Connection modes

Windows Proxy

Starts a local proxy and configures the Windows system proxy. Applications that ignore the system proxy may connect directly. Process-based app rules do not apply in this mode.

Windows TUN

Uses a virtual network interface. Start Qmesh as administrator or use Restart as administrator in the TUN warning, then approve Windows UAC. Traffic still follows routing rules: direct exceptions are possible.

Android

The app uses the system VPN service. Approve its system permission prompt. Another VPN or a device policy can prevent startup.

Internet availability

After connection, the app makes up to three attempts to reach control HTTPS endpoints, stopping after success. It does not keep probing every minute. Use Check again to retry manually.

A successful check means at least one control endpoint replied through the server connection. It does not guarantee that every application uses the VPN or that no leaks are possible. An unconfirmed result can also mean a blocked endpoint, a DNS problem or a captive Wi-Fi portal.

Save routing changes and reconnect to apply them. On Windows, minimizing to the tray keeps Qmesh running; closing the window is not necessarily disconnecting. Configure the close action in settings.

Traffic blocking without a VPN is separate: open Settings → Kill Switch. Administrator privileges are required on Windows; Android manages blocking through system VPN settings. See Kill Switch.