[Bug]: zScaler is not detected

[luca-rhk]

Version

1.7.0

Installation Method

Homebrew (brew install --cask vpn-bypass)

VPN Type

Zscaler

Bug Description

zScaler is running (Private Access + Internet Security + Digital Experience modules enabled). However, VPN Bypass does not detect it. If i restart zScaler manually, it is still not detected.

I can also see the zScaler Processes running:

19394   1,6  0,4 440331280 104080   ??  S     9:07     0:53.56 /Applications/Zscaler/Zscaler.app/Contents/MacOS/Zscaler
root             25719   0,2  0,2 441231632  54432   ??  Ss   12:01     0:29.46 /Applications/Zscaler/Zscaler.app/Contents/PlugIns/ZscalerTunnel
root             19641   0,0  0,2 435408032  49520   ??  Ss    9:07     1:47.04 /Library/Application Support/Zscaler/UPM/UPMServiceController
root               775   0,0  0,1 435400560  19360   ??  Ss   11Feb.26  34:26.62 /Applications/Zscaler/Zscaler.app/Contents/PlugIns/ZscalerService

Expected Behavior

zScaler is detected and routes are being applied.

Steps to Reproduce

1. Have zScaler enabled and running
2. Obtain IP (100.64.X.X)
3. VPN Bypass notices the utun Interface, but does not detect zScaler

Logs

[2026-02-24 12:12:13] [INFO] VPN candidates (none matched): utun7:100.64.0.1 valid=false
[2026-02-24 12:11:43] [INFO] VPN candidates (none matched): utun7:100.64.0.1 valid=false
[2026-02-24 12:11:13] [INFO] VPN candidates (none matched): utun7:100.64.0.1 valid=false
[2026-02-24 12:10:43] [INFO] VPN candidates (none matched): utun7:100.64.0.1 valid=false
[2026-02-24 12:10:13] [INFO] VPN candidates (none matched): utun7:100.64.0.1 valid=false
[2026-02-24 12:09:43] [INFO] VPN candidates (none matched): utun7:100.64.0.1 valid=false
[2026-02-24 12:09:13] [INFO] VPN candidates (none matched): utun7:100.64.0.1 valid=false
[2026-02-24 12:08:43] [INFO] VPN candidates (none matched): utun7:100.64.0.1 valid=false
[2026-02-24 12:08:13] [INFO] VPN candidates (none matched): utun7:100.64.0.1 valid=false
[2026-02-24 12:07:43] [INFO] VPN candidates (none matched): utun7:100.64.0.1 valid=false
[2026-02-24 12:07:13] [INFO] VPN candidates (none matched): utun7:100.64.0.1 valid=false
[2026-02-24 12:06:45] [INFO] VPN candidates (none matched): utun7:100.64.0.1 valid=false
[2026-02-24 12:06:43] [INFO] VPN candidates (none matched): utun7:100.64.0.1 valid=false
[2026-02-24 12:06:43] [INFO] VPN candidates (none matched): utun7:100.64.0.1 valid=false

...

[2026-02-24 12:02:13] [INFO] Auto DNS refresh enabled: every 60 minutes
[2026-02-24 12:02:13] [INFO] No VPN connection detected
[2026-02-24 12:02:13] [INFO] Helper installed: true
[2026-02-24 12:02:13] [INFO] Gateway detected: 192.168.X.1
[2026-02-24 12:02:13] [INFO] VPN detection result: connected=false, interface=none
[2026-02-24 12:02:13] [INFO] VPN candidates (none matched): utun7:100.64.0.1 valid=false
[2026-02-24 12:02:12] [INFO] Network change detected: connected via Other, WiFi
[2026-02-24 12:02:08] [INFO] 🔍 Detected non-VPN DNS: 192.168.X.1
[2026-02-24 12:02:08] [INFO] Starting VPN detection and route application...
[2026-02-24 12:02:08] [INFO] Config loaded

Environment

• MacOS 26.3
• Helper Installed: Yes
• Apple Silicon

Checklist

• I have searched existing issues to ensure this isn't a duplicate
• I have tried restarting the app

[GeiserX]

Fixed in v1.7.1 (#8).

Root cause: Zscaler uses 100.64.x.x IPs which fall in the CGNAT range (100.64.0.0/10). This range was treated as Tailscale-only -- the code called isTailscaleExitNodeActive() which returned false, rejecting your interface as valid=false.

Fix: The IP validation now uses the process-detection result to distinguish Zscaler from Tailscale in the shared CGNAT range. Since Zscaler processes are already detected correctly (Zscaler, ZscalerTunnel, etc.), the CGNAT IP is now accepted when Zscaler is running.

Update via:

cd /opt/homebrew/Library/Taps/geiserx/homebrew-vpn-bypass && git pull
brew reinstall --cask vpn-bypass