Rethink DNS + Firewall + VPN.
By Mohammed Hussain, Murtaza Aliakbar, and Santhosh Ponnusamy
Rethink is an Android firewall, DNS client, and VPN from three developers in Coimbatore. It can send apps through WireGuard, SOCKS5, or HTTP CONNECT tunnels, block apps by screen state or network type, and log which app connected where. DNS can go to DNS over HTTPS, TLS, DNSCrypt, or Oblivious DNS over HTTPS. The readme prices the optional Rethink Proxy Network from 1.75 US dollars a month and does not state a price for the app itself.
The F7 Insight
A phone firewall is useful only if it can name the app, not just the socket. Rethink is interesting because the same screen also chooses the DNS path and the tunnel, which is the control most consumer VPN apps split across three products.
A closer look.
- 01
Per-app firewall rules can follow screen state, foreground use, or metered networks.
- 02
Split tunnels can send different apps through WireGuard, SOCKS5, or HTTP CONNECT.
- 03
DNS can use DNS over HTTPS, DNS over TLS, DNSCrypt, or Oblivious DNS over HTTPS.
- 04
A network monitor records which app connected, when, and where.
- 05
The optional Rethink Proxy Network is priced from 1.75 US dollars a month.
- 06
Google Play and F-Droid listings are linked from the repository.
Sources & credits
Verified against the sources below. Features, pricing, and availability may change; check the creator’s current information before installing or buying.
- Official readme: firewall, DNS, VPN, developers, Play, F-Droid, and the paid proxy optionChecked 15 Oct 2026
- Apache-2.0 text for the Rethink repository, including the fastlane iconChecked 15 Oct 2026
Artwork acknowledgments
Rethink DNS icon from the repository fastlane metadata by Mohammed Hussain, Murtaza Aliakbar, and Santhosh Ponnusamy. The repository LICENSE is Apache-2.0 and no NOTICE file excludes this icon. Image used unmodified.