13
Votes

VPN Kill Switch

 
13
Votes

VPN Kill Switch

24 Reply
Re:VPN Kill Switch
2024-04-18 18:47:01

Hi, what's the point of a router with a VPN function if it doesn't have a killswitch?
It's like a mousetrap, you think you're safe but all it takes is nothing and you drown.
Too bad, I was enjoying recommending these routers to my customers, relatively cheap and easy to configure.

 

#12
Options
Re:VPN Kill Switch
2024-04-22 00:37:02

Echoing the sentiment in this thread. It's been years of customers asking for this feature, a feature which doesn't require any additional hardware and could easily be pushed out as a patch to existing devices' configuration settings. Without this, using a VPN for privacy (aka every VPN service provider's main line of advertising) is effectively nullified. The moment a hiccup occurs on the network (or Omada's VPN client offering), your IP will be leaked, effectively making this whole thing pointless.

Again, this is a software solution. There is no excuse for a basic feature available on home routers to be absent from high-end business model controllers, especially when they are marketed as having VPN client support. At least add a disclaimer.

#13
Options
Re:VPN Kill Switch
2024-04-26 01:57:56

  @aerubik 

 

The problem here is not a new feature. The real issue is that TP-Link does not want to solve a bug in their firmware. I implemented a kill switch can through routing policies and firewall rules. The real issue is a DNS leak that makes the local IP visible until the routing policies and firewall rules take effect 15 to 20 seconds after the VPN connection is lost.

 

Routing policies and firewall rules must block local internet access when the VPN connection is lost and not 15 to 20 seconds later. This is a bug that TP-Link is reluctant to fix without caring that this security issue must be corrected immediately. TP-Link advertises that these routers are ideal for client-to-site and site-to-site VPN connectivity, but with this security issue, I will not recommend using any model of this brand until this bug is fixed.

aerubik wrote

AX5400 Wi-Fi 6 Router

disable internet access to vpn client devices when openvpn client not connected to vpn server

I want to disable internet for devices in vpn-client device list as long as vpn client is not connected to a vpn server.

at the moment devices reach internet. I have setup OpenVPN client.

 

#14
Options
Re:VPN Kill Switch
2024-10-05 18:10:02

  I bought a tplink travel router model  TL-WR1502X . but the support says there is no kill switch  . what do i do return it ?

#15
Options
RE:VPN Kill Switch
2025-01-15 09:33:02
I would love to have a kill switch on my archer AX55 too.
#16
Options
RE:VPN Kill Switch
2025-01-25 14:16:28
Low hanging fruit.
#17
Options
RE:VPN Kill Switch
a week ago
Seems like this is a no brainer especially for the travel router. Considering returning the two that I have after realizing that there’s no kill switch and that the VPN connectivity is buggy.
#18
Options
Re:VPN Kill Switch
a week ago

TL-WR1502X v1.0 does not have kill switch, not sure then what is use of travel router. Every travel router should include a VPN option and a kill switch to ensure a secure and uninterrupted connection. I think a software update can fix this

#19
Options
Re:VPN Kill Switch
a week ago
Regardless of whether it's a travel router or not, blocking internet access when the VPN client connection fails is essential. This can be achieved through a kill switch or, if that feature is unavailable, by ensuring that routing and firewall rules effectively block internet access upon VPN failure. The TP-Link ER605 router lacks a built-in kill switch. The biggest issue is that its firewall and routing rules take 15 to 20 seconds to activate after the VPN connection drops, leaving your local IP exposed during this window.
#20
Options
Re:VPN Kill Switch
a week ago
Found a GL-E750V2 MUDI V2 which has sim option + kill switch runs on battery
#21
Options