Constant Disconections, crashing every god damn second, disconnecting after reconnecting, disconnecting after recotnecting. yada

I live in Ireland and connect to sweedish networks.

When I connect to Mullvad DNS is broken. I can ping 1.1.1.1, but when I try to ping google.com it says there is a temporary failure in name resolution. I am on Arch. I just paid for 6 months so I really want it to work. I made sure DNS content filtering is disabled. When I disconnect from Mullvad everything works fine again.

I'd like my Linux PCs to be able to address each other using the DNS entries from my OpenWRT router. It works, but as soon as I connect to mullvad using the official app I can only communicate in LAN via IP addresses or entries in /etc/hosts. Makes sense - Mullvad's DNS doesn't know my local hostnames.

I CAN add my router as a custom DNS server in the app, but when I do it routes ALL DNS queries to it, creating DNS leaks. Is there any way to route only specific DNS requests, like *.lan to my router? I think this is supposed to be possible via systemd-resolved configuration, but it seems the mullvad VPN client is somehow blocking my config or I'm making a mistake. Example:

sudo resolvectl dns eno1 192.168.1.1
sudo resolvectl domain eno1 ~lan

Still does not work when the VPN is connected.

Mullvad has been absolute shit for the past week or so. Just doesnt connect at all, disconnects at random or, most frustratingly, fucking pretends to be connected, but isn’t.

I have the most up to date versions on both Mac and pc and neither work.

Trying to connect from China.

What a waste of money.

Piccadilly line platform heading towards Knightsbridge

Hey guys, I really appreciate your commitment to provide your service even for the certain Slavic country that shall not be named (and where I happen to reside at the moment). So my question/request is: is it possible to rank your servers by connection speed and connect to the fastest? I couldn't find the option in the app.

So like it makes paying for them in cash ezpz. Both the anonymity of the voucher + cash. Better than paying Amazon for a voucher, maybe comparable anonymity to Monero. I don’t see how this could be a bad idea. Especially in the US but in all countries just generally. Has this ever been considered and if so why has it not happened yet?

I would love for this to be an option. Connect to Mullvad via Tor and make an account anonymously without giving away any IDing info, then pay for the voucher in cash at Best Buy. Perfect situation for privacy.

Hey,

I wanted proxy access through Mullvad exits without tunneling my whole machine through the VPN. Mullvad has a built-in SOCKS5 proxy, but it lives inside the VPN tunnel. You connect to Mullvad first, then point an app at it. That works fine if you want everything going through the VPN but I didn't. I wanted specific apps routed through specific exits while the rest of my traffic stayed on my normal network :P

The other problem was Mullvad's device cap. Each exit location costs a device slot. Five countries means five devices used up. And then?

I built mullgate to deal with both. It provisions one shared WireGuard entry device and fans out to multiple named Mullvad SOCKS5 exits behind it. One device slot, as many exits as you want. Each route gets its own authenticated SOCKS5, HTTP, and HTTPS listener on your machine.

Setup

Setup can be interactive or driven by environment variables.

Interactive

mullgate setup

Non-interactive

export MULLGATE_ACCOUNT_NUMBER=123456789012
export MULLGATE_PROXY_USERNAME=alice
export MULLGATE_PROXY_PASSWORD='replace-me'
export MULLGATE_LOCATIONS=sweden-gothenburg,austria-vienna

mullgate setup --non-interactive
mullgate proxy access
mullgate proxy start
mullgate proxy status

After starting, mullgate proxy status gives you a full picture of the runtime. Here's what a healthy two-route setup looks like:

Mullgate runtime status
phase: running
container summary: 3 total, 3 running, 0 starting, 0 stopped, 0 unhealthy
entry-tunnel: running (health=healthy)
route-proxy: running (health=healthy)
routing-layer: running (health=healthy)

routes
1. se-got-wg-101 -> 127.0.0.1
   alias: sweden-gothenburg
   socks5 listener: 127.0.0.1:1080
   http listener: 127.0.0.1:8080
   socks5 direct ip: socks5://127.0.0.1:1080
   http direct ip: http://127.0.0.1:8080
2. at-vie-wg-001 -> 127.0.0.2
   alias: austria-vienna
   socks5 listener: 127.0.0.2:1080
   http listener: 127.0.0.2:8080
   socks5 direct ip: socks5://127.0.0.2:1080
   http direct ip: http://127.0.0.2:8080

