control per app internet (non-rooted) while using actual VPN?

Question

I am trying all sorts of (non-root) security software that allows me to block internet for apps. so far every one needs some kind of fake VPN to gain access to traffic, I guess so no root is needed. I can't have this since I use an actual VPN which gets turned off if I use any of these security apps. is there no way to block internet for apps while using my VPN?

Hardly possible without root. You can run VPN inside VPN but I don't think any Android app would be offering that out of box. You need to configure that manually and that won't be possible without root. It needs messing with routing tables etc. — Irfan Latif, Dec 21 '18 at 20:01
Does this answer your question? How to use a firewall AND a VPN? — ItsIgnacioPortal, Nov 13 '23 at 21:53

score 1 · Answer 1 · edited Jan 18 '19 at 16:11

This is possible since Android 8 (when Block connections without VPN feature was added), also you will have to use VPN app which supports Per-App VPN (which is supported since Android 5.0?) e.g. OpenVPN for Android from F-Droid or Google Play.

Assuming you use OpenVPN for Android:

System settings → VPN → tap button with gear icon on the right side of OpenVPN for Android → enable both Always-on VPN and Block connections without VPN.
OpenVPN for Android → tap button with pencil icon on desired profile → swipe to ALLOWED APPS tab → select apps you want to exclude from using VPN → return to main screen → re/connect to VPN using this profile

This was tested on MIUI device, but I think should be pretty much the same on majority of devices (except those whose manufacturers removed or hid Android's default functionality from ROM (like Huawei from EMUI)). Also per app internet control access is built-in by default in MIUI.

score 0 · Answer 2 · answered Dec 21 '18 at 13:24

I don't think it's possible as per this answer: In Android 6, how to deny an app permission to access the network?. To summarise the network permission is classified as 'normal' so it is automatically granted and can't be removed. However you can try to revoke the INTERNET permission using adb.

adb shell pm revoke com.name.app android.permission.INTERNET

I'm 99% sure it won't work, but can't test right now, on mobile. Unfortunately that means a VPN firewall or root + iptables firewall are your only options.

Only permissions with dangerous protection level can be revoked. — Irfan Latif, Jul 14 '19 at 19:37

score -3 · Answer 3 · edited Jan 18 '19 at 08:46

-3

You can try NetGuard, the non-root firewall for Android smartphones. It can help you in restricting the net usage per app.

edited Jan 18 '19 at 08:46

Firelord

25,084
20
124
286

answered Dec 21 '18 at 14:29

Yet Zio

15
2

this is also vpn based, I just tried it. – Bricktop Dec 21 '18 at 15:07
NetGuard also uses a local VPN. (https://i.stack.imgur.com/KacDS.jpg) – Firelord Dec 21 '18 at 15:08
But this is the only option. – Yet Zio Dec 21 '18 at 16:33
how is it an option if it has the exact same problem? plus is definitely not the only one that works that way. or am I missing something? – Bricktop Dec 21 '18 at 16:41

control per app internet (non-rooted) while using actual VPN?

3 Answers3

Linked