The action must be matched by the intent filter of this service. It also needs to require NoType:android/Manifest$permission;Href=../../../reference/android/Manifest.permission.html