ADBnox Guard Comprehensive User Guide & Technical Documentation

1. Clean-Room Network Architecture & Security Fundamentals

ADBnox Guard establishes a local network tunnel (TUN) using Android's native VpnService. Unlike conventional VPN services, it never sends your internet traffic to a remote third-party server. All packet analysis, domain filtering, encryption, and routing are computed directly on your device's own CPU and memory.

The core network engine is powered by Google's gVisor netstack user-space TCP/IP stack and an optimized CGO integration of the official wireguard-go implementation. This delivers full system firewall control without requiring root privileges.

• Zero Telemetry & Zero Logging: ADBnox Guard never sends analytics, DNS query logs, or user metrics to any server. Traffic records remain solely inside on-device memory and storage.
• Minimal Memory & Battery Footprint: Packed domain sets allow filtering over 630,000 rules with only ~14 MB RAM and sub-millisecond evaluation.
• Root-free Freedom: Independent rule enforcement across all Android apps without altering system partitions or kernel files.

💡 The system VPN key icon appears in the Android status bar to indicate that local on-device filtering is active, not that your traffic is leaving your phone.

2. Installation, Quick Start & System Permissions

When you launch the app, simply tap the main shield button on the Home screen to activate protection. On first launch, Android prompts for the standard local VPN permission.

To ensure uninterrupted protection in the background:

• Quick Settings Tile: Swipe down your notification shade and add the 'ADBnox Guard' tile to toggle protection on or off instantly without opening the app.
• Start on Boot: Enable 'Start on boot' under Settings › Startup so protection resumes automatically when your phone powers on.
• Battery Optimization Exemption: Set ADBnox Guard to 'Unrestricted' in Android Settings › Apps › Battery to prevent aggressive OEM background killers from stopping the service.

💡 The persistent notification provides live download/upload speeds and counters of blocked DNS queries.

3. Language Support, AMOLED Pure Black & Appearance

ADBnox Guard is designed for visual clarity and energy efficiency across all devices. Personalize your preferences under Settings › Appearance:

• Intelligent Automatic Language: By default, the app inspects your device locale. On Turkish devices, it opens directly in Turkish; on all other devices worldwide, it opens in universal English.
• Manual Language Override: Easily lock the interface to Turkish or English regardless of system locale.
• Light and Dark Themes: Follow system dark mode automatically, or lock the display to Always Light or Always Dark.
• AMOLED Pure Black (#000000): In dark mode, enabling AMOLED black completely turns off OLED display pixels for maximum power savings, while elevated cards maintain subtle contrast for effortless readability.

💡 AMOLED preference is remembered even in light mode and automatically applies whenever the theme switches to dark.

4. DNS Filtering, Encrypted DNS (DoH/DoT) & Profiles

Guard intercepts domain lookups at the OS layer, terminating ad, tracker, telemetry, phishing, and malware domains before connections can start.

Four flexible protection profiles are available:

• Fast Path: Zero extra latency; enables only critical security feeds, ideal for gaming and latency-sensitive apps.
• Standard Profile: Balanced daily ad and telemetry blocking for smooth web and social media browsing.
• Strict Profile: Combines HaGeZi Pro and TIF mini threat intelligence (630,000+ rules) for aggressive tracker blocking.
• Custom Profile: Allows configuring individual rule exemptions and subscribing to custom HTTPS hosts/filter lists.
• Encrypted DNS (DoH & DoT): Full DNS-over-HTTPS and DNS-over-TLS support prevents ISP eavesdropping. Guard never silently falls back to plain unencrypted DNS.

💡 If an app or website breaks, tap the domain in the Activity log to allow it for 1 hour, allow it permanently, allow it only for that specific app, or disable the parent blocklist.

5. Per-App Firewall & Network Access Controls

The Apps tab lists all installed applications on your phone, granting granular control over each application's connectivity.

• Wi-Fi & Mobile Data Toggles: Allow an app on Wi-Fi while blocking mobile data to prevent background bandwidth drain.
• Total Network Isolation: Completely block offline utilities or single-player games from accessing the internet.
• Direct Bypass: Exclude banking or sensitive apps from VPN routing when strict remote policies require untouched routing.

6. WireGuard Multi-Tunnel & Smart Route

ADBnox Guard includes an in-engine WireGuard client, eliminating the need to run multiple conflicting VPN apps.

• Up to 8 Concurrent Tunnels: Store and manage multiple independent WireGuard configurations.
• Seamless Import: Scan QR codes with the camera, pick QR images from your gallery, or import standard .conf files.
• On-Device Key Generation: Generate cryptographically secure Curve25519 keypairs directly on your device.
• Smart Route: Continually tests latency and packet loss between your direct internet connection and WireGuard tunnel, dynamically selecting the highest-performing route with hysteresis.
• Per-App Tunnel Assignment: Route selected apps through specific WireGuard tunnels while keeping other apps on your direct connection.
• Local Network Passthrough: Continue using local Wi-Fi printers, Chromecasts, and local file servers without disconnection.

💡 Check the Network Doctor screen to compare real-time ping and throughput between Direct and WireGuard routes.

7. Network Doctor, Live Flows & PCAP Packet Inspection

Gain complete visibility into background socket activity and diagnose connectivity issues in real time.

• Live Flows: Active TCP and UDP sockets with remote IPs, ports, byte counters, and connection durations.
• RIPEstat IP Geo Location: Identify remote server country, ISP, and Autonomous System Number (ASN) with offline map visualization.
• PCAP Packet Capture: Bounded on-device capture of TUN packets in standard PCAP format for export into Wireshark.

8. Privacy Guarantee, Permissions & FAQ

ADBnox Guard treats privacy as a fundamental right. It has no accounts, no ads, and no tracking.

• Open-Source Integrity: Built with clean-room modular architecture and verifiable implementations.
• VpnService Permission: Required strictly for local on-device packet filtering; no external traffic rerouting occurs.
• Support & Documentation: Visit our official documentation portal at adbnox.com/guard for updates and technical notes.