Proto commits in mullvad/mullvadvpn-app

These commits are when the Protocol Buffers files have changed: (only the last 100 relevant commits are shown)

2025-05-08

Add QUIC obfuscation to mullvad daemon and management interface

The documentation is generated from this commit.

2025-05-07

Add QUIC obfuscation to mullvad daemon and management interface

The documentation is generated from this commit.

2025-05-06

Add QUIC obfuscation to mullvad daemon and management interface

The documentation is generated from this commit.

Add note on `GetVersionInfo` cancelling updates

Update ephemeral peer proto definition to prepare for HQC-256

Use HQC-256 instead of Classic McEliece in quantum-resistant handshake

2025-05-05

Add QUIC obfuscation to mullvad daemon and management interface

The documentation is generated from this commit.

2025-05-02

Add QUIC obfuscation to mullvad daemon and management interface

The documentation is generated from this commit.

2025-04-28

Add in app upgrades to the daemon --------- Co-authored-by: Markus Pettersson <markus.pettersson@mullvad.net>

Implement new version check and app downloader This also fixes 'latest_beta' being required in the API Co-authored-by: Sebastian Holmin <sebastian.holmin@mullvad.net> Co-authored-by: Markus Pettersson <markus.pettersson@mullvad.net>

Remove unused fields in AppVersionInfo These fields are never consumed by any client and can therefore be removed.

Add AppUpgrade messages and related RPC calls

Update AppVersionInfo field suggested_upgrade It is now its own message with more information about the suggested upgrade.

2025-04-25

Add obfuscation type

The documentation is generated from this commit.

Add QUIC obfuscation to mullvad daemon and management interface

2025-04-17

Use HQC-256 instead of Classic McEliece in quantum-resistant handshake

Update ephemeral peer proto definition to prepare for HQC-256

2025-04-10

Revert smart routing logic for DAITA: Multihop feature indicator This reverts commit 5d69b1db and renames smart routing to DAITA: Multihop

2025-04-09

Add in app upgrades to the daemon --------- Co-authored-by: Markus Pettersson <markus.pettersson@mullvad.net>

Improve error message when an unavailable ip version is selected

2025-04-07

Implement new version check and app downloader This also fixes 'latest_beta' being required in the API Co-authored-by: Sebastian Holmin <sebastian.holmin@mullvad.net> Co-authored-by: Markus Pettersson <markus.pettersson@mullvad.net>

Remove unused fields in AppVersionInfo These fields are never consumed by any client and can therefore be removed.

Add AppUpgrade messages and related RPC calls

Update AppVersionInfo field suggested_upgrade It is now its own message with more information about the suggested upgrade.

2025-04-04

Implement new debug commands: `relay disable` and `relay enable` Add two new `mullvad debug` subcommands: - mullvad debug relay enable <country|city|hostname|openvpn|wireguard> - mullvad debug relay disable <country|city|hostname|openvpn|wireguard> These commands are used to update the state of relays the current relay list. This is useful to mock relays going offline or coming online from an offline state. These new debug commands were conceived during the development of the feature for adding warnings for the upcoming OpenVPN deprecation, as there wasn't a convenient way of mocking this.

2025-04-02

Implement new debug commands: `relay disable` and `relay enable` Add two new `mullvad debug` subcommands: - mullvad debug relay enable <country|city|hostname|openvpn|wireguard> - mullvad debug relay disable <country|city|hostname|openvpn|wireguard> These commands are used to update the state of relays the current relay list. This is useful to mock relays going offline or coming online from an offline state. These new debug commands were conceived during the development of the feature for adding warnings for the upcoming OpenVPN deprecation, as there wasn't a convenient way of mocking this.

Implement new version check and app downloader This also fixes 'latest_beta' being required in the API Co-authored-by: Sebastian Holmin <sebastian.holmin@mullvad.net> Co-authored-by: Markus Pettersson <markus.pettersson@mullvad.net>

2025-03-26

Add AppUpgrade messages and related RPC calls

Update AppVersionInfo field suggested_upgrade It is now its own message with more information about the suggested upgrade.

Remove unused fields in AppVersionInfo These fields are never consumed by any client and can therefore be removed.

2025-03-17

Merge branch 'main' into tracing-instrument

2025-03-10

Remove optional for tunnel_type in NormalRelaySettings message

2025-03-07

Add `mullvad logging listen`

Add `mullvad logging set-level` cmd

Simplify log filter

Add log reload handle

2025-02-03

Set correct DAITA platform on Windows

2025-01-31

Typed create account

WIP Use `LoginResult` message

Typed login

2025-01-09

Update changelog presentation

2024-12-19

Add proto datastore dependency

2024-12-12

Add support for DAITA v2 to talpid tunnel config client Co-authored-by: Markus Pettersson <markus.pettersson@mullvad.net>

2024-11-27

Handle legacy always-on vpn profiles Co-authored-by: Jonatan Rhodin <jonatan.rhodin@mullvad.net>

2024-10-29

Add RPC for checking if TCC approval is needed

2024-10-25

Add `mullvad logging listen`

Add `mullvad logging set-level` cmd

Simplify log filter

Add log reload handle

2024-10-23

Define the built-in access method "Encrypted DNS proxy"

2024-10-15

Replace pqc_kyber with ml-kem Upgrading one of the key encapsulation mechanism algorithms we use for quantum-resistant tunnels from Kyber (draft) to ML-KEM (standardized FIPS 203)

2024-10-07

Merge branch 'rename-smart_routing-to-use_multihop_if_necessary-des-1292'

Rename "smart routing" to "direct only" in the API Also invert the behavior

Replace `smart_routing` with `use_multihop_if_necessary` in daemon Simplify the logic for feature indicators

