[SOLVED] module for VPN (/system/lib/modules/tun.ko) - Xiaomi Mi Max Questions & Answers

NONE of the ROMs provided by official miui or unofficial miui.eu or even cyanogenmod that I have been trying has /system/lib/modules/tun.ko included.
The kernel sources provided by:
github.com/karthick111/android_kernel_xiaomi_hydrogen/blob/cm-14.1/drivers/net/tun.c
github.com/zhaochengw/android_kernel_xiaomi_hydrogen/blob/mkm/drivers/net/tun.c
github.com/TheStrix/android_kernel_xiaomi_msm8956/blob/cm-14.1/drivers/net/tun.c
already have required files on it.
All I need to request to developers here is to "Edit the file .config, and check for the value CONFIG_TUN
If there is not a line CONFIG_TUN=m, create it" while compiling the kernel.
This module is essential to make VPN connection especially for those who lives inside Middle Kingdom.
Thanks in advance.

What VPN protocol are you trying to use? I've successfully used OpenVPN on MIUI 8 and the latest RR on Hydrogen, both within the Middle Kingdom and outside.

Cisco AnyConnect will not connect to its server with or without certificate.
IPSec & ShadowSocks will connect, but NO data traffic.
I have tried those with Cyanogenmod (karthick111, zhaochengw & TheStrix) builds.
I also tried with official MIUI and miui.eu builds too.
What specific MIUI 8 build do you use? Global version? Any link that I can try?
Do you have /system/lib/modules/tun.ko inside it? Please share with us if you have it

I'm only using OpenVPN, not those protocols you mentioned. I got it working with MIUI 8 global beta and the latest Xiaomi EU ROMs, along with RR. I looked for that tun.ko file but couldn't find it on RR. Guess you do need someone to recompile the kernel with tun.ko support.

This request is not true with regards to Cisco AnyConnect & ShadowSocks VPN as I updated each apk to the latest releases :silly:
However, (built-in) IPSec is still not working for me.
Anyone here have IPSec VPN protocol works with hydrogen on any ROM?

IPSec protocol solved by adding "esp=aes128-sha1" into /etc/ipsec.conf on strongswan's server side. :laugh::laugh:
This config is works with both iOS & android clients. :victory::victory:
Sorry to waste your time xda developers. Module for VPN (/system/lib/modules/tun.ko) is NOT required to run most popular VPN protocols as /dev/tun already provided by built in kernel. :good::good:

Related

openvpn anyone?

hi,
did anyone find a way to use openvpn on htc hero?
Catscrash said:
hi,
did anyone find a way to use openvpn on htc hero?
Click to expand...
Click to collapse
Not yet, but I am using the CyanogenMod 4.0.1 on my Dream and I have seen Donut on the HTC Click -- in both cases, Settings --> Wireless Controls is showing an option for VPN Settings, so I'm guessing that it would be a matter of time before this is available on the Hero and Magic firmware
Be patient, or wait for someone to cook a ROM with this feature
VPN wil be in Donut.
For now, it seems possible to implement it.
For the program GUI, it should good to extand that program to support openvpn and pptp vpn.
First of all tun driver is needed, you'll find it here.
Install and, as root, type:
# insmod /system/lib/modules/tun.ko
lsmod command should give you:
tun 11300 0 - Live 0xbf000000
That should load the tun kernel module.
I think we should then have to compile openvpn using android ndk.
A guy did it for the dream. Worth trying it. Maybe someone else could tell if binaries compiled for Dream can work on Hero
OpenVPN ist working on hero. I used the binaries for the G1. But the CIPHER is different: AES-256-CBC. I'm now testing it and if it's stable, perhaps I'm gonna compile openvpn with complete static openssl, so all functions should work.
If someone is interested, I can post my scripts and settings.
gogh57 said:
OpenVPN ist working on hero. I used the binaries for the G1. But the CIPHER is different: AES-256-CBC. I'm now testing it and if it's stable, perhaps I'm gonna compile openvpn with complete static openssl, so all functions should work.
If someone is interested, I can post my scripts and settings.
Click to expand...
Click to collapse
I am REALLY interested to now how you compiled it.
Hi!
I haven't compiled openvpn until now. I used this one:
https://www.digital-bit.ch/wiki/OpenVPN_auf_dem_G1
Just tried, may work. But i can't connect to my astaro because the key needs auth wit user and pw.
This Version hasnt been compiled with --auth-ask-pass. And reading from commandline doesn't work either..
I did compile it on my G1 with CyanogenMod ROM.
As far as I can see, it is working perfectly: I'm using it with certificates for 3 different VPNs.
Only issue: I wasn't able to complile a shared version of liblzo, so the binary is statically linked against liblzo.a (751 KB... )
Ah, yes, of course no GUI interface, shell only...
Hi!
Cool, could you post the binary? Could you give me a hint how you did it? I had several problems.
Would be perfect if someone could compile openvpn with " --enable-password-save"
Please post it, when a OpenVPN GUI for the HTC Hero / Magic is available.
Thans alot
wolfiedk said:
Please post it, when a OpenVPN GUI for the HTC Hero / Magic is available.
Thans alot
Click to expand...
Click to collapse
The great spam protection measures in this forum deny posting links for new users, so you have to manually follow them.
See: github.com/fries/android-external-openvpn
There is also an app and a statically linked openvpn binary at github.com/fries/android-external-openvpn/downloads
The openvpn binary has the following features:
* --enable-password-save
* statically linked against a blowfish enabled openssl
* statically linked against liblzo
Build:
* openvpn-static.bz2 was build on a donut-tree (1.6) for htc-magic
* openvpn-android-2.1.tar.bz2 was build on a cupcake (1.5) tree for htc-magic
* should run on a verity of (rooted) phones, please try it an give feedback.
A dynamically linked version is also available. The above git repo integrates seamless into the android build system. Some instructions may be found here: wiki.github.com/fries/android-external-openvpn/
Any feedback is welcome. Enjoy.
read this first -> http://sourceforge.net/projects/tunneldroid/files/README/download
First make sure kernel is compile with tun module
install tunneldroid from market
binary download -> http://sourceforge.net/projects/tunneldroid/files/openvpn-binary.zip/download
The newest version of my 'OpenVPN Settings' app is available at github.com/fries/android-external-openvpn/downloads