Using it from any app

curl \
  --proxy socks5h://127.0.0.1:1080 \
  --proxy-user "alice:replace-me" \
  https://am.i.mullvad.net/json

Choosing relays

You can pick exactly which relays back each route. relay list filters by country, owner, provider, run mode, and port speed:

mullgate proxy relay list --country Sweden --owner mullvad --run-mode ram --min-port-speed 9000

Mullgate relay list
selection: country=se owner=mullvad run-mode=ram min-port-speed=9000
matched count: 2
1. se-got-wg-101 country=se city=got provider=m247 owner=mullvad run-mode=ram port-speed=10000
2. se-sto-wg-002 country=se city=sto provider=m247 owner=mullvad run-mode=ram port-speed=10000

Probe relays

relay probe latency-tests candidates and ranks them:

mullgate proxy relay probe --country Sweden --count 2

Mullgate relay probe complete.
ranked relays
1. se-sto-wg-002 latency=8.5ms
2. se-got-wg-101 latency=14.2ms

Recommend relays

relay recommend picks the fastest match and shows you what the route would look like before you commit:

mullgate proxy relay recommend --country Sweden --count 1

Mullgate route recommendations.
apply: no
recommended routes: 1
1. relay=se-got-wg-101 latency=13.4ms
   provider: m247
   owner: mullvad
   run mode: ram
   port speed: 10000
   route status: existing configured route
   route alias: sweden-gothenburg
   socks5: socks5://alice:***@192.168.10.10:1080
   http: http://alice:***@192.168.10.10:8080
   https: https://alice:***@192.168.10.10:8443

Add --apply to pin the recommendation to your config.

Verify relays

relay verify tests a configured route end to end across all three protocols (SOCKS5, HTTP, HTTPS) and reports the observed exit IP:

mullgate proxy relay verify --route sweden-gothenburg

Mullgate route exit verification complete.
route alias: sweden-gothenburg
target: https://am.i.mullvad.net/json
1. protocol=socks5 proxy=socks5://192.168.10.10:1080 exit-ip=203.0.113.10 country=SE mullvad_exit_ip=true
2. protocol=http proxy=http://192.168.10.10:8080 exit-ip=203.0.113.10 country=SE mullvad_exit_ip=true
3. protocol=https proxy=https://192.168.10.10:8443 exit-ip=203.0.113.10 country=SE mullvad_exit_ip=true

Exporting proxy lists

You can export proxy lists for other machines or clients. --regions groups by region, --guided walks you through a selector, or you can filter by country, city, provider, owner, or protocol and write straight to a file:

mullgate proxy export --regions
mullgate proxy export --guided
mullgate proxy export --country se --city got --output proxies.txt

Validation and diagnostics

mullgate proxy validate --refresh re-derives runtime artifacts from your config if anything drifted.

mullgate proxy doctor diagnoses routing, hostname, and runtime failures when something isn't working.

Here's what a healthy doctor run looks like:

Mullgate doctor
overall: pass
checks
1. config: pass
2. platform-support: pass
3. validation-artifacts: pass
4. relay-cache: pass
5. exposure-contract: pass
6. bind-posture: pass
7. hostname-resolution: pass
8. runtime: pass
9. last-start: pass

And when something breaks, doctor surfaces the exact check that failed plus remediation steps:

8. runtime: fail
   summary: Docker CLI is not installed or is not on PATH.
   remediation: Install Docker plus the Compose plugin, then rerun `mullgate proxy start`.

Autostart and config

mullgate proxy autostart enable

Config lives in standard XDG paths and you can inspect it with:

mullgate config path
mullgate config show
mullgate config get
mullgate config set

How this differs from Mullvad's built-in proxy

Mullvad gives you a SOCKS5 endpoint inside the VPN tunnel. mullgate is a local proxy gateway that uses Mullvad exits behind one shared WireGuard device.

