OnionVPN

Privacy-focused Android VPN that routes all device traffic through Tor, with DNSCrypt for app DNS (over Tor SOCKS by default; FakeDNS / SOCKS5A as a settings fallback). Inspired by InviZible and Mullvad-style leak protection.

What it does

- Feature: Tor tunnel Description: Full-device VPN via hev-socks5-tunnel -> Tor SOCKS; kill switch blocks traffic when the tunnel is down

- Feature: DNSCrypt Description: App DNS resolved through DNSCrypt (upstream via Tor); TunDnsMux on 10.8.0.1

- Feature: Interactive firewall Description: OpenSnitch-style Accept / Deny for new outbound connections (notification + prompt, FIFO queue, permanent / session / temporary rules)

- Feature: Domain threat lists Description: HaGeZi lists colour destinations on prompts: safe (unlisted), ads/tracking/telemetry, malware/C2 — updates prefer Tor when the tunnel is up

- Feature: App lock Description: Lock the UI without stopping the tunnel or kill switch

- Feature: Tor tuning Description: Circuit rotation presets, stream isolation modes, editable torrc / dnscrypt-proxy.toml

- Feature: Tor engine Description: Dual backend: C Tor (libtor.so, default) or Arti (arti-mobile and/or onionmasq TUN)

- Feature: TUN data plane Description: hev-socks5 (C Tor / Arti fallback) or onionmasq (Arti preferred when libonionmasq_mobile.so is present)

- Feature: Circuit UI Description: Onionmasq path: per-app hops, NEWNYM-per-app, exit directory from NewDirectoryEvent