[Request] tun.ko for EVO kernel 2.6.32.15-g746f4f0

I am attempting to get vpnc (for cisco vpn) working on my evo but I have looked everywhere and not been able to find the tun.ko module for my kernel.
There is a post here by sjakub: http://forum.xda-developers.com/showpost.php?p=5692491&postcount=12 which describes how to compile it, but I do not have access to linux currently.
Would anyone be kind enough to compile the proper file for me please? Thank you very much!
Bump
Looking for the same thing using DC 3.5
Help?
Is anyone able to help with this? Or offer any other suggestions? Thank you.
-David
I'm using netarchy's 4.0.* kernels (with tun.ko already loaded) but I'm still unable to VPN to my Cisco concentrator through VPN Connections
Have either of you tried netarchy's 4.0 kernel?
I'm running Fresh 3.1 with netarchy 4.0.3 kernel, VPN Connections says I'm connected, but when I try to access anything internal... no dice.
My company uses OpenVPN and I had it working with the tun.ko on the 2.1 roms. Also looking for a recompiled version for 2.2 kernels.
also interested in this one
Need this too
My kernel is also 2.6.32.15-g746f4f0 and I need the tun.ko file for this. How can I look/compile this? Is it safe to install another kernel? Very new to this, but I was able to successfully install 3.26.651.6 Froyo DeOdexed RevE.1, but don't know how to update a kernel that will work with VPN Connections.
Thanks very much in advance!
I had the same problem, until I switched to CM6 -- It's become a solid ROM and I've learned to live without sense, every time I kick my VPN in and fix a server issue I miss sense less and less. IMHO every ROM should look to integrate this feature.
Kernel
I am using AVA V5 and the Netarchy Kernel caused me problems, so I am using stock. I may try it again shortly if there is not anyone out there who can compile tun.ko for it.
drizkol said:
I'm using netarchy's 4.0.* kernels (with tun.ko already loaded) but I'm still unable to VPN to my Cisco concentrator through VPN Connections
Have either of you tried netarchy's 4.0 kernel?
I'm running Fresh 3.1 with netarchy 4.0.3 kernel, VPN Connections says I'm connected, but when I try to access anything internal... no dice.
Click to expand...
Click to collapse
I installed Netarchy 4.1.8 today and my VPN no longer force closes. However now it says connected, but I cannot access anything inside my work network same as you. Did you find a solution to this?
I have TUN vermagic=2.6.32.15-g746f4f0
I compiled TUN using the HTC sources see my post below
FYI, looks like tun.ko creates the /dev/tun device, but vpnc is looking for /dev/net/tun
will be looking into this next but tun.zip is attached to the post below
http://forum.xda-developers.com/showthread.php?p=7913695#post7913695
btedeski said:
I compiled TUN using the HTC sources see my post below
FYI, looks like tun.ko creates the /dev/tun device, but vpnc is looking for /dev/net/tun
will be looking into this next but tun.zip is attached to the post below
http://forum.xda-developers.com/showthread.php?p=7913695#post7913695
Click to expand...
Click to collapse
sweet, let me know if you get anywhere with this..
Symlink /dev/net/tun to /dev/tun
>> Symlink /dev/net/tun to /dev/tun
yes that is on the top of the list to try,
unfortunately my work is getting in the way of finding time to relax and play with my phone (as the girl friend calls it)
Bill