2024-10-04

Route unexpected primary interface traffic via VPN utun Co-authored-by: Joakim Hulthe <joakim.hulthe@mullvad.net>

Remove setting to leak traffic to apple networks

2024-10-01

Rename account "token" to account "number"

2024-09-25

Add setting to leak traffic to apple networks Co-authored-by: David Lönnhager <david.l@mullvad.net>

Add setting to leak traffic to apple networks Co-authored-by: David Lönnhager <david.l@mullvad.net>

2024-09-17

Align Smart routing GUI with design spec

Add daita.enabled and daita.use_anywhere rpc calls

Add `use_anywhere` feature indicator

Add `use_anywhere` daita setting

2024-08-16

Parse shadowsocks ports in relay list

Add Shadowsocks feature indicator

Add Shadowsocks obfuscation support to mullvad-daemon

2024-08-01

Implement feature indicators in daemon - Add a GetFeatureIndicators gRPC call that get's the current set of active "features" that should be shown in the UI. - Extend the TunnelState with a FeatureIndicators value. Clients who listens for TunnelState events will get updates automatically.

2024-07-31

Add ResetSettings RPC to the management interface

2024-07-11

Document that it is round3 of the Kyber KEM we are using

2024-06-24

Merge branch 'failed-to-enable-split-tunneling-on-macos-145-intel-des-1034'

2024-06-20

Add `PrepareRestartv2` gRPC call - Add option to automatically shutdown daemon on after running through the same safety routine as `PrepareRestart`. This is exposed via a new gRPC call called `PrepareRestartV2`. - Add help text for enabling full disk access to the CLI

2024-05-29

Migrate to gRPC Co-authored-by: Jonatan Rhodin <jonatan.rhodin@mullvad.net> Co-authored-by: Markus Pettersson <markus.pettersson@mullvad.net> Co-authored-by: David Lönnhager <david.l@mullvad.net>

Add error state cause for full disk permissions error

2024-04-30

Add initial split tunneling implementation for macOS

2024-04-25

Backport wireguard-nt DAITA

2024-04-16

Add DAITA Windows client and updated tuncfg

2024-04-12

Add ClearCustomLists RPC call

Add ClearCustomApiAccessMethods rpc call

2024-01-31

Change API access methods settings format Change API access methods settings format to encode that built-in access methods always exist by making them distinct values of the `AccessMethod` settings. This change was also propagated to the corresponding protobuf definition, such that any client may make use of this fact as well. The appropriate settings migration was added.

Add tunnel creation error on Windows

2024-01-22

Add `TestCustomApiAccessMethod` RPC call Add a new RPC call `TestCustomApiAccessMethod` for testing access methods on the fly, without having to save them to the daemon settings first. This only works for custom access methods.

2024-01-18

Print if lockdown mode is enabled when disconnected for `mullvad status` Add `locked_down` field to disconnected tunnel state.

2024-01-10

Add patch export to the management interface

2024-01-08

Link to patch format in proto file

Add new internal daemon event `AccessMethodEvent` Add a new `InternalDaemonEvent` for announcing when the current API access method changes.

2024-01-03

Allow app to use custom socks5 and shadwosocks proxies This PR has a couple of different purposes - Allow users to use socks5 local proxies with the CLI without having to be root nor use split-tunneling. This only works for OpenVPN. - Unify the types used by different proxy parts of the codebase, such as the Access Methods as well as some already existing OpenVPN proxy code. This PR changes the firewall on all desktop platforms as well as changes the routing table slightly on MacOS and Windows. On Linux the firewall code is modified to apply the appropriate firewall marks to all packages that go to a remote endpoint corresponding to the remote part of a local socks5 proxy. The firewall marks will allow the routing to be done without having to modify the routing table. On MacOS and Windows the routing table is modified to allow packages to go to that same endpoint to pass outside the VPN tunnel, it will additionally punch a hole in the firewall. The PR also migrates the settings file from version 7 to version 8 in order to properly and neatly unify Proxy related types. Finally it provides some slight extensions to the gRPC interface in order to allow for control over the custom proxy settings.

2023-12-29

Fetch account ID from API

2023-12-21

Remove `GetCurrentLocation`. Make the daemon send two tunnel state updates, one with out IP being empty, and another with it being filled when am.i.mullvad.net responds. Update CLI for this change. Other front ends are left out.

2023-12-04

Perform testing of access methods asynchronously Perform testing of access methods asynchronously in a separate `tokio` task as to not block the daemon from handling other daemon events during the testing window

Move access method testing logic to `mullvad-daemon` Move access method testing logic to `mullvad-daemon`, which means that the implementation details of how the test works is opaque to whatever frontend which wants to issue a test of some (configured) access method.

2023-11-17

Add support for applying JSON patches to management interface

2023-11-13

Add management interface for relay override

Add proto message for relay overrides

2023-11-07

Add configurable transport protocol to local SOCKS5 access method

2023-11-06

Prefix remote `ip` and `port` with `remote_` in Socks5Local contexts

2023-10-30

Replace UpdateRelaySettings with SetRelaySettings

2023-10-13

Use optional modifier for optional primitives in protobuf messages

2023-10-09

Add `GetApiAddresses` now returns a list of API addresses

Add `GetCurrentApiAccessMethod` to show the current API access method - Add a new RPC message: `GetCurrentApiAccessMethod`. This message may be used to retrieve the access method which is currently in use by the daemon for connecting to the Mullvad API. - Add `mullvad api-access status` for showing the API access method in use

Add authentication with username+password for SOCKS5 access method Add the option to authenticate against remote SOCKS5 proxies with a username+password combination. It was an oversight that this was not added from the start.