Connection management

What the DNS build controls

Activity history shows domains and blocking decisions. For an identified app, policies provide normal rule filtering, allowed DNS or blocked DNS. Labels can vary with the app language.

Block-all-DNS does not mean blocking every network connection. Existing connections, cached addresses and direct IP access are not guaranteed to stop. Allowing DNS also does not guarantee a successful connection to a service.

History accuracy

In normal mode Android does not always allow reliable app identification. Unknown activity remains unknown instead of being assigned to an arbitrary app. The DNS build offers single-app inspection for a narrower observation scope.

Counters measure domain events, not bytes, real speed or verified proxy health.

Experimental routing

In Preview, Direct/Proxy transport policies apply to configured participants and are separate from DNS rules. They do not promise routing for every app. See proxies and limitations.