TunnelForge

io.github.evokelektrique.tunnelforge
by Zapstore Catalog

L2TP/IPsec VPN client for modern Android

TunnelForge is an Android VPN client for networks that still rely on L2TP/IPsec with IKEv1. Android 12 removed the built-in L2TP and PPTP VPN options. TunnelForge provides a maintained client path for organizations, schools, universities, and personal networks that cannot immediately replace existing L2TP/IPsec servers. Features: * L2TP with optional IPsec IKEv1 * Full-device VPN tunnel mode * Proxy-only mode with local HTTP and SOCKS5 listeners * Per-app routing for include or exclude lists * Multiple profiles with local credential storage * Custom DNS options, including UDP, TCP, TLS, and HTTPS * Configurable MTU * Connection state and detailed local logs TunnelForge does not provide a VPN service or account. You need access to an existing compatible VPN server.

First release: Nov 6, 2026, 1 total release.

Most recent release: Nov 6, 2026.

Repo

Appears in 0 app stacks.

0 sats / 0 zaps received in the past year.

Sats Received

Underlying data available via MCP: app_zaps, app_releases.

Zap Count

Underlying data available via MCP: app_zaps, app_releases.

Releases

  • Nov 6, 2026 0.7.8
    ## What's changed ### Clearer connection errors - Connection errors now include an error code, a short explanation, and suggested fixes where available. - CHAP and PAP login rejections now show an authentication error instead of a generic PPP failure. - Error codes and descriptions are saved in the logs, making connection problems easier to investigate. ### Easier copying and log sharing - Redesigned error dialogs with a shorter title and a separate error-code display. - Added expandable error details so technical information stays available without cluttering the dialog.
    More…
    - Added copy and log-export icons with tooltips, alongside a labeled Close button. - Dialogs can also be dismissed by tapping outside them. - Copying error details shows a confirmation toast. - Exporting logs shows progress feedback and opens Android's share sheet with the debug-log file attached. Nothing is sent automatically. ### L2TP/IPsec compatibility and fixes - Fixed the L2TP Call Serial Number AVP to use the required 32-bit encoding. - Added ESP 3DES-CBC support for legacy servers using IKEv1 3DES/SHA1, DH Group 14, and HMAC-SHA1-96. - Added DH Group 2 fallback for older gateways that require it. - Fixed PPP negotiation and private DNS routing through the VPN. ### Interface updates - The dark splash screen now follows the app theme. - The connectivity badge now displays HTTP response time separately from connection setup. - The security-notice review period is now 10 seconds. ### Build and release - Updated CI and release builds to Flutter 3.44.2. - Added strict dependency-lockfile checks to CI. - Published signed Android APKs for arm64-v8a and x86_64, with SHA-256 checksums. --- * fix(l2tp): encode Call Serial Number AVP as uint32 by @evokelektrique in https://github.com/evokelektrique/tunnel-forge/pull/8 * chore(metadata): add missing Fastlane changelogs by @evokelektrique in https://github.com/evokelektrique/tunnel-forge/pull/9 * Add ESP 3DES-CBC support for L2TP/IPsec by @evokelektrique in https://github.com/evokelektrique/tunnel-forge/pull/10 **Full Changelog**: https://github.com/evokelektrique/tunnel-forge/compare/v0.7.4...v0.7.8