Feature Requests

[brendanosborne]

Feature	Status
Dark Mode	In Progress
Kill Switch	Under Consideration
Nested Tunnels (Multi-Hop)	Under Consideration
Simultaneous Tunnels	Under Consideration
UWP App Support	Under Consideration
Trigger System	Planned
Statistics/Status in UI	Planned
Multi-file VPN Config Import	Planned
ARM64 Support	Requires Testers
Multi-Language Support	Planned
IP Leak Test	Planned
WireSock Virtual Adapter Mode (-lac launch parameter)	Planned
WireSock installed as part of TunnlTo installation	Planned
Domain name routing	Under Consideration
Password to view tunnel config	Under Consideration
Improve System tray icons for improved visibility	Planned
Config Import from clipboard	Under Consideration
System Tray Controls	✔️
Minimize on Startup	✔️
VPN Config Import	✔️
Auto Startup	✔️
Auto Connect on Startup	✔️
Minimise to system tray	✔️
Resizable windows and UI	✔️
Add WireSock folder rules	✔️
Add Preshared key support	✔️
Add Persistent Keepalive	✔️
Auto Updater	✔️
WireSock Log Levels	✔️
Show Local Interface Public Key	✔️
Generate Key Pairs	✔️

If you would like to request a feature, please reply to this discussion.

[azimoert]

Is there a chance to choose applications from the list of active processes? Basically speaking to simplify the process for lazy people like me.

[vithusel]

It may be easier to use registry to pull list of apps and show them as options via that. Depending on system and app privilege users may not always have access to all running apps / processes.

Certainly possible

[GhostYiL]

1 - [ API] Would be great to implement ipinfo, rst.mp or call api from each client to not get rate limited directly, for auto-fetching/updating AllowedIp's ranges for the selected websites, with occasional pulls.
2 - [IP BLOCKS CALCULATOR ] Built in calculator for substracting Allowed/Disallowed ranges and vise versa.
3 - [UI] A possibly nice addition but more of a niche: make it so active connection always shows in UI, when switching between configurations, for easy disconnect.

[vithusel]

With the new Systray.

If the VPN is already connected can you hide or blur out the option in systray / Connect / VPN name?

It doesn't make it clear to the end user that the session is already connected

[Dantenerosas]

Domain name routing would be just perfect because while allow\disallow IPs is useful on its own but IPs of domains behind some sort of gateway (e.g. CloudFlare) may sometimes change and then you would need to resolve it yourself again, etc etc. So it would be pretty nice to have one

[toolewdpersona]

I have been looking for such a program for a long time!
And it's a pity that there is no possibility to add domain names of sites yet.

[nikolaevaxenov]

Couple UI feature requests:

1. It would be great to have functionality to clone existing tunnel inside application.
2. Also, the functionality of reorganizing the tunnels would be nice to have.

[rwasef1830]

TCP mode

[vithusel]

This isn't even officially suggested by Wireguard as it experiences significant slowdowns and requires additional configuration serverside.

You may be betteroff adopting OpenVPN as TCP mode is their native choice

What would be your use case for this feature out of curiosity

[macsunmood]

The "Auto Updater" is marked as implemented.
How does it work?

[vithusel]

It uses Tauri's built in mechanism for updates.

Without going into too much info. When the application launches a check is performed to see if there is a newer version of the software (this is controlled by another repo which holds version information).

If there is then there will be a popup to advise users of the update and if they want to install it.

[nomad-22]

Would like to request an option to export a tunnel config.

[GLobyNew]

Hey!
Now TunnelTo is able to start and auto minimize on start, but it would be convenient for me personally to have TunnelTo minimized to the tray when starting the system, not to the taskbar.
Is it possible to do this?