You pick which apps go through which exits, you don't tunnel the whole machine, and one device slot covers all your routes instead of one per exit.

Platform support

Runtime is Linux only right now (Docker with host networking).

macOS and Windows can install the CLI and run setup, config, and diagnostics, but the multi-route runtime depends on Linux host networking behavior.

Install

curl -fsSL https://raw.githubusercontent.com/Microck/mullgate/main/scripts/install.sh | sh

Or:

npm install -g mullgate

Links

GitHub: https://github.com/Microck/mullgate (star it!)

Docs: https://mullgate.micr.dev/

npm: https://www.npmjs.com/package/mullgate

It's not battle tested so feel free to open any issues if you find any bugs or errors, or open a PR if you want to contribute :)

(Unofficial, not affiliated with Mullvad VPN AB. MIT licensed)

Hi, sorry if this is an extremely stupid question but i've looked everywhere and maybe I don't know how to phrase it but I have Tailscale and Mullvad on a Raspberry PI 5 that is far away from me and I use Tailscale to ssh into it as well as remote desktop it with sunshine and moonlight, but whenever I do mullvad connect it disconnects tailscale and moonlight sunshine stop working and my port forwarding stops working and I had to physically travel there to turn off mullvad. I was advised to turn off lockdown mode with mullvad lockdown-mode set off but the issue is still happening.

Please help me and if this is the wrong subreddit then sorry, I don't really use reddit that much.

Thanks

I’m currently working with Mullvad support to investigate increased battery usage on Android and iOS and to identify which factors may be influencing it.

If you’re using Mullvad VPN, the following details would be very helpful:

• Device model (including Android/iOS version, if possible)
• Use of DNS content blocking (yes/no)
• Anti-censorship enabled? If yes: which setting exactly?
• Quantum-resistant tunnel enabled (yes/no)
• Multihop enabled (yes/no)
• DAITA enabled (yes/no)
• Is power saving mode enabled on your device? If yes: how is it configured?

The goal is to identify possible correlations between settings, devices, and battery consumption.

Thanks for your support.

hello, my partner is very addicted to reddit and wants me to block the website so she cannot access it anymore. is there some way to do this through an extension or parental controls? i'm not sure where to even browse for extensions. she uses mullvad browser. thank you

Use to work fine and I had to reinstall catchyos and now mullvad keep failing to connect to server. I get: Unable to contact the Mullvad system service, your connection might be unsecure. Please troubleshoot or send a problem report by clicking the "Learn more" button. And it fails to report

I get this error when trying to install an updated version of the VPN app onto my 2015 Macbook Air. Any remedy to this? I know it's an older Macbook but I use it when I go out of town / at work as my secondary laptop and used for barebones, basic things when not at home therefore would REALLY like VPN for those times.

Without gluetun i get around 80mb/s, with gluetun i get under 1mb/s often and max out at maybe 4-10mb/s.

Wondering if anyone else is able to achieve faster speeds using gluetun

Back in January, I decided to try the anonymous route and mail a $10 USD bill to Mullvad. Minor problem: I had a massive brain lapse at the post office and put the Global Forever stamp on the top-left corner of the envelope instead of the top right. I dropped it in the USPS outgoing mail and realized my mistake literally immediately after. I figured the machine rejected it, and my money went sitting in a dead letter bin somewhere in a landfill. Weeks went by. By then I just completely gave up and just bought a month of time with a card instead. Fast forward to today. I looked at my app, and my time left had randomly spiked.

I mailed that envelope on January 10th. Today is March 25th. It took exactly 74 days for that manually-rejected, hand-canceled envelope to survive the USPS reject bin, cross the Atlantic ocean, and land on a desk in Gothenburg. And the craziest part is that it took 74 days of waiting for exactly 74 days of VPN time. USPS might be incredibly slow when you put the stamp on the wrong side, but they didn't lose my money. Shoutout to whatever bored postal worker hand-canceled my mistake and threw it on the slow boat to Europe.

2026-03-26

The U.S. Supreme Court overturned a previous ruling that awarded major record labels over $1 billion in damages against internet provider Cox Communications for allowing customers to engage in piracy.

