How to connect to VPN service on Android via its app if it's restricted by state ISPs, but you're able to connect via cloud VPS network outside the state
My idea is about concepts in general:
- you have some Android 9+ device
- you have some VPN (and like CloudFlare WAPR 1.1.1.1) apps
- VPN apps are blocked entirely by government censorship, deep packet inspection (DPI) and other network traffic inspecting solutions.
You might be able to set up some VPN/proxy/DNS on cloud VPS outside the state WAN. But a problem here is these VPS are affiliated with local companies who get paid with local currency, they're under local law and obviously "listen" to all traffic which is going through like regular ISP, due to law.
This is the reason why you need "clear", "direct" and trusted VPN and why basic VPS as a proxy or VPN client on the VPS side is not a solution, but an implementation of a man-in-the-middle attack.
A problem is about how it can be implemented on different levels. You have a point about using only service-issued applications and avoiding some more DIY-ways like using OpenVPN/Wireguard, because it doesn't offer all possibilities and security.
On the other side, you can't establish multiple VPN connections simultaneously due to Android architecture.
But theoretically, you can set up a proxy on the LTE APN (carrier access point) properties level or Wi-Fi connection properties level, or establish connection to VPS on the router.
Setting up some hypothetical proxy on the level of LTE APN is preferable.
I guess you can't connect to VPS local network directly because firstly you should connect to carrier/ISP network and pass through it. But on which level you'll be able to do this and how?
I can't even google some good stuff about connecting via carrier APN proxy (possibly it won't work here at all).
So, a problem is how to connect to VPS local network on the first step and then connect via VPS network to VPN service and implement it on Android (and even iOS if the solution shares common principles). Of course, I'm interested also about implementation on Windows/Linux clients. Possibly, it will be easier to get static IP issued by local ISPs, set up VM on the home pc, establish a connection to VPS via this local server, and then connect both PC-client and Android client to this local server with previously configured VPN connection on the local server side... Any ideas?
And yes, let's guess that VPN service app DOESN'T provide a proxy option (like dear ProtonVPN)
