Get Tunna

Tunnel On-Demand

Configure Tunna On-Demand and trusted networks so eligible Proxy domain rules can wake the tunnel only where they should.

352 words 2 min
Settings Tunnel, On-Demand, Trusted Networks

Use this page after manual start works. On-Demand and Trusted Networks are useful automation controls, but they should be added after the node and route plan are already predictable.

Use Trusted Networks when a place should stay direct

Trusted Networks appears inside Tunnel settings on iPhone and iPad. The Settings row summary is reserved for non-default Connect and Disconnect choices, so open Tunnel to review trusted places.

  1. 1
    Open Tunnel settings

    Use the Tunnel page when you want a known Wi-Fi or cellular network to pause automatic startup.

  2. 2
    Choose Trusted Networks

    The sheet shows saved trusted entries and the current available network. Add the available Wi-Fi or cellular entry only when this place should stay direct.

  3. 3
    Save the list

    Save commits the sheet changes. Cancel leaves the trusted list unchanged. Delete entries you no longer trust before saving.

  4. 4
    Let it pause auto-connect

    Trusted networks are checked before automatic startup. When you return to one, Tunna disconnects and ignores Always On or On-Demand until the network changes.

Practical On-Demand uses

Wake for known work domains

Use On-Demand when specific unpaused Proxy domain rules should let the system start Tunna automatically.

Good fit The route plan contains ordinary host, base, full-domain, or non-RegEx GeoSite domain material for the traffic you want to wake the tunnel.

Not ideal The plan depends on Default Route, RegEx, keywords, ports, IP ranges, direct rules, or block rules.

Avoid loops during diagnosis

Set Connect back to Never when On-Demand restarts the tunnel while you are testing.

Good fit The tunnel fails and starts again on mobile networks.

Not ideal Manual start with one known node has not been tested yet.

Pause automation at trusted places

Trusted Networks are checked before automatic startup, so a trusted place can keep Always On or On-Demand quiet until the network changes.

Good fit Home, office, or cellular service should stay direct.

Not ideal You need the tunnel active on that network.