profile editing with lane-specific runtime guidance full-tunnel, app allowlist, app denylist, routing presets, adblock, named custom routing rules, and offline route simulation default-on sing-box routing hardening that rejects traffic when Android cannot identify the source app owner reusable app-tunneling configurations, optional global routing policy, and a curated Russian-apps direct-exclusion template visible ready, connecting, protected, degraded, attention, retrying, and idle states across Home, notification, Quick Settings, and diagnostics persistent Android notification with runtime control, privacy-aware status text, and traffic speed detail only when Enhanced security is off Android Quick Settings tile with generic start/stop/status behavior and no profile, endpoint, IP, or speed disclosure opt-in Enhanced security mode that hides notification detail, protects sensitive screens from screenshots, marks copied secrets as sensitive, and disables the automation relay while automation is off compact Home traffic-speed chart, one-minute latency probe, runtime resilience telemetry, and redacted advanced diagnostics runtime recovery after standard Android service recreation, task removal, Doze exit, screen wake, user unlock, and default-network handoff font-scale-aware layouts validated against compact, default, Poco-like, and expanded screens with English and Russian UI evidence owner-encrypted bug report export assembled from current state plus recent in-memory events, silent app-data migration for same-signer updates, versioned portable migration backup for reinstall/device moves, and canonical JSON/share-link export where the profile family supports it metadata-only in-app update checks with user-controlled skip-this-version and auto-check settings; Tunguska never auto-downloads or auto-installs APKs optional token-gated automation for controlled external orchestration The app is organized around five sections:

Home: protection state, active profile picker, traffic chart, ping/speed summary, connect/disconnect, and current or exit IP. Profiles: saved profile library, staged import, Tunguska profile/bundle links, QR/image payloads, duplicate warnings, detail cards, JSON/share/export actions, and created/modified timestamps. Subscriptions: saved provider feeds, add/edit/delete source actions, automatic add/import, manual refresh, update-on-open/background refresh, and read-only grouped subscription profiles. Routing: app tunneling with searchable installed-app selection, reusable/global routing policy, Russia direct/local bypass/adblock presets, named direct/proxy/block rules, and offline route test. Settings: security posture, Enhanced security, encrypted bug report export, migration backup, automation, update checks, statistics control, About, and advanced diagnostics.