[MOD]OpenVPN Free Access V1.00 - 18thJan2011 - JPX/JPY/JS3

AndbVPN Freedom is a free OpenVPN access to all SGS users and I would like to get feedback from all users of Kernels and Roms released in XDA. The kernels and roms will be tested against the installations, settings and connections guide and stability to run an openvpn connection.
This will be the easiest 3 minutes of installing, settings and connecting to openvpn servers for all.
For beta testing, server location will be in the USA. More servers across the globe will be available in the future.
During the initial development, tests of the installation, settings and connections were made against the following:
Kernels:
1. hardcore's Speedmod version K13 series and above
2. trasig's Advanced Voodoo version 69 series
3. laststufo's Super Optimized v 4.6 series and above
ROMs:
1. Doc's 6.2 full version and above
2. Nitr8's Insanity 0.40 and above
3. Jim Panse's Hamster V6 and above
4. Ultimate Webstar1 all version
5. Darky V8
6. DXJPE SEARCHII
This services is useful for users of SGS who wants to have privacy when they are connected to public wifi or bypassing certain firewall rulings in their corp wifi or even their countries ISPs restrictions.
Other usage of openvpn services will be listed in the release notes.
Special thanks to hardcore for giving a short but precise input to make this installation as easy as 1-2-3.
Thanks to all the rom developers for making such a wonderful roms for all SGS users to enjoy and not regret buying SGS.
To users, don't just use and enjoy the kernels and roms, DONATEto them, you know they deserved it.
To google and samsung, provide lots of beers to the talented pools of engineers, designers, creative and innovative people in XDA.
HAPPY NEW YEAR and Welcome 2011.
1/1/11 AndbVPN Freedom is now officially born in XDA and it will start to develop from infant to adult in the next few days.
A copy of the both setup and client files were given to Nitr8 to slipstream into his next release and while waiting for that, here is the standalone release that can be used with the roms listed in post #1.
Release Note for XDA SGS Community.
If you on rooted HTC or other Android devices, then you can probably install the same files to your devices. As long you know how to update the zip file either by ADB or CWM compatible.
WARNING
You maybe using tons of bandwidth if you are streaming with 3G. So be warned that you may exceed your subscribed bandwidth.
WARNING
Introduction
This is an OpenVPN Virtual Private Networking (VPN) installation and information notes to the users of Samsung Galaxy S International only. If you are using a different version of Galaxy S, you may install at your own risks and with knowledge on how to root your devices. Do a search in this forum for instructions of rooting your phone.
Pre-requisites before installation.
1. You must have a tun enable kernel such as those from hardcore's Speedmod K12, trasig's Advanced Voodoo V69 and the likes. Please make sure that you are using a tun supported kernel.
2. You must have CWM v2 enable kernel and support for unsupported kernels, stock Froyo and Eclair installation is coming soon.
3. Download the following files to your internal sdcard. Both of the files are CWM installable files. Download link at the bottom of this post.
a) For new and 1st time user - AndBVPN Installation File - Needed for Part 1 installation guide
b) For new, 1st time and existing user - AndBVPN Client Free Access AndXDA.zip - Needed for Part 2 installation guide
Installation Guide
SKIP Part 1 if you're an existing AndBVPN subscribers
Part 1 - Installing and Setting up OpenVPN in your device, only for New Subscriber.
1. Please make sure that kernel in your ROM supports tun devices. List of supported roms in post #1
2. Reboot to Recovery Mode and select install zip from sdcard and select the AndBVPN.zip to install it.
3. Select AndXDA.zip from the location that you downloaded in step (3a)
4. Once completed, you should get back to the main CWM menu. DO NOT REBOOT, continue to Part 2
This completed the installation of the required files to properly enable openvpn in your device. The above process will take about 2 minutes or less to do. The above steps is to install a working OPENVPN binary that will work with your device.
DO NOT DOWNLOAD OR INSTALL Openvpn Installer from the market - there is a bug that will render OPENVPN in-operational in your device
Next -->
Part 2 - Installing Openvpn Client Configuration files
1. From the CMW Recovery menu, select Install from sdcard
2. Select AndXDA.zip from the location that you downloaded in step (3b) and install it
3. Now reboot the device
4. Go to Market and download and install Openvpn Setting from friedrich.schaeuffelhut
5. Configuring openvpn settings
a. Click the menu button and select Advanced
b. Due to differences from various kernels which required manual as well as built-in enabling of tun drivers, I've decided to
provide the following guides irrespective of whether your kernel has enabled tun driver by default or not.
Options:
Load tun kernel module - Tick this
TUN module settings - Click this
---> Load module using - Select insmod
----> Click back button
----> Path to tun module
-----> Enter /lib/modules/tun.ko
----> Click OK
------> Click back Button
-----> Path to configurations (if you see the value stated below already displayed, then skip this)
-----> Enter /sdcard/openvpn
----> Click OK
-----> Path to openvpn binary (if you see the value stated below already displayed, then skip this)
-----> Enter /system/bin/openvpn
----> Click OK
Leave the rest as it is.
Press the back button to exit the Advanced Menu
This completes the setup of the AndBVPN client configuration settings. You are now ready to connect.
