
Markus Pettersson engineered core features and infrastructure for the mullvad/mullvadvpn-app, focusing on cross-platform VPN reliability, security hardening, and streamlined release workflows. He delivered robust networking enhancements such as QUIC and WireGuard integration, improved Windows firewall persistence, and platform-aware build automation. Using Rust and TypeScript, Markus modernized dependency management, implemented AppArmor support, and expanded CI/CD coverage to new OS targets. His work included rigorous end-to-end testing, code refactoring, and documentation updates, ensuring maintainability and reduced deployment risk. By addressing low-level system programming challenges and refining upgrade logic, Markus enabled faster, safer releases and a more resilient VPN client experience.

Month: 2025-10 — Delivered release readiness enhancements, strong security hardening, and reliability improvements across Mullvad VPN Desktop. The work focused on accelerating release velocity, strengthening cross‑platform stability, and improving testability and user experience. Key outcomes include coordinated release artifacts for 2025.10 and 2025.12, security hardening with AppArmor integration, robust GotaTun integration for E2E testing, obfuscation and code-quality improvements, and rollout/user-facing safeguards.
Month: 2025-10 — Delivered release readiness enhancements, strong security hardening, and reliability improvements across Mullvad VPN Desktop. The work focused on accelerating release velocity, strengthening cross‑platform stability, and improving testability and user experience. Key outcomes include coordinated release artifacts for 2025.10 and 2025.12, security hardening with AppArmor integration, robust GotaTun integration for E2E testing, obfuscation and code-quality improvements, and rollout/user-facing safeguards.
Month: 2025-09 — Mullvad VPN App (mullvadvpn-app) delivered a focused set of engineering improvements aimed at stability, maintainability, and release readiness, while clearly expanding core capabilities in a controlled, risk-mitigated way. Key actions spanned dependency upgrades, workspace consolidation, lint reliability, and documentation enhancements, with targeted changes across end-to-end testing and release-related assets.
Month: 2025-09 — Mullvad VPN App (mullvadvpn-app) delivered a focused set of engineering improvements aimed at stability, maintainability, and release readiness, while clearly expanding core capabilities in a controlled, risk-mitigated way. Key actions spanned dependency upgrades, workspace consolidation, lint reliability, and documentation enhancements, with targeted changes across end-to-end testing and release-related assets.
Month: 2025-08, Mullvad Mullvadvpn app monthly summary focused on delivering reliability, documentation, and CI/test stability improvements that enable a more reliable, cross-platform VPN experience and faster release cycles. Key outcomes: - QUIC-enabled multihop relay reliability improvements: refined exit relay filtering, QUIC payload sizing adjustments, and include_in_country handling; added unit tests for relay selector edge cases. Commits included: 0b3564dc6bf140b129ecdbaf26a4f94fd1ea8ee7; ec2f4c6b8a58b2f779dbfa8db6c39efc7adfea20; c4e2493eeb28a159980510bca408ca01ccdf4cd5; 6fd8a3da5cab90e66ed84683e9ee11fbfc2b031b; 53f1583cdaa2cef500018326c621b023249064b6. - QUIC obfuscation feature documentation: documented support for QUIC obfuscation, including WireGuard over QUIC, in the README feature table. Commit: b4a7623f3400a8b688cf57b2ecf4f480955a1713. - CI/Testing infrastructure and OS support improvements: CI and test workflow updates to support Debian 13, nightly compiler pin, OS version fetch fixes, and broader cross-platform stability. Commits include: 9b3324b2a2e1a22a3a85b539f39ae0fce89ca5e7; 57e41952f8d0b02d0d433c12879e7e537807cb3f; 8b7e2dba790e90a0ac885adfeded15eb97fb99f0; 1991251db2ea170408263e7c4afd6fc17c7c2d1e; 3a1ee2912176cd9fc48897301b5f57fe5d534a1d; bcf79eba1635fcf63f59d50c1712ca38385793b1; c5974302a84e4359101ba06da4ced91f664a54a1; 7b7b55e8d2879c7a2bb5579844b7119ba58dac46; 1df9c815d8e3deea665de92a6e283e94d2319403; 81361181795d27a1060ccf019ec5126dfba4c0f4; 3bb3579b2bfeeb03d15676133a3c4590de81c5dd. Overall impact and accomplishments: Strengthened core networking for end-users with more reliable QUIC multihop tunnels, clarified and exposed QUIC obfuscation capabilities, and hardened cross-platform CI/testing to reduce regressions. This supports faster, safer releases and a smoother onboarding experience for users with diverse environments. Technologies/skills demonstrated: Rust, QUIC, WireGuard over QUIC, cross-platform CI/CD (Debian 13, macOS, Windows), OS-version detection, test-driven development, and code quality improvements (reducing unsafe usage via objc2_service_management).
