Closed
Milestone expired on Apr 22, 2025

2025.04 LEAP VPN Release

Overview

Production Readiness Create Standard Operating Procedure (SOP)for admins to detail a clear process for staging, testing, releasing, and updating production environments.Improve monitoring and alerts

Circumvention Tech: Our Hopping PT will integrated into the platform and provided by private providers. Monitoring, evaluation, and improvoments to deployed CTs will continue.

Desktop client Work: Release Bitmask Multi-Provider client with a production ready autoupdater and beta support for using an invite code during the onboarding process to connect to private providers. (and will also include support for QUIC)

Android Work: Focus will be bug fixing and addressing raised issues of the security audit. In order to ensure stable APIv5 handling we will add unit tests. For geolocation we will implement the missing client interation to determine the clients IP and country code.

Platform Work: The primary focus will be deployment readiness and the implementation of the Hopping PT. Readiness will include implementing readiness test, fixing Integration tests on lilypad, menshen, obfsvpn and deploying, testing and standardising the gateway selection code.

Tunnel-telemetry Improvements Create ability to submit metric to ooni

Public Faces We will create blog posts, semi-public reports, launch bitmask.net and update app stores.

CIRCUMVENTION TECH

Development

Complete all CTs

Documentation

INVITE SYSTEM

The Invite system using APIv5, The Introdcuer, and bucket system is working.

  • Android: APIv5 unit testing bitmask_android#9184
  • Desktop: APIv5 cert parsing needs to be updated: bitmask-vpn#916
  • Desktop: APIv5 obsfucation support
  • Add documentation for invite system orchestration (4hrs) FIX

DESKTOP MULTI-PROVIDER

LOAD BALANCING & OPTIMIZATION

Working to ease congestion of gateways is taking the following form:

GEO-LOCATION

Sending the country code in apiv5 (bitmask-core) allows us to better distribute the load of the gateways. Currently the country code is fetched, but not yet used, as the backend part was missing in the past.

MENSHEN AGENT REPORTS CPU LOAD

We will replace menshen_agent (https://0xacab.org/leap/menshen_agent) with menshen-agent (https://0xacab.org/leap/menshen-agent), remove menshen_agent from openvpn container and control plane from obfspvn container.

OPENVPN OPTIMIZATION

GENERAL IMPROVEMENTS

ANDROID BUG FIXES

PUBLIC FACE IMPROVEMENTS

TUNNEL-TELEMETRY IMPROVEMENTS