<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Proton-Vpn on homelab</title>
    <link>https://homelab.nbkelley.com/tags/proton-vpn/</link>
    <description>Recent content in Proton-Vpn on homelab</description>
    <generator>Hugo</generator>
    <language>en</language>
    <lastBuildDate>Fri, 01 May 2026 00:00:00 +0000</lastBuildDate>
    <atom:link href="https://homelab.nbkelley.com/tags/proton-vpn/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Mobile Hotspot &amp; Proton VPN Troubleshooting</title>
      <link>https://homelab.nbkelley.com/docs/networking/mobile-hotspot-vpn/</link>
      <pubDate>Fri, 01 May 2026 00:00:00 +0000</pubDate>
      <guid>https://homelab.nbkelley.com/docs/networking/mobile-hotspot-vpn/</guid>
      <description>&lt;h1 id=&#34;mobile-hotspot--proton-vpn-troubleshooting&#34;&gt;Mobile Hotspot &amp;amp; Proton VPN Troubleshooting&lt;a class=&#34;anchor&#34; href=&#34;#mobile-hotspot--proton-vpn-troubleshooting&#34;&gt;#&lt;/a&gt;&lt;/h1&gt;&#xA;&lt;h2 id=&#34;what-was-established&#34;&gt;What Was Established&lt;a class=&#34;anchor&#34; href=&#34;#what-was-established&#34;&gt;#&lt;/a&gt;&lt;/h2&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;A PC connected to a mobile hotspot will always display a local/private IP address (e.g., &lt;code&gt;192.168.43.x&lt;/code&gt;) to communicate with the phone acting as the gateway/router.&lt;/li&gt;&#xA;&lt;li&gt;Enabling Proton VPN on the mobile device does not automatically extend the encrypted tunnel to connected hotspot devices by default. This is due to app-level vs. system-level routing, separate network interfaces, and carrier/OS restrictions.&lt;/li&gt;&#xA;&lt;li&gt;Public IP verification and DNS leak tests are required to confirm whether hotspot traffic is actually being routed through the VPN tunnel.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;h2 id=&#34;key-decisions&#34;&gt;Key Decisions&lt;a class=&#34;anchor&#34; href=&#34;#key-decisions&#34;&gt;#&lt;/a&gt;&lt;/h2&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Local IP vs Public IP&lt;/strong&gt;: Local IPs are expected and required for LAN communication; privacy and security are determined by the public IP and DNS resolution, not the local address.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;VPN Extension Methods&lt;/strong&gt;:&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Enable &amp;ldquo;Always-on VPN&amp;rdquo; and &amp;ldquo;VPN passthrough&amp;rdquo; in the phone&amp;rsquo;s hotspot/tethering settings.&lt;/li&gt;&#xA;&lt;li&gt;Install Proton VPN directly on the PC for guaranteed tunneling, kill switch functionality, and split tunneling control.&lt;/li&gt;&#xA;&lt;li&gt;Use USB tethering instead of Wi-Fi hotspot if Wi-Fi passthrough fails or is blocked by the carrier.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Order of Operations&lt;/strong&gt;: Disabling and re-enabling the hotspot &lt;em&gt;after&lt;/em&gt; establishing the VPN connection can force the routing table to update and apply the tunnel correctly.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;h2 id=&#34;current-configuration&#34;&gt;Current Configuration&lt;a class=&#34;anchor&#34; href=&#34;#current-configuration&#34;&gt;#&lt;/a&gt;&lt;/h2&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;N/A (General networking troubleshooting pattern applicable to remote management of homelab infrastructure like Isengard (192.168.1.69) or Legolas (192.168.1.45) via mobile data).&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;h2 id=&#34;historical-notes&#34;&gt;Historical Notes&lt;a class=&#34;anchor&#34; href=&#34;#historical-notes&#34;&gt;#&lt;/a&gt;&lt;/h2&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Conversation dated 2025-12-13.&lt;/li&gt;&#xA;&lt;li&gt;Proton VPN mobile app behavior varies significantly by OS (iOS/Android) and mobile carrier; some devices natively block VPN over hotspot.&lt;/li&gt;&#xA;&lt;li&gt;This pattern is relevant for remote homelab administration or travel scenarios where mobile data serves as the primary internet source.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;h2 id=&#34;open-questions&#34;&gt;Open Questions&lt;a class=&#34;anchor&#34; href=&#34;#open-questions&#34;&gt;#&lt;/a&gt;&lt;/h2&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Does the specific mobile carrier or OS version in use support native VPN passthrough for hotspots without third-party apps?&lt;/li&gt;&#xA;&lt;li&gt;Are there specific Proton VPN mobile app settings that consistently bypass carrier restrictions for tethering?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;h2 id=&#34;related-pages&#34;&gt;Related Pages&lt;a class=&#34;anchor&#34; href=&#34;#related-pages&#34;&gt;#&lt;/a&gt;&lt;/h2&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&#34;https://homelab.nbkelley.com/docs/networking/unifi-express-vpn/&#34;&gt;UniFi Express VPN &amp;amp; Network Management&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&#34;https://homelab.nbkelley.com/docs/networking/proxy-management/&#34;&gt;Proxy Management &amp;amp; Cloudflare Tunnels&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&#34;https://homelab.nbkelley.com/docs/infrastructure/network/&#34;&gt;Network Infrastructure &amp;amp; VLANs&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;h2 id=&#34;sources&#34;&gt;Sources&lt;a class=&#34;anchor&#34; href=&#34;#sources&#34;&gt;#&lt;/a&gt;&lt;/h2&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;ingested/chats/130-PC Local IP While Hotspot with VPN.md&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;DeepSeek conversation: PC Local IP While Hotspot with VPN (2025-12-13)&lt;/li&gt;&#xA;&lt;/ul&gt;</description>
    </item>
  </channel>
</rss>