Month: 2025-08, Mullvad Mullvadvpn app monthly summary focused on delivering reliability, documentation, and CI/test stability improvements that enable a more reliable, cross-platform VPN experience and faster release cycles. Key outcomes: - QUIC-enabled multihop relay reliability improvements: refined exit relay filtering, QUIC payload sizing adjustments, and include_in_country handling; added unit tests for relay selector edge cases. Commits included: 0b3564dc6bf140b129ecdbaf26a4f94fd1ea8ee7; ec2f4c6b8a58b2f779dbfa8db6c39efc7adfea20; c4e2493eeb28a159980510bca408ca01ccdf4cd5; 6fd8a3da5cab90e66ed84683e9ee11fbfc2b031b; 53f1583cdaa2cef500018326c621b023249064b6. - QUIC obfuscation feature documentation: documented support for QUIC obfuscation, including WireGuard over QUIC, in the README feature table. Commit: b4a7623f3400a8b688cf57b2ecf4f480955a1713. - CI/Testing infrastructure and OS support improvements: CI and test workflow updates to support Debian 13, nightly compiler pin, OS version fetch fixes, and broader cross-platform stability. Commits include: 9b3324b2a2e1a22a3a85b539f39ae0fce89ca5e7; 57e41952f8d0b02d0d433c12879e7e537807cb3f; 8b7e2dba790e90a0ac885adfeded15eb97fb99f0; 1991251db2ea170408263e7c4afd6fc17c7c2d1e; 3a1ee2912176cd9fc48897301b5f57fe5d534a1d; bcf79eba1635fcf63f59d50c1712ca38385793b1; c5974302a84e4359101ba06da4ced91f664a54a1; 7b7b55e8d2879c7a2bb5579844b7119ba58dac46; 1df9c815d8e3deea665de92a6e283e94d2319403; 81361181795d27a1060ccf019ec5126dfba4c0f4; 3bb3579b2bfeeb03d15676133a3c4590de81c5dd. Overall impact and accomplishments: Strengthened core networking for end-users with more reliable QUIC multihop tunnels, clarified and exposed QUIC obfuscation capabilities, and hardened cross-platform CI/testing to reduce regressions. This supports faster, safer releases and a smoother onboarding experience for users with diverse environments. Technologies/skills demonstrated: Rust, QUIC, WireGuard over QUIC, cross-platform CI/CD (Debian 13, macOS, Windows), OS-version detection, test-driven development, and code quality improvements (reducing unsafe usage via objc2_service_management).
Monthly summary for 2025-07 for mullvad/mullvadvpn-app. The team delivered notable platform enhancements, improved security policy enforcement, and targeted bug fixes that collectively improve cross-platform reliability, performance, and maintainability. Key outcomes include Windows firewall policy management with reboot persistence, a reorganized and more maintainable WinFW module, substantial QUIC enablement and tuning across desktop and backend components, IPv6 support for mullvad-masque-proxy, and ABI/dependency modernization to reduce risk. Key achievements: - Ephemeral Windows Firewall policy and reboot persistence implemented with conditional rule persistence; added end-to-end test for reboot-clearing behavior (commits 846dfb364fcbb4fdc76d6cbad1f09768d6c904c1; 5e13d7441e78d79b9f9e89c8a1dd470833723f8c; 1391bf030931ee44964702f5112e0bec5f18fea9). - QUIC support and tuning across desktop, relay selector, MTU adjustments, and UI indicators with accompanying end-to-end tests (multiple commits). - IPv6 support added to mullvad-masque-proxy (commit 9540001b411f8e60c2a7a57f1054f030202bd7f3). - talpid-openvpn compile fix to restore build reliability (commit 5fe3aa99935b49e83d0a7ad13ac13d8f2c47d38d). - Remove Pillow-related CVEs from osv-scanner.toml to mitigate vulnerability surface (commit df8d29dafbbe58f301b20bd3dcd2d581260de185).