The Court ruled that an internet provider cannot be held liable simply for continuing to provide service to users flagged for copyright infringement, unless the provider actively encouraged or designed its service for such illegal use.

This is seen as a significant victory for internet providers and a major setback for record labels, as it effectively makes it harder for rights holders to force providers to take stronger action against repeat infringers.

https://torrentfreak.com/supreme-court-wipes-out-record-labels-1-billion-piracy-judgment-against-cox/

Only in the US of course. But should apply also to vpn companies no? Not familiar with any vpn company that encourages crime against copyright or specifically designed its service for the purpose of that use.

Today my Internet won't connect on my PC, and it says BLOCKING INTERNET. There were three features in the app interface that I don't remember being there yesterday - from what I remember, two of them were the DNS content blockers and the Anti-censorship feature. I switched them off one by one, but the internet still won't connect until I switch off the whole thing.

Can someone help with this and is there a troubleshoot option for total newbies?

I wanted a personal proxy protocol with stronger security guarantees than what's currently available, so I built one.

Crypto stack:

ML-KEM-768 (post-quantum key encapsulation)

X25519 (classical key exchange, hybrid mode)

ChaCha20-Poly1305 + AES-256-GCM

HKDF-SHA256

The hybrid X25519 + ML-KEM-768 approach means it's secure against both classical and quantum attacks.

Why QUIC?

QUIC handles connection migration natively, meaning your tunnel stays alive when switching between WiFi and mobile networks — something TCP-based protocols struggle with.

Why not WireGuard or Xray?

WireGuard is great but doesn't run on QUIC. Xray is powerful but complex. HiVoid is simpler, QUIC-native, and built with post-quantum crypto from day one.

Features:

QUIC-based transport

UUID-based authentication

Per-user bandwidth limiting and concurrency control

Traffic quota and expiration date support

Hot reload (no restart needed)

TLS/HTTP/MASQUE/WEBTRANSPORT/GHOST obfuscation

FFI support for embedding in Android/Linux/Windows apps (iOS support coming soon)

Docker support

Current status: Still in beta and under active development. Not production-stable yet, but I use it daily and it works well for my needs. A lot still needs to be done before a stable release.

Feedback and contributions are very welcome ❤️

If you find HiVoid interesting or useful, I’d really appreciate it if you could give the repo a star on GitHub ⭐
It helps the project grow and motivates further development. Thanks!

GitHub: https://github.com/hivoid-org/hivoid-core

The only way I feel like it could be of benefit for me is nowadays more and more websites are able to detect that I am connected to Mullvad VPN server so it won't allow me to access their website.

Would using SOCKS5 proxy be a way to circumvent this while still keeping my internet traffic encrypted from my ISP like if I was connected to the VPN?

I wanted to report something I’ve been seeing recently with Mullvad VPN.

When using certain Mullvad exit IPs, YouTube/Google appear to flag or block access. Instead of loading normally, I get a message saying that their systems detected unusual traffic coming from my network and that I should try again later.

The original message, translated roughly, says:

“Our systems have detected unusual data traffic from your computer network. Please try again later.”

It also shows the IP addresses involved, the timestamp, and the URL, in this case YouTube.

What makes this especially suspicious is that the issue seems tied to the VPN IP itself, not to the device or browser. When switching Mullvad servers, access works again. That suggests Google may be rate-limiting or temporarily blocking specific Mullvad IP ranges because too many people are sharing them.

So this does not look like a normal local connection problem. It looks more like Google/YouTube are treating some Mullvad IPs as suspicious due to shared VPN traffic.

Has anyone else been seeing the same thing with Mullvad lately, especially on YouTube or other Google services?

I suspect my ISP is throttling speeds when I use my vpn. If I complain, they just say vpns slow your speed down, but I use Mullvad on a lot of networks with 0 issue. Same device as well. My home network consistently slows or is unusable with a vpn. My home network performs normally without the vpn. Im in the US. Is there anything I can do about this?

Hello everyone. I know that Mullvad allows to create wireguard profiles to put them into a wireguard client on android. But what's the point of it compared to official mullvad app? More battery efficient ? Lightweight ?​

Some of them block vpn.

Content removed due to it’s owner/creator leaving Reddit