IP Tests — Check Your Connection, DNS, IPv6 Leak and More

Comprehensive IP & Privacy Leak Diagnostics

Automated in-browser test checking for WebRTC candidate exposure, DNS query leaks, and IPv6 bypass anomalies.

WebRTC Leak Test Testing...

Checks whether browser peer-to-peer interfaces expose your underlying ISP address.

Analyzing ICE Candidates...

IPv6 Connectivity Testing...

Verifies whether native IPv6 is supported or if unrouted IPv6 leaks around your tunnel.

Testing Dual-Stack Reachability...

DNS Leak Guard Safe

Confirms that DNS lookups are routed through your encrypted tunnel.

Queries routed via Tunnel Gateway

Round-Trip Latency Measuring...

Measures round-trip time from your browser to the closest public CDN edge.

Pinging CDN Edge...

Zero-Logging Privacy Guarantee: This IP diagnostic utility operates strictly client-side inside your browser. We never log, persist, or correlate your IP queries or network fingerprints with advertising profiles. Read our full Privacy Policy.

The Critical Importance of Network & Privacy Leak Auditing

Direct Answer: How do you know if your proxy or VPN is truly protecting your connection?

Connecting to an encrypted proxy or VPN application is not sufficient on its own. If your operating system continues routing DNS lookups to local ISP servers, or if your browser reveals your true public IP through WebRTC STUN requests, your digital identity remains compromised. Running automated leak diagnostics verifies that all network interfaces are securely encapsulated.

Modern web browsers are sophisticated execution environments with direct access to hardware network interfaces. Advanced web APIs—originally built for low-latency peer-to-peer communications like video conferencing—frequently bypass traditional HTTP and SOCKS5 proxy settings.

At WhatIsMyIP Wiki, our diagnostic engine evaluates your active connection across three vital attack surfaces: WebRTC Candidate Leakage, IPv6 Direct Bypass, and DNS Resolver Consistency.

1. The Technical Architecture of Connection Leaks

WebRTC STUN Leak (RFC 5389) [wɛb-ɑːr-tiː-siː liːk] 术语定义

Session Traversal Utilities for NAT (STUN) allows endpoints behind routers to discover their public IP and mapped NAT port. When a web script calls RTCPeerConnection.createOffer(), the browser queries external STUN servers across all physical network adapters simultaneously, often bypassing application-layer proxy settings.

DNS Query Hijack & Leakage [diː-ɛn-ɛs liːk] 术语定义

When an operating system fails to bind DNS resolution to the virtual tunnel TAP/TUN adapter, Windows and macOS default to querying the local residential router DNS forwarder, exposing visited domain names to the local ISP.

Vulnerability: IPv6 Dual-Stack Leak

Many proxy providers and custom client configurations exclusively tunnel IPv4 packets. If your home broadband connection supports native IPv6, modern browsers will prefer IPv6 (via the Happy Eyeballs algorithm RFC 8305), completely bypassing the IPv4 proxy and communicating naked over your ISP IPv6 subnet.

Vulnerability: Transparent Proxy Headers

Low-quality public proxies often append headers such as X-Forwarded-For or Via to outgoing HTTP requests, explicitly transmitting your real IP address to destination servers while only shielding downstream packets.

2. Decision Tree for Remediating Network Leaks

Diagnostic & Selection Decision Tree

Hierarchy: Level 3+

[Connection & IP Strategy Root Decision Node]
  │
  ├── 1. Primary Objective
  │     ├── A. Need to Inspect / Verify Current Connection
  │     │     ├── ① Check Public IPv4/IPv6 Address ──> Use What Is My IP (Home /)
  │     │     ├── ② Audit DNS / WebRTC / IPv6 Leaks ──> Run IP Tests (/ip-tests/)
  │     │     └── ③ Inspect Remote Server or Sender ──> Use IP Lookup (/ip-lookup/)
  │     │
  │     ├── B. Need to Mask or Rotate Outbound IP
  │     │     ├── ① Temporary Local Reset ──> Router Restart or DHCP Renew (Free)
  │     │     ├── ② High-Anonymity Browsing ──> Tor Browser (Free, Slower)
  │     │     └── ③ High-Speed Persistent Tunnel ──> Commercial Proxy / VPN
  │     │
  │     └── C. Developer & Scraping Requirements
  │           ├── ① High Concurrency / Web Scraping ──> Residential Rotating Proxies
  │           └── ② Low-Latency Dedicated Tunnel ──> Datacenter / Private VLESS Exit
  │
  ├── 2. Protocol Selection
  │     ├── ① Modern Anti-Censorship ──> VLESS + Reality / Trojan
  │     ├── ② Universal Cross-Platform Tooling ──> SOCKS5 / HTTP
  │     └── ③ Extreme High-Jitter Networks ──> Hysteria2 (UDP-based)
  │
  └── 3. Action Step
        ├── Commercial Proxy Plans ──> Check /proxy-plans/ for Verified Pricing
        └── Network Recovery Guide ──> Check /fixes/ for Connection Diagnostics

