FAQ
This section details commonly asked questions and the answers to those questions.
Is WG Tunnel supported on AndroidTV?
Yes, the app is generally supported on AndroidTV, however, it was never designed for AndroidTV. This can result in a somewhat clunky user experience.
How do I add a tunnel?
To add a tunnel, you need either a WireGuard server or a VPN Provider that allows you to export tunnel configs for third party apps. This will commonly be in the form of a .conf file or a QR code.
Does WG Tunnel work with Android Auto?
Yes, WG Tunnel works with Android Auto, but this requires some configuration. You need to disable tunneling for the Android Auto app by leveraging the app's split tunneling feature. For more information on how to do this, see the Split Tunneling section. This will effectively disable Android Auto app traffic from passing through the tunnel, while still tunneling the app traffic for all of your other apps.
Why are some features not available for AndroidTV?
Unfortunately, AndroidTV does not have all the same API and security features as Android mobile. For this reason, some features are disabled for AndroidTV.
Does WG Tunnel support Amazon's FireTV?
There is an older version of the app on the Amazon App Store, but it is no longer supported. It became clear that supporting the FireTV was going to be impossible for three main reasons:
FireTV's broken file selector API (The only way around to this is to reinvent the wheel and build a custom file selector UI from scratch).
No way to emulate their devices for testing.
Poorly implemented developer portal with almost no support, a painful review process, and zero CD integration for apps.
That being said, the app can still be side-loaded on a FireTV. The app will likely work. As for broken file selector, I have heard reports that an app called Android TV ADB Maus allows for navigation of the file selector screen and import configs.
Why does WG Tunnel require location permissions for auto-tunneling?
Android has deemed Wi-Fi SSIDs as precise location information. In order for WG Tunnel to read the SSID from the system, it must have these permissions.
How do I exclude my local network from the tunnel so I can access my local services and devices?
There is a handy tool that exists for properly generating the allowedIps configuration here.
Once you add the address block(s) to be ingored by the tunnel, generate the allowedIps list and paste the output to the allowIps field on your tunnel config.