ZimaClient VPN configuration

Operating System ZimaOS
1

Hi IceWhale team, I’m using ZimaOS and would like to access my server remotely using ZimaClient on my iPhone. When I try to connect away from home, the app asks me to allow it to add a VPN configuration to my iPhone. Before allowing this, I’d like some clarification about exactly how the VPN works. 1. Does ZimaClient use split tunneling, meaning only traffic between my iPhone and my ZimaOS server travels through the VPN. 2. Or does it route all iPhone internet traffic through the VPN? 3. Do normal activities such as Safari browsing, email and other apps remain outside the VPN? 4. Can IceWhale confirm what information, if any, the VPN can access or monitor? I’m happy with ZimaClient and would prefer to use it, but I want to understand the privacy implications before granting VPN permission. Thank you.

2

Thank you for your support of ZimaClient. We fully understand your concerns. I’ll explain each point below:

  1. ZimaClient uses split tunneling by default. The iOS VPN configuration establishes a virtual network connection to ZimaOS. Only traffic matching that virtual network’s routes enters the tunnel.
  2. By default, it does not route all of your iPhone’s internet traffic through the VPN. Normal internet access still uses your current Wi-Fi or cellular network. The “Add VPN Configuration” prompt does not mean that all traffic will enter the VPN.
  3. Everyday internet activities, such as browsing ordinary websites in Safari, sending and receiving email, and using other apps, generally remain outside this VPN.
  4. VPN permission does not give IceWhale the ability to view all of your online activity. The tunnel component on your phone processes packets that enter the tunnel. Services required to establish the connection may also have access to technical information, such as your public IP address, device or network identifiers, and connection status. For ZeroTier connections, data is end-to-end encrypted, and ZeroTier’s official documentation states that it cannot read the transmitted content. ZeroTier’s official explanation

We’re also preparing detailed technical documentation!

Also, you can disconnect the VPN or remove its configuration at any time in your iPhone’s VPN settings.

3

Hi,

Thanks for taking the time to explain how ZimaNet and split tunnelling work. I appreciate your assistance and the information you’ve provided. I’ve now checked the settings and carried out some tests, and I feel comfortable using ZimaClient.

Thanks again for your help.

Kind regards,
Peter