[Rexadev]

[Feature] Global Allowed and Disallowed
Add a option to use 1 Allowed and Disallowed (Apps, Folder,...) setting for all VPN Profiles

[Rexadev]

[Feature] Show icon for programs under 'Apps'

[Rexadev]

[Feature] Emoji Support
I want to use Flag example 🇳🇱 but it appears as text

[Rexadev]

[Feature] Add option to use custom DNS
I don't want to use VPN provider's DNS

[NightcoreIsla]

Hope this feature is implemented too here
My company has a private DNS Server that binds many system LAN IPs to domain names to replace public DNS records
and blocks Wan's access to these systems in firewall settings

In these case
I tried to set the tunnel to allow 0.0.0.0/0 and disallow 192.168.0.0/16 to try proxy wan traffic and keep private LAN system access
IP connection from LAN to LAN is allowed
however, the private system's domain name keeps getting an IP from a public DNS
I set TunnelTo's DNS Settings to private DNS Server, but it is not working, it seems to be trying to get the DNS connection on wan traffic, so the private DNS connection is failed
I need to write many records in the local host file to keep my private lan system access.

[vithusel]

Hope this feature is implemented too here
My company has a private DNS Server that binds many system LAN IPs to domain names to replace public DNS records
and blocks Wan's access to these systems in firewall settings

In these case
I tried to set the tunnel to allow 0.0.0.0/0 and disallow 192.168.0.0/16 to try proxy wan traffic and keep private LAN system access
IP connection from LAN to LAN is allowed
however, the private system's domain name keeps getting an IP from a public DNS
I set TunnelTo's DNS Settings to private DNS Server, but it is not working, it seems to be trying to get the DNS connection on wan traffic, so the private DNS connection is failed
I need to write many records in the local host file to keep my private lan system access.

Hi @NightcoreIsla

I'm currently using hosts file to set static DNS entries as local caching plays havoc on windows machines.

Can you try the below steps - open cmd as admin and run ipconfig /flushdns and then check again using ping to resolve the IP whilst connected to VPN. If this shows LAN IP then we can confirm it's a caching issue.

Can you also get enable full logging and drop a copy of your logs in a issue using the template rather than as a feature request as what you are asking for already exists. However it seems likely that this issue is being caused by local caching rather than a application issue

[NightcoreIsla]

@vithusel
Thanks for reply
here is my action:

1. clean the C:\Windows host file of I created
2. wait for minutes, or type "ipconfig/flushdns" in cmd as administrator
3. ping EIP.example.com show 192.168.98.2 (LANIP), ping ERP.example.com show 192.168.98.3 (LANIP)
4. both systems can access and work on browser right now (TunnelTo is not enabled right now)
5. open cmd as administrator, type ipconfig, to get my company DNS server like (192.168.99.99、192.168.99.98)
6. change TunnelTo's DNS settings to "192.168.99.99, 1.1.1.1" from "1.1.1.1, 8.8.8.8" (keep original settings also got the same result after), and add Disallow CIDR "192.168.0.0/16"
7. Enable TunnelTo now
8. cmd ping is getting the same result as step3, the system still can access for a while, Google "what is my IP", will show my Wireguard server IP
9. type "ipconfig/flushdns", or wait a minute
10. redo step 3, the result changes to "could not find host xxx.example.com" or "60.123.123.123"(WANIP), depending on WAN DNS record exists or not, both of private LAN system can't access at this time (these systems blocking most wan traffic)
11. ping 192.168.99.99 (private DNS), still working, "telnet 192.168.99.99 53", it can be connected(blank screen show)
12. turn off TunnelTo, the private LAN system still can't be accessed for a while
13. wait for a minute or type"ipconfig/flushdns"
14. ping results back to step3, and the private LAN system can be accessed again

[vithusel]

@NightcoreIsla

Can you set Logging to the max, perform the same checks again and drop a copy of the logs in this after you have santized the logs so no private data is visible?

Also what version of TunnlTo are you using? There was a known issue on a older version that prevented local DNS from working when it's IP was within the Disallow range

If you set DNS to only use your local DNS without 1.1.1.1 does DNS still work?