3. Comparison of Connection Testing & Verification Standards

Solution / Type	Public IP Exposure	Relative Cost	Throughput Impact	Tunnel Encryption	Setup Difficulty	Primary Use Case	Privacy Rating
Residential Proxy	Residential ISP Pool	$$$ (Per GB)	100-300 Mbps	TLS / SOCKS5	Moderate (API/Config)	Market Research & Scraping	High
Datacenter Proxy	Data Center ASN	$ (Low Monthly)	500-1000 Mbps	HTTP / SOCKS5	Low	High-Concurrency Tasks	Moderate
Standard VPN	Shared VPN Server IP	$$-$$$ (Monthly)	200-500 Mbps	WireGuard / OpenVPN	One-Click App	General Privacy & Browsing	High
Tor Network	Dynamic Onion Exit Node	Free (Donation)	5-25 Mbps (Slow)	Triple-Layer Onion	Low (Tor Browser)	Anonymous Publishing	Maximum
Mobile Hotspot	Cellular Carrier CGNAT	Data Plan Cost	50-150 Mbps	None (ISP Layer)	None	Quick IP Refresh on Mobile	Low-Moderate
Router Power Cycle	ISP Dynamic Lease	Free	Home Baseline	None	Physical Button	Basic Troubleshoot	Baseline
Cloud VPS Proxy	Self-Hosted Cloud IP	$$ ($3.50-$6/mo)	1 Gbps Port	Custom SSH/VLESS	High (Sysadmin)	Developer Dedicated Tunnel	High
Commercial Dedicated IP	Static Dedicated Whitelist	$$$$ (High Monthly)	300-800 Mbps	Enterprise Tunnel	Moderate	Remote Office Security	Moderate

4. Step-by-Step Remediation of Detected Privacy Leaks

Resolving WebRTC Candidate Leaks

If our diagnostic tool displays an orange warning indicating exposed WebRTC candidates, switch your proxy client (e.g., Clash Verge Rev) to TUN Virtual Adapter Mode. TUN mode operates at the system kernel network layer (Layer 3), intercepting all UDP packets generated by WebRTC before they reach physical Wi-Fi or Ethernet interfaces.

Eliminating DNS Leaks via Encrypted Resolvers

Configure your client to enforce strict DNS proxying (such as DoH/DoT over 1.1.1.1 or 8.8.8.8) or enable fake-ip / redir-host routing. In Windows network properties, manually specify a remote DNS server rather than relying on automatic DHCP router assignment.

Disabling or Tunneling IPv6 Traffic

If your proxy provider lacks native IPv6 support, either configure your operating system network adapter to uncheck "Internet Protocol Version 6 (TCP/IPv6)" or ensure your client profile specifies ipv6: false to prevent dual-stack leakage.

Frequently Asked Questions (FAQ)

Comprehensive answers to 15 common inquiries regarding connectivity, protocols, and privacy.

Q1 What is an IP leak test?

An IP leak test is an automated diagnostic suite that checks whether your true underlying residential or cellular IP address is exposed to remote servers despite having an active proxy, VPN, or encrypted tunnel.

Q2 What is a WebRTC leak and how does it compromise anonymity?

WebRTC is an open browser standard for peer-to-peer real-time audio and video communications. When initiating calls, browser STUN discovery queries all local network interfaces directly, frequently exposing real external IPs outside a standard proxy tunnel.

Q3 How does a DNS leak occur when using a VPN or proxy?

A DNS leak occurs when your operating system routes domain name resolution requests to your default local ISP DNS servers rather than through the encrypted tunnel interface, revealing the full list of domains you visit.

Q4 What is an IPv6 leak?

Many legacy proxy tools and VPN servers only route IPv4 packets. When accessing modern dual-stack websites, your browser may establish an unencrypted direct IPv6 connection, exposing your native cellular or ISP IPv6 address.

Q5 How can I fix a detected WebRTC leak in Google Chrome or Edge?

In Chromium-based browsers, install a reputable privacy extension (such as uBlock Origin or WebRTC Leak Shield) and enable the option to prevent WebRTC from broadcasting non-proxied UDP candidates, or route via TUN virtual adapter.

Q6 How can I disable WebRTC entirely in Mozilla Firefox?

Type about:config into the Firefox address bar, search for media.peerconnection.enabled, and toggle the boolean value to false to disable all WebRTC communications.

Q7 What is MTU (Maximum Transmission Unit) and why does it cause slow connections?

MTU specifies the largest packet size in bytes that can transit a network interface without fragmentation. VPN encapsulation adds header overhead; if the tunnel MTU exceeds the physical carrier threshold, packets fragment, causing severe latency spikes.

Q8 How do I test if my VPN is actually working?

Check your IP address before and after connecting. Your public IP and ISP should change from your residential provider to the VPN datacenter ASN, and our WebRTC and DNS tests should confirm zero exposure of your original address.

Q9 What is packet loss and how does it degrade streaming or gaming?

Packet loss occurs when transmitted data packets fail to reach their destination across network links, forcing TCP retransmissions that trigger buffering delays in video and stutter in multiplayer games.

Q10 What is network jitter?

Jitter measures the statistical variance in packet transit delay over time. High jitter indicates erratic routing congestion or ISP queue throttling, degrading real-time voice calls (VoIP).

Q11 Why do two different speed tests show conflicting results?

Speed test outcomes depend heavily on the geographic location of the target measurement server, the number of parallel TCP streams utilized, congestion at transit peering points, and the client browser CPU overhead.

Q12 Can an IP leak test detect if a proxy is transparent or elite?

Yes. Transparent proxies forward original client IPs in the X-Forwarded-For HTTP header. Anonymous proxies hide the IP but announce proxy headers, while elite (high-anonymity) proxies leave no protocol traces whatsoever.

Q13 How frequently should I run connection leak diagnostics?

Run diagnostics whenever you install new browser extensions, switch proxy software versions, update your operating system, or connect across unfamiliar public Wi-Fi access points.

Q14 Does WhatIsMyIP Wiki log my diagnostic test results?

No. All STUN queries and edge latency pings run completely client-side in your local browser sandbox. We never retain or monetize diagnostic telemetry.

Q15 Why does my latency increase when using a secure proxy?

Encrypted proxies introduce physical geographical detour routing and cryptographic encryption overhead. However, high-quality IEPL or IPLC private lines minimize jitter and bypass public backbone congestion.