Monthly summary for 2025-07 for mullvad/mullvadvpn-app. The team delivered notable platform enhancements, improved security policy enforcement, and targeted bug fixes that collectively improve cross-platform reliability, performance, and maintainability. Key outcomes include Windows firewall policy management with reboot persistence, a reorganized and more maintainable WinFW module, substantial QUIC enablement and tuning across desktop and backend components, IPv6 support for mullvad-masque-proxy, and ABI/dependency modernization to reduce risk. Key achievements: - Ephemeral Windows Firewall policy and reboot persistence implemented with conditional rule persistence; added end-to-end test for reboot-clearing behavior (commits 846dfb364fcbb4fdc76d6cbad1f09768d6c904c1; 5e13d7441e78d79b9f9e89c8a1dd470833723f8c; 1391bf030931ee44964702f5112e0bec5f18fea9). - QUIC support and tuning across desktop, relay selector, MTU adjustments, and UI indicators with accompanying end-to-end tests (multiple commits). - IPv6 support added to mullvad-masque-proxy (commit 9540001b411f8e60c2a7a57f1054f030202bd7f3). - talpid-openvpn compile fix to restore build reliability (commit 5fe3aa99935b49e83d0a7ad13ac13d8f2c47d38d). - Remove Pillow-related CVEs from osv-scanner.toml to mitigate vulnerability surface (commit df8d29dafbbe58f301b20bd3dcd2d581260de185).
June 2025 monthly summary for mullvad/mullvadvpn-app: Reliability and correctness improvements across the build, test, and runtime pipeline. Key features delivered include fixes to GUI test build and asset inclusion, ensuring test files and assets are discovered with correct paths and recursive globbing; proper metadata version incrementing prior to signing to ensure the packaging metadata reflects the latest release; and a type-safety correction for musl-based Linux targets in ioctl calls (SIOCSIFMTU/SIOCGIFMTU) using the correct c_ulong type. Overall impact: reduced release risk, more deterministic CI/build behavior, and improved runtime stability on musl-based systems. Technologies/skills demonstrated: build scripting and asset management; test automation; packaging/versioning pipelines; and low-level C ioctl compatibility across glibc/musl environments.
June 2025 monthly summary for mullvad/mullvadvpn-app: Reliability and correctness improvements across the build, test, and runtime pipeline. Key features delivered include fixes to GUI test build and asset inclusion, ensuring test files and assets are discovered with correct paths and recursive globbing; proper metadata version incrementing prior to signing to ensure the packaging metadata reflects the latest release; and a type-safety correction for musl-based Linux targets in ioctl calls (SIOCSIFMTU/SIOCGIFMTU) using the correct c_ulong type. Overall impact: reduced release risk, more deterministic CI/build behavior, and improved runtime stability on musl-based systems. Technologies/skills demonstrated: build scripting and asset management; test automation; packaging/versioning pipelines; and low-level C ioctl compatibility across glibc/musl environments.
Month: 2025-05 — Consolidated reliability, cross-platform enhancements, and release readiness for Mullvad VPN app across macOS and Windows. Delivered Rust modernization, DNS reliability improvements, offline Windows installer support, user-facing protocol notifications, and CI/CD improvements, underpinned by updated release notes and versioning.
Month: 2025-05 — Consolidated reliability, cross-platform enhancements, and release readiness for Mullvad VPN app across macOS and Windows. Delivered Rust modernization, DNS reliability improvements, offline Windows installer support, user-facing protocol notifications, and CI/CD improvements, underpinned by updated release notes and versioning.
April 2025 — Key security hardening, reliability, and UX/docs improvements for mullvadvpn-app. Security work consolidated vulnerability scanning and dependency patches (tokio upgrades to 1.44.2; suppression adjustments for GO/RUSTSEC advisories; removal of outdated suppressions), reducing noise and closing advisories. Platform-aware in-app upgrade error handling was added to avoid confusing users on unsupported platforms. CI/QA coverage expanded with Fedora 42 and Ubuntu 25.04 VMs, boosting environment realism. Release/docs alignment tightened with changelog updates and versioning to 2025.6-beta1, plus OpenVPN warnings. UX/Translations improvements and WireGuard/OpenVPN descriptions enhanced accessibility. Upgrade data mapping was refined to use only the version string when upgrades are suggested, including a new SuggestedUpgrade mapper type. Testing infrastructure gained a mullvad-version test dependency. Overall, these changes improve security posture, release readiness, user clarity, and testing reliability, enabling faster, safer releases and lower operational risk.
