Hardware-Level Leak Shield: WebRTC & UDP Leak Protection
Table of Contents
When browsing websites using HTTP proxies or TCP-only SOCKS5 proxies, modern web browsers can attempt to establish WebRTC video/audio connections over UDP. Because the proxy does not handle UDP, the browser may send discovery packets directly through your physical home/office internet, leaking your true public IP address.
WifiSocks eliminates this risk directly at the router with the WebRTC Leak Shield and Block UDP Leakage features under IETF RFC 8828.
1. How WebRTC IP Leaks Happen
flowchart TD
subgraph Without Leak Shield
A1["Browser on Client Device"] -->|"Regular Web Traffic"| B1["Proxy Tunnel (Proxy IP)"]
A1 -->|"WebRTC STUN Packets"| C1["Direct Home Internet (Real IP Leaked!)"]
end
subgraph With WifiSocks Leak Shield
A2["Browser on Client Device"] --> Gateway["WifiSocks Router Leak Shield (RFC 8828)"]
Gateway -->|"Enforces Gateway Policy"| ProxyOut["Secure Proxy Tunnel (No Leaks)"]
end
2. Setting Up the WebRTC Leak Shield
- Open the router dashboard (
http://192.168.105.1). - Go to the Router Configuration tab.
- Locate the card titled WebRTC Leak Shield.
- Choose between the two protection options:
Option 1: Drop WebRTC STUN traffic when proxy lacks UDP (Recommended)
- What it does: The router automatically blocks any background WebRTC UDP packets that try to bypass your proxy.
- Result: Browsers fall back to safe TCP channels through the proxy. Your real IP is never exposed to website scripts.
Option 2: Synchronize WebRTC routing metadata with Proxy
- What it does: The router intercepts WebRTC requests and responds using your assigned proxy IP address.
- Result: WebRTC applications see the proxy IP as their local address, maintaining full compatibility with video streaming tools while protecting your real location.
- Click Update at the bottom to apply your choice.
3. Blocking UDP Leakage
In the same Router Configuration tab, locate the card titled Block UDP Leakage:
- Setting: Turn on Block UDP protocol on proxies.
- When to use: If you are using HTTP proxies or basic SOCKS5 proxies that experience video buffering or slow loading on modern HTTP/3 websites, turn this setting ON.
- Result: Forces web browsers to use standard, stable TCP connections through your proxy, eliminating connection stalls and UDP leak risks.
4. How to Test Your Connection
To verify that your browser is not leaking your real IP:
- Connect your device to the WifiSocks router.
- Open your browser and visit:
- Check the Public IP and WebRTC IP sections.
- Verify that only your proxy IP appears (or that WebRTC reports no external IP detected). Your real ISP IP should never be visible.
