Investigating WebRTC and IPv6 bypass
HTTP proxies, UDP and IPv6 can use different paths; compare protocols before interpreting differences.
Updated · Egress Observatory
Keep three paths separate
HTTP egress is the connection address seen by a website. STUN candidates describe WebRTC-visible UDP paths. IPv6 is another address family. A web proxy alone does not imply coverage of the others.
Private addresses, mDNS names and absent candidates do not establish public egress. Browser privacy policies can limit visibility, which must remain explicitly unobservable.
Retest one variable at a time
Record HTTP, IPv6 and STUN while connected. Change one UDP-forwarding, IPv6 or TUN setting, then start a fresh run. Do not mix old cached results into that run.
For disconnect protection, use the guided drill and manually disconnect and restore. Browser samples have gaps and cannot prove that no system-wide traffic escaped between them.