PART 3 - Connecting and configuring Openvpn Setting
1. Long click on the andbfreeTCP and select Preferences
----> Custom Names - Enter Whatever Names you want if you want to replace AndbFree with your own names
----> Use VPN DNS Server - tick this
----> VPN DNS Server - Click this
----> Enter 8.8.8.8 as your the IP address of the DNS server.
----> Click OK
----> Press back button
1a. Repeat for the andbfreeUDP
2. Tick OpenVPN Turn On OpenVPN
3. Tick the servers you wish to use
4. Once connected, you will be presented with the OpenVPN Private IP address
5. Visit http://www.whatismyip.com and you will see that you are now having a US public IP address
6. Whichever or wherever sites you are browsing will be using this IP address and your traffic between your device and the VPN servers are now hidden from any intrusion system.
PART 4 - Disconnecting.
1. Simply UNTick the server name to disconnect.
2. Again UNTick Turn Off OpenVPN to disable OpenVPN (doing this will also disconnect all active connections)
Essentials software for streaming or downloading
Most of the software listed here are available from the Market and they are freely available. However some software enforces countries specific service providers before you can download them. This is not the same as countries specific IP.
1. Market Enabler - to access market from country specific providers and to purchase paid software.
2. Rock Player - to play all kinds of videos - Free
3. Pandora - must have Market Enabler fake a US providers - Free
4. tv.com - must have Market Enabler fake a US providers - Free
TROUBLESHOOTING:
Reserved
DOWNLOAD
Reserved for Guides and Patches
I'm now finalizing the package for production release over the next few days. The installation now supports all JPX-based roms and kernels.
We are in the midst of getting and setting up the vpn server. Server will be based in the United States. We will release the installation guide and configuration files once the server is ready.
This version of openvpn installation will allow vpn connections via WiFi, 3G, HSDPA, HSUPA and EDGE.
:bravo bolehland!i was waiting for bolehvpn but this will be better i guess....keep up the good work....
Is cisco-like vpn supported ?
Thanks for sharing your work. Very appreciated.
waiting for it, bring it on
Thanks.
cant wait
Tusnal said:
cant wait
Click to expand...
Click to collapse
DXJPE?
Sent from my GT-I9000 using XDA App
very good news
Sent from my GT-I9000 using XDA App
Very good news indeed! Will try it out once released...
g00ndu said:
DXJPE?
Sent from my GT-I9000 using XDA App
Click to expand...
Click to collapse
Tested working as of now. AS long as the kernel supports tun devices. Yours was tested with Speedmod.
just waiting
and great jop
Preview Release will be available within the next 24 hours and it will part of Insanity ROM next update.
Insanity was chosen because of its superslim rom and if it works with Insanity, then it will work with the rest of roms which are full of bells and whistles.
Insanity users will have the 1st preview before it is release to the general xda SGS community and feedback from Insanity users will be used as final tuning before the major release.
Package in Insanity will include the configuration files and application such as Pandora audio streaming for demonstration purposes. However Nitr8 will decide whether he wants to include the app or not, since it is available from the market. However to use Pandora, you must have a pandora account. Visit pandora and register for your free account.
As for video streaming, you can use this connection to view videos from CBS and other USA networks by using your normal browser.
However for Hulu, it does not support Android currently though announcement has been made recently that hulu will provide SGS access to their contents.
See you guys in 24 hours.
wcg707 said:
Preview Release will be available within the next 24 hours and it will part of Insanity ROM next update.
Insanity was chosen because of its superslim rom and if it works with Insanity, then it will work with the rest of roms which are full of bells and whistles.
Insanity users will have the 1st preview before it is release to the general xda SGS community and feedback from Insanity users will be used as final tuning before the major release.
Package in Insanity will include the configuration files and application such as Pandora audio streaming for demonstration purposes. However Nitr8 will decide whether he wants to include the app or not, since it is available from the market. However to use Pandora, you must have a pandora account. Visit pandora and register for your free account.
As for video streaming, you can use this connection to view videos from CBS and other USA networks by using your normal browser.
However for Hulu, it does not support Android currently though announcement has been made recently that hulu will provide SGS access to their contents.
See you guys in 24 hours.
Click to expand...
Click to collapse
hello i´m wondering how do whe get openvpn pass and id to test whit?
The ID as well configuration download url will be provided once it is release in the next 24 hours.
Server is now ready and configured, user ids has been generated and packed into proper format. Nitr8 will receive the file later tonite to slip stream to his ROM.
Installation and configuration notes will be uploaded as well.
what tipe of ip ar whe going to get? and is eney port blockt whit wall?
You will be given US IP Address during this free period. As for the ports, we will publish allowable open ports once it is released but be wary that not all ports will be opened.
dynamic or statik ip?

