Originally reported way back in June 2017 on old firmware:
Bug re-introduced in new firmware, discussed here
Johnex summed it up perfectly:
"Glitch is correct. The issue at the moment is that when you disconnect the VPN to connect to the other, during this time, any connected clients can connect to facebook, insta etc, any sites you use, and leak your information in the time it takes to click connect on the next VPN.
In the v2.x firmware internet was disabled for all clients if “force vpn” was selected, so even if you disconnect, the only thing that happens is no clients have internet, which is what we want.
v3 is automatically disabling the “force vpn” feature when disconnecting, causing this issue.
The solution is to have an option like in v2.x, letting the user decide when to disable the force vpn"
Bug was confirmed fixed here (kyson-lok post, Oct 24):
In a nutshell:
Using a VPN, if you change server there is a short window (between disconnect and re-connect) where your real IP is exposed.
I propose bringing back the “Force VPN” option so there can be no further confusion. Changing this to automatic in the new firmware doesn’t seem to be understood, even by the developers.
Force = NO internet if the connection to server drops.