Skip to content
Snippets Groups Projects
Open
Milestone expires on Apr 22, 2025

    • 2025.04 LEAP VPN Release

    Overview

    Production Readiness Create Standard Operating Procedure (SOP)for admins to detail a clear process for staging, testing, releasing, and updating production environments.Improve monitoring and alerts

    Circumvention Tech: Our Hopping PT will integrated into the platform and provided by private providers. Monitoring, evaluation, and improvoments to deployed CTs will continue.

    Desktop client Work: Release Bitmask Multi-Provider client with a production ready autoupdater and beta support for using an invite code during the onboarding process to connect to private providers. (and will also include support for QUIC)

    Android Work: Focus will be bug fixing and addressing raised issues of the security audit. In order to ensure stable APIv5 handling we will add unit tests. For geolocation we will implement the missing client interation to determine the clients IP and country code.

    Platform Work: The primary focus will be deployment readiness and the implementation of the Hopping PT. Readiness will include implementing readiness test, fixing Integration tests on lilypad, menshen, obfsvpn and deploying, testing and standardising the gateway selection code.

    Tunnel-telemetry Improvements Create ability to submit metric to ooni

    Public Faces We will create blog posts, semi-public reports, launch bitmask.net and update app stores.

    CIRCUMVENTION TECH

    Development

    Complete all CTs

    Documentation

    • update docs.leap.se for hopping obfsvpn#74
    • update docs.leap.se for quic (how to run each bridge) obfsvpn#73

    INVITE SYSTEM

    The Invite system using APIv5, The Introdcuer, and bucket system is working.

    • Android: APIv5 unit testing bitmask_android#9184
    • Desktop: APIv5 cert parsing needs to be updated: bitmask-vpn#916
    • Desktop: APIv5 obsfucation support
    • Add documentation for invite system orchestration (4hrs) FIX

    DESKTOP MULTI-PROVIDER

    LOAD BALANCING & OPTIMIZATION

    Working to ease congestion of gateways is taking the following form:

    GEO-LOCATION

    Sending the country code in apiv5 (bitmask-core) allows us to better distribute the load of the gateways. Currently the country code is fetched, but not yet used, as the backend part was missing in the past.

    MENSHEN AGENT REPORTS CPU LOAD

    We will replace menshen_agent (https://0xacab.org/leap/menshen_agent) with menshen-agent (https://0xacab.org/leap/menshen-agent), remove menshen_agent from openvpn container and control plane from obfspvn container.

    OPENVPN OPTIMIZATION

    GENERAL IMPROVEMENTS

    DESKTOP

    ANDROID BUG FIXES

    PUBLIC FACE IMPROVEMENTS

    TUNNEL-TELEMETRY IMPROVEMENTS