[Q] OpenVPN Support "tun.ko"

I was wondering if the Galaxy Nexus stock ROM had OpenVPN support in kernel and if someone was contemplating compiling tun.ko for the less tech savy users
Would also like to know if it's possible to use OpenVPN on the GN.
If it is not in there stock, I am sure one of the many kernel devs will add it for us.
Apparently...
"It should now be possible to write a OpenVPN client for Android."
According to:
https://code.google.com/p/android/issues/detail?id=3635#c87
So it's just a waiting game now for an app it looks like.
openVPN works
Hi,
Just wanted to let you know I got openVPN working. (pic below)
I have Revolution 1.3.0 ROM and Franco's kernel installed, both excellent I must add.
I didn't need a tun.ko, did on my sgs2.
There are 2 programs you need on the market, openVPN installer and openVPN setting. Run those and you should be good to go. The only thing I had to do was create a /system/xbin/bb folder and copy ifconfig into it. This may have been something to do with the way I installed busybox.
I use the last MCK kernel compatible with Android Revolution HD.
Will check if the kernel have support.
I can't wait to be able to watch Netflix from the USA again.
Unfortunately, stock ICS on the GN has no tun support. We still need a tun.ko. So far I didn't find one, so I guess I need to compile it myself...
I believe it stock ROM does have tun support. See this thread:
http://android.modaco.com/topic/349642-tunko-for-openvpn/
Steps are here for anyone else looking to get it working (which I gleaned from here http://forum.xda-developers.com/showpost.php?p=17233744&postcount=9):
Install Busybox from Market
Install OpenVPN Installer from Market and install to:
binaries: /system/xbin
route/ifconfig: /system/xbin/bb
Create /system/xbin/bb with Root Explorer or from shell
Create link to busybox for ifconfig and route
ln -s /system/xbin/busybox /system/xbin/bb/route
ln -s /system/xbin/busybox /system/xbin/bb/ifconfig
taylormadearmy said:
I believe it stock ROM does have tun support.
Click to expand...
Click to collapse
Indeed, you're right. Although my OpenVPN installer indicated my kernel was lacking a tun module, I justed ignored it and now I'm running OpenVPN on rooted/unlocked ICS. Great!
Mark
I would ideally like this to work without rooting. Hopefully a proper app gets made!
Great News though!
Indeed, I thought that I needed Franco's kernel to get openVPN to work, but when I flashed back to stock kernel (I had some battery issues) the openVPN still worked.
Everything worked fine, I can now connect on my VPN servers through OpenVPN Settings (On the Android Market) : D. Awesome ! Many thanks
nvm
10 characters
Just in case you haven't heard yet: The official Cisco AnyConnect VPN Beta has been released in the market a week or two ago. It supports all ICS devices (tested it on my Asus TF101 with stock 4.0.3). Works great on my unrooted GN!
Gesendet von meinem Galaxy Nexus mit Tapatalk
Help with OpenVPN setup
Hello,
I followed all the instructions on this post regarding install and reconfiguration of folder permissions. I'm running AOKP Milestone 3 and Franco kernel Milestone 2. My phone connects to openVPN but it's clear that data isn't flowing through it (i.e., I'm in China and still can't use Facebook or Youtube apps)
Any suggestions? OpenVPN app connects to the server very quickly but when visiting Facebook.com, I can see very easily that the download rate is 0.0kbps, then the page times out.
Any help would be appreciated!
romerjon said:
Just in case you haven't heard yet: The official Cisco AnyConnect VPN Beta has been released in the market a week or two ago. It supports all ICS devices (tested it on my Asus TF101 with stock 4.0.3). Works great on my unrooted GN!
Gesendet von meinem Galaxy Nexus mit Tapatalk
Click to expand...
Click to collapse
Does this work with open vpn? Sorry if this is a dumb question, I am a new user to open vpn. I am about to setup an open vpn server on my dd-wrt router.
does anyone know where the tun.ko module is located on stock rom?
i can't find it no matter how i search for it. will it be possible for someone to upload it and give us the link?
thank you...