[Rexadev]

What DNS to set for TunnlTo to use Windows' inbuilt DoH

[Rexadev]

Add option select default use WAN or VPN.
Example I have Apps,FOlders,IPs in both Include and Exclude, for apps in none of those where will the traffic will go though ? (currently it goes though WAN)

[vithusel]

It falls back to your IP allow and disallow. If the intended destination is within the allowed IP range then the application will go via the VPN. If it's not then the application will go via WAN.

[Rexadev]

Got it if I add gateway IP to disallowed non-specified apps will go though WAN

[Rexadev]

Combine Folders and Apps

Folder can use syntax C:\Directory\*
Apps will end in .exe or something

[Rexadev]

[UI Enhancement] Add connect button to Config List panel

UI Mockup

[Rexadev]

UI Cleanup

1. Remove Top Bar

2. Add Logo beside Big "TunnlTo"

3. Add option to adjust Panel size

Screenshot

5. Remove right click context menu

Screenshot

6. Space waste

Screenshot

7. Move the green button

Screenshot

8. Move Enable button

Screenshot

8. Move section info to i button and make heading bigger

Screenshot

9. Space Waste

Screenshot

10. Move Allow and Disallow one below other

11. Add Horizontal Scrolling

Screenshot

[brendanosborne]

@Rexadev while I appreciate the enthusiasm, you need to take it easy on the posts. We need to keep this thread about feature requests rather than personal preferences on UI and aesthetics. The app just isn't at the "make it look pretty" stage yet.

[Rexadev]

Add tick box for Allowed/Disallowed Apps, Folders, IPs.

UI Mockup

[Chanceium]

Feature Request: Support for Simultaneous Activation of Multiple Tunnels

Description:
I am currently using two separate tunnel settings in my setup:

1. A default tunnel to route traffic for a specific application.
2. A separate tunnel to access private subnet routes from my home network on my computer.
   At present, I can only activate one of these tunnels at a time. This limitation restricts the application from being routed through the VPN while simultaneously accessing my home network subnet.

Feature Request:
I propose the addition of a feature that allows for the simultaneous activation of multiple tunnels. This would enable the specific application to be routed through the VPN and maintain access to my home network subnet concurrently.

This enhancement would significantly improve the flexibility and efficiency of network routing for users who require complex tunnel configurations.

Would just like to put more pressure on this feature request as I believe its a pretty important one for Wireguard Users.

[VoyNaLunu]

Is there currently a way to contribute to translations?

[brendanosborne]

Not currently. I will @ you when we get to that stage.

[WiFiBERNET]

Please add a 2FA Login option or at least a password startup so that it can keep the VPNs a little more secure in a way as to not expose the Private/Public Keys and or PSK. Again would be a nice addition.

Also this is an amazing clean app. Dark mode will be a huge bonus as well. Thank you!

[wiresock]

For your information, WireSock VPN Client supports encryption of configuration files using Windows user credentials.

[brendanosborne]

Thanks for the suggestions. Dark mode is on the way. Improved storage of the VPN configs is on the radar as the current implementation is not ideal.

[Tayanaru]

It would be nice if the icon in the notification tray was more clear in the status of the connection. It is hard to see the coloured t in the icon as it blends into the background a bit.

[brendanosborne]

Thanks for the suggestion. Yes it could be clearer. I'll look into it.

[kvinstar]

Why is there no domain mode, but only IP addresses?

[UnknownWitcher]

Can you add a means to check whether an app is being routed? It's easy to confirm this with a quick IP test in a browser, but some apps make this a little more difficult, one idea would be to have a tab for active apps that are on the allowed/disallowed list, then a simple green/red circle to indicate if the app is being routed, that way users like myself can confirm that everything is working as expected and helps avoid simple user errors such as a mistype when entering the app names.

[vellici]

Considering kill switch and, a dns query log

[radepol]

How to switch "Detected default interface" ? (I have two WAN)