April 2025 — Key security hardening, reliability, and UX/docs improvements for mullvadvpn-app. Security work consolidated vulnerability scanning and dependency patches (tokio upgrades to 1.44.2; suppression adjustments for GO/RUSTSEC advisories; removal of outdated suppressions), reducing noise and closing advisories. Platform-aware in-app upgrade error handling was added to avoid confusing users on unsupported platforms. CI/QA coverage expanded with Fedora 42 and Ubuntu 25.04 VMs, boosting environment realism. Release/docs alignment tightened with changelog updates and versioning to 2025.6-beta1, plus OpenVPN warnings. UX/Translations improvements and WireGuard/OpenVPN descriptions enhanced accessibility. Upgrade data mapping was refined to use only the version string when upgrades are suggested, including a new SuggestedUpgrade mapper type. Testing infrastructure gained a mullvad-version test dependency. Overall, these changes improve security posture, release readiness, user clarity, and testing reliability, enabling faster, safer releases and lower operational risk.
March 2025 marked a consolidation of platform reliability, security hardening, and release-readiness for mullvadvpn-app. Delivered platform-aware build improvements, runtime fixes, and new debugging capabilities; optimized Windows test workflow with a pre-built test-manager; upgraded key dependencies and silenced CVEs; enhanced release integrity with artifact verification and versioning updates; updated translations and changelog; introduced a gRPC skeleton for mullvad-daemon and established fallback build paths to ensure resilience.
March 2025 marked a consolidation of platform reliability, security hardening, and release-readiness for mullvadvpn-app. Delivered platform-aware build improvements, runtime fixes, and new debugging capabilities; optimized Windows test workflow with a pre-built test-manager; upgraded key dependencies and silenced CVEs; enhanced release integrity with artifact verification and versioning updates; updated translations and changelog; introduced a gRPC skeleton for mullvad-daemon and established fallback build paths to ensure resilience.
February 2025 (mullvad/mullvadvpn-app) focused on security hygiene, dependency upgrades, network reliability, CI/test efficiency, and packaging/maintenance. Key deliveries included security/advisory scanning improvements, dependency upgrades, network stability enhancements, and substantial CI/test workflow optimizations, complemented by maintenance and packaging refinements.
February 2025 (mullvad/mullvadvpn-app) focused on security hygiene, dependency upgrades, network reliability, CI/test efficiency, and packaging/maintenance. Key deliveries included security/advisory scanning improvements, dependency upgrades, network stability enhancements, and substantial CI/test workflow optimizations, complemented by maintenance and packaging refinements.
January 2025 highlights the stabilization and expansion of the MullV VPN app’s core functionality, packaging, and testing readiness. The team delivered a refined tunnel integration and improved build tooling, elevating stability and cross‑platform release readiness while strengthening the testing and release documentation.
January 2025 highlights the stabilization and expansion of the MullV VPN app’s core functionality, packaging, and testing readiness. The team delivered a refined tunnel integration and improved build tooling, elevating stability and cross‑platform release readiness while strengthening the testing and release documentation.
December 2024 performance snapshot for mullvadvpn-app: Delivered targeted features to improve cross‑platform reliability, tightened security posture, and strengthened release hygiene, while continuing to invest in API quality and testing practices. The work reduced deployment risk, increased maintainability, and set a trajectory for faster, safer releases.
December 2024 performance snapshot for mullvadvpn-app: Delivered targeted features to improve cross‑platform reliability, tightened security posture, and strengthened release hygiene, while continuing to invest in API quality and testing practices. The work reduced deployment risk, increased maintainability, and set a trajectory for faster, safer releases.
November 2024 highlights for mullvadvpn-app: stabilized CI, expanded cross‑platform support, and strengthened test infrastructure while delivering focused feature improvements that drive reliability, maintainability, and faster release cycles. Key outcomes include reduced test flakiness across quantum-resistant and multihop tunnels, improved Windows support, and modular test configuration that accelerates onboarding and automation.
November 2024 highlights for mullvadvpn-app: stabilized CI, expanded cross‑platform support, and strengthened test infrastructure while delivering focused feature improvements that drive reliability, maintainability, and faster release cycles. Key outcomes include reduced test flakiness across quantum-resistant and multihop tunnels, improved Windows support, and modular test configuration that accelerates onboarding and automation.
Month: 2024-10. Summary of work on mullvadvpn-app focused on platform parity, reliability, and test stability. Key features delivered include Android multihop enablement and WireGuard over Shadowsocks support; major bug fixes include Android set_block_when_disconnected unimplemented error and testing corrections; test/dependency updates to Cargo.lock to ensure up-to-date libraries.
Month: 2024-10. Summary of work on mullvadvpn-app focused on platform parity, reliability, and test stability. Key features delivered include Android multihop enablement and WireGuard over Shadowsocks support; major bug fixes include Android set_block_when_disconnected unimplemented error and testing corrections; test/dependency updates to Cargo.lock to ensure up-to-date libraries.
Overview of all repositories you've contributed to across your timeline