[MOD][MAGISK][LineageOS] Iptables TTL/Unthrottled Hotspot

Obviously we all know this, but I'll say it anyway: I bear no responsibility for your device!
Background:
Initially I recompiled the kernel, but thanks to @fddm I was able to get this into a Magisk module. This is a take-off from https://forum.xda-developers.com/t/...-tether-lineageos-18-1.4295601/#post-86183959 Feel free to read that (minimal reading) for additional details.
What is this?
This Magisk mod adds the required iptables kernel module for TTL/Tether/unmetering for using your phone as a hotspot. I have Tmobile & with my plan, when I connect any device to the phone it is extremely throttled to around 0.5Mbps. With this mod and the settings below, you can get around that limitation. I go from 0.5Mbps=>80+Mbps with this mod. Root is required (look at above thread for details on that if needed).
Compatibility:
Confirmed OS's that work: LineageOS18.1, LineageOS19.1
ROMs: At this point I can't indicate what ROMs this will be compatible with, but it appears LineageOS18.1 works. I'm attaching that as well as a Android/AOSP12 version if anyone wants to test that. I'm also not sure if this is exclusive to the bramble/Pixel 4a5g device (If anyone knows what they're doing or wants to get ballsy, test & report your results!)
Carrier: I tested this against Tmobile. It depends on how your carrier throttles your hotspot connected devices; Tmobile uses the TTL to determine if its the phone vs a connected device. If your carrier uses that method this should work.
xt_HL.ko: This is the kernel module we're inserting to allow the "iptables ttl set" command. I tested the Android12 xt_HL.ko file on my LineageOS18.1 OS and it does NOT work. This tells me there is some type of versioning. OR: there's an issue with the A12 file...
InCompatibility: (as reported by users in the thread)
ProtonAOSP 12, pixel 4a5g
Steps:
Install Magisk module & read the output; Verify it installed successfully.
Download Termux app from playstore
Termux App: (Shouldn't be necessary if running latest script since that does this step for you on every boot)
su (Grant permissions)
iptables -t mangle -A POSTROUTING -j TTL --ttl-set 64 (should be no errors - if you have errors my kernel is not installed)
Test: Turn on phone Hotspot, connect any device, do a speed test comparing speed on phone should be similar to the connected device.
If any limitations/blocks: (Not sure but maybe http vs https is blocked sometimes)
Install VPN Hotspot app (Green key icon): "Wi-Fi hotspot" ON, wlan1 ON, DISABLE "Tethering HW Acceleration" in settings
Issues:
After running the iptables command you get this error: iptables v1.8.4 (legacy): unknown option "--ttl-set" Try 'iptables -h' or 'iptables --help' for more information. This means the module was not loaded (or isn't compatible. Assuming the correct version was selected, there's no fix. Likely your OS isn't compatible with this module. If anyone has additional troubleshooting to add feel free to chime in.
Technical Additional Info:
ttl_magisk_L18.1: This contains the xt_HL.ko file compiled from the lineage-18.1-20220102-nightly-bramble-signed repo
ttl_magisk_A12: This contains the xt_HL.ko file compiled from AOSP kernel: android-msm-redbull-4.19-android12
Updates:
* I updated the thread title since no one reporting the Android 12 kernel mod is working (only 11 works this far)
* I added "ttl_magisk_L19.zip" script which runs the iptables command for you on every boot. I just tested this on LineageOS19.1 and it works good. I'm working on testing it on LineageOS20.0...
Based on what @fddm said though, it sounds like a Magisk module like this will not work on stock AOSP because it "enforces signatures on modules". If anyone can confirm that, or a workaround that would be helpful. Also https://forum.xda-developers.com/t/...l-tether-lineageos-18-1.4295601/post-86173703 indicates we'll want to disable IP6 via these commands:
ndc interface ipv6 rndis0 disable
ndc interface ipv6 wlan0 disable
If anyone wants to test & get back that'll be great. With Tmobile I didn't need to do that (yet), but again feedback would be great.
I had checked the stock and Lineage configs and neither had signature enforcement enabled. I only had access to this phone for a couple days, so I unfortunately can't test for you.
fddm said:
I had checked the stock and Lineage configs and neither had signature enforcement enabled. I only had access to this phone for a couple days, so I unfortunately can't test for you.
Click to expand...
Click to collapse
So you think this should work on stock? Thanks man! I need my phone for work so can't put it offline for hours atm, but maybe over the weekend I can. I'd like to reflash android 12 stock & see if this works. I'd have to assume there's some interest in this... Someone else to test...who knows
hi, I am on ProtonAOSP 12, pixel 4a5g, tested the ttl A12 zip file. But it gave me error when trying to run the iptables command as per your instruction. So I guess it is not loading the module maybe
creezalird said:
hi, I am on ProtonAOSP 12, pixel 4a5g, tested the ttl A12 zip file. But it gave me error when trying to run the iptables command as per your instruction. So I guess it is not loading the module maybe
Click to expand...
Click to collapse
Apologies for your results. I just updated the OP with an "Issues" section I'll update with issues reported, and any fixes if we discover any. I've only successfully tested this against LineageOS18.1, and was only hopeful it would work against other OS's. Just for kicks, since it's a pretty simple/quick process, you may want to try the ttl_magisk_L18.1 version. BTW that entire command is case-sensitive in case someone didn't know (Eg. Iptables... will not work; iptables... will).
Regarding the fix for your issue...I think Proton is based just on AOSP, and nothing to do with LineageOS. I wouldn't think that would matter but pointing. I would've made an Android12/LineageOS19.0 module but it isnt official yet for this device. I'm not sure how willing the Proton folks would be, but the next logical step would be to have them add the following options to their ProtonAOSP12 "redbull_defconfig" file (or equivalent), build it, and send me over the xt_HL.ko file. Then I'll add a magisk module for that for you to test.
Side note: there are 4 recent AOSP kernel versions for this device. So if there are compatibility restraints with versions, I'd guess we'd have a maximum of 4 to deal with, depending on what OS you have. I don't know for sure, but wouldn't think your ROM being AOSP, LIneageOS, or Proton would make a difference, since typically custom ROMs only customize overlays, features, preferences, 3rd party SW, etc - they don't typically rewrite the kernel for example. But we'll find out. The modules I posted reflect LineageOS18.1 (should be android-msm-redbull-4.19-android11-qpr3 but I didn't verify; though this does work with a June 2021 build which is likely android-msm-redbull-4.19-android11-qpr2 or before) & Android12 (android-msm-redbull-4.19-android12). I don't have one for android-msm-redbull-4.19-android12-qpr1 yet, but there's a chance that's what you need. Recent bramble kernels:
android-msm-redbull-4.19-android11-qpr2
android-msm-redbull-4.19-android11-qpr3
android-msm-redbull-4.19-android12
android-msm-redbull-4.19-android12-qpr1
kevin71246 said:
Apologies for your results. I just updated the OP with an "Issues" section I'll update with issues reported, and any fixes if we discover any. I've only successfully tested this against LineageOS18.1, and was only hopeful it would work against other OS's. Just for kicks, since it's a pretty simple/quick process, you may want to try the ttl_magisk_L18.1 version. BTW that entire command is case-sensitive in case someone didn't know (Eg. Iptables... will not work; iptables... will).
Regarding the fix for your issue...I think Proton is based just on AOSP, and nothing to do with LineageOS. I wouldn't think that would matter but pointing. I would've made an Android12/LineageOS19.0 module but it isnt official yet for this device. I'm not sure how willing the Proton folks would be, but the next logical step would be to have them add the following options to their ProtonAOSP12 "redbull_defconfig" file (or equivalent), build it, and send me over the xt_HL.ko file. Then I'll add a magisk module for that for you to test.
Side note: there are 4 recent AOSP kernel versions for this device. So if there are compatibility restraints with versions, I'd guess we'd have a maximum of 4 to deal with, depending on what OS you have. I don't know for sure, but wouldn't think your ROM being AOSP, LIneageOS, or Proton would make a difference, since typically custom ROMs only customize overlays, features, preferences, 3rd party SW, etc - they don't typically rewrite the kernel for example. But we'll find out. The modules I posted reflect LineageOS18.1 (should be android-msm-redbull-4.19-android11-qpr3 but I didn't verify; though this does work with a June 2021 build which is likely android-msm-redbull-4.19-android11-qpr2 or before) & Android12 (android-msm-redbull-4.19-android12). I don't have one for android-msm-redbull-4.19-android12-qpr1 yet, but there's a chance that's what you need. Recent bramble kernels:
android-msm-redbull-4.19-android11-qpr2
android-msm-redbull-4.19-android11-qpr3
android-msm-redbull-4.19-android12
android-msm-redbull-4.19-android12-qpr1
Click to expand...
Click to collapse
Another note: it appears Proton does quite a bit of work with the kernel, mods/etc (eg. Features list here: https://forum.xda-developers.com/t/kernel-pixel-4a-5g-proton-kernel.4194685/ ). I'm not sure if you flashed their kernel (1 ROM says its not required), but if you did that may explain the incompatibility - but I'm just guessing.
kevin71246 said:
Another note: it appears Proton does quite a bit of work with the kernel, mods/etc (eg. Features list here: https://forum.xda-developers.com/t/kernel-pixel-4a-5g-proton-kernel.4194685/ ). I'm not sure if you flashed their kernel (1 ROM says its not required), but if you did that may explain the incompatibility - but I'm just guessing.
Click to expand...
Click to collapse
Not at all, I am just using the Proton without the Proton Kernal (this is optional). If not mistaken, the Dev mentioned somewhere that by default, the kernel is same as stock
creezalird said:
Not at all, I am just using the Proton without the Proton Kernal (this is optional). If not mistaken, the Dev mentioned somewhere that by default, the kernel is same as stock
Click to expand...
Click to collapse
Mind going into your phone settings & post your kernel version? Thx
kevin71246 said:
Mind going into your phone settings & post your kernel version? Thx
Click to expand...
Click to collapse
sure, here you go
kevin71246 said:
Obviously we all know this, but I'll say it anyway: I bear no responsibility for your device!
Background:
Initially I recompiled the kernel, but thanks to @fddm I was able to get this into a Magisk module. This is a take-off from https://forum.xda-developers.com/t/...-tether-lineageos-18-1.4295601/#post-86183959 Feel free to read that (minimal reading) for additional details.
What is this?
This Magisk mod adds the required iptables kernel module for TTL/Tether/unmetering for using your phone as a hotspot. I have Tmobile & with my plan, when I connect any device to the phone it is extremely throttled to around 0.5Mbps. With this mod and the settings below, you can get around that limitation. I go from 0.5Mbps=>80+Mbps with this mod. Root is required (look at above thread for details on that if needed).
Compatibility:
ROMs: At this point I can't indicate what ROMs this will be compatible with, but it appears LineageOS18.1 works. I'm attaching that as well as a Android/AOSP12 version if anyone wants to test that. I'm also not sure if this is exclusive to the bramble/Pixel 4a5g device (If anyone knows what they're doing or wants to get ballsy, test & report your results!)
Carrier: I tested this against Tmobile. It depends on how your carrier throttles your hotspot connected devices; Tmobile uses the TTL to determine if its the phone vs a connected device. If your carrier uses that method this should work.
xt_HL.ko: This is the kernel module we're inserting to allow the "iptables ttl set" command. I tested the Android12 xt_HL.ko file on my LineageOS18.1 OS and it does NOT work. This tells me there is some type of versioning. OR: there's an issue with the A12 file...
InCompatibility: (as reported by users in the thread)
ProtonAOSP 12, pixel 4a5g
Steps:
Install Magisk module & read the output; Verify it installed successfully.
Download Termux app from playstore
Termux App:
su (Grant permissions)
iptables -t mangle -A POSTROUTING -j TTL --ttl-set 64 (should be no errors - if you have errors my kernel is not installed)
Test: Turn on phone Hotspot, connect any device, do a speed test comparing speed on phone should be similar to the connected device.
If any limitations/blocks: (Not sure but maybe http vs https is blocked sometimes)
Install VPN Hotspot app (Green key icon): "Wi-Fi hotspot" ON, wlan1 ON, DISABLE "Tethering HW Acceleration" in settings
Issues:
After running the iptables command you get this error: iptables v1.8.4 (legacy): unknown option "--ttl-set" Try 'iptables -h' or 'iptables --help' for more information. This means the module was not loaded (or isn't compatible. Assuming the correct version was selected, there's no fix. Likely your OS isn't compatible with this module. If anyone has additional troubleshooting to add feel free to chime in.
Technical Additional Info:
ttl_magisk_L18.1: This contains the xt_HL.ko file compiled from the lineage-18.1-20220102-nightly-bramble-signed repo
ttl_magisk_A12: This contains the xt_HL.ko file compiled from AOSP kernel: android-msm-redbull-4.19-android12
Click to expand...
Click to collapse
Hi, I followed the steps and I am able to get this to work after making the changes to iptables. I did notice that if I reboot the phone the changes are not persisting. Is there any way to fix this?
Thanks!
ankur414 said:
Hi, I followed the steps and I am able to get this to work after making the changes to iptables. I did notice that if I reboot the phone the changes are not persisting. Is there any way to fix this?
Thanks!
Click to expand...
Click to collapse
That is odd. That iptables command should be persistent across a reboot. The steps in the OP are all I did. In fact once I get it working it's hard to undo it! Like I'll delete the iptables rule, reboot, and usually I still get I throttled data. Eventually it'll break again after messing with it. No clue why. Hopefully sometime else can chime in. For reference, please post your OS, build, kernel, assume Pixel 4a5g?...
kevin71246 said:
That is odd. That iptables command should be persistent across a reboot. The steps in the OP are all I did. In fact once I get it working it's hard to undo it! Like I'll delete the iptables rule, reboot, and usually I still get I throttled data. Eventually it'll break again after messing with it. No clue why. Hopefully sometime else can chime in. For reference, please post your OS, build, kernel, assume Pixel 4a5g?...
Click to expand...
Click to collapse
Hi, thanks for the response. I am using a Pixel 4a 5G:
LineageOS 18.1-20220116
Build: lineage_bramble-userdebug 11 RQ3A.211001.00110038514
Kernel: 4.19.160-ge469934bead0
it seems to be working fine connecting with my pc.
Shared out from pc both hotspot and ICS to router connecting devices register no internet
connection from META (oculus) Quest 2 shows connected, Internet works but ( BEATSABER WILL NOT CONNECT TO MULTIPLAYER ) .
Sorry.
tested the ttl A12 zip
Termux commands in op gave no error.
also ran #ndc interface ipv6 wlan0 disable (accepted)
#ndc interface ipv6 rndis0 disable would not take
noT Mobile buy metropolitition
if anyone could give me some advice for my quest2 multiplayer problem would have much love ... its the main reason I run hotspot.
OnePlus 6T
Model: A6013
Android 12
Sec. patch 1/5/2022
ProtronExtended version
12.2.1
[ROM][12L][fajita] ProtonXtended (PXOSP) [AOSP]
ProtonXtended (PXOSP) Android 12 based ROM About Project PXOSP (Proton Xtended Open Source Project) is a fork based on ProtonAOSP to enhance the user experience with useful addition features. Screenshots Screenshots of the PXOSP Installation...
forum.xda-developers.com
Kernel ver.
4.9.227Syberia+-g44a024f66f1a
#1 Tue Jan 25 19:55:25 UTC 2022
Linux version 4.9.227Syberia+-g44a024f66f1a ([email protected]) (Android (7485623, based on r416183b1) clang version 12.0.7 (https://android.googlesource.com/toolchain/llvm-project c935d99d7cf2016289302412d708641d52d2f7ee)) #1 SMP PREEMPT Tue Jan 25 19:55:25 UTC 2022
Magisk custom update channel
24.1 (24100)
@topjohnwu
kevin71246 said:
That iptables command should be persistent across a reboot.
Click to expand...
Click to collapse
iptables rules shouldn't be persistent unless you add them via script at startup. If anything, the opposite should be true. I know some devices will refresh their firewall rules after some time, at which point you have to add it back.
everburn said:
it seems to be working fine connecting with my pc.
Shared out from pc both hotspot and ICS to router connecting devices register no internet
connection from META (oculus) Quest 2 shows connected, Internet works but ( BEATSABER WILL NOT CONNECT TO MULTIPLAYER ) .
Click to expand...
Click to collapse
I have a very hard time believing that module worked for your device, are you sure your kernel doesn't already have xt_HL builtin? That aside, were you having issues before trying this? It's probably a compatibility issue between your unnamed provider and the platforms you want to use. If that's the case, just try out a bunch of VPNs until you find one that works and use it with VPN Hotspot.
fddm said:
iptables rules shouldn't be persistent unless you add them via script at startup. If anything, the opposite should be true. I know some devices will refresh their firewall rules after some time, at which point you have to add it back.
I have a very hard time believing that module worked for your device, are you sure your kernel doesn't already have xt_HL builtin? That aside, were you having issues before trying this? It's probably a compatibility issue between your unnamed provider and the platforms you want to use. If that's the case, just try out a bunch of VPNs until you find one that works and use it with VPN Hotspot.
Click to expand...
Click to collapse
yes its running according to magisk log. I was previously on pixel exp. rom android 12 and termux cmd ended in error
that is why I switched for the kernel. and from what i can tell all data is used as talk text data.... as my wifi hotspot 15GB still shows i have only used 2GB (which i have). as far as my B.S. problem I think it has something to do with multiplayer servers. it works fine on wifey's hotspot same carrier LG stylo 6 stock..
everburn said:
yes its running according to magisk log. I was previously on pixel exp. rom android 12 and termux cmd ended in error
that is why I switched for the kernel. and from what i can tell all data is used as talk text data.... as my wifi hotspot 15GB still shows i have only used 2GB (which i have). as far as my B.S. problem I think it has something to do with multiplayer servers. it works fine on wifey's hotspot same carrier LG stylo 6 stock..
Click to expand...
Click to collapse
If I'm understanding - it works, but some devices connected have random results? TMobile, or any cell phone provider, are known for issues with VPN, etc, so that doesn't surprise me. And a total guess, but TMobile uses cgnat & ip6, so maybe that's causing issues as well - but not sure what provider u have.
kevin71246 said:
If I'm understanding - it works, but some devices connected have random results? TMobile, or any cell phone provider, are known for issues with VPN, etc, so that doesn't surprise me. And a total guess, but TMobile uses cgnat & ip6, so maybe that's causing issues as well - but not sure what provider u have.
Click to expand...
Click to collapse
thats probably it right there thanks
Have tried both on Pixel 4a 5G, Android 11 stock, rooted, RQ1C.210205.006
"unknown option --ttl-set" on both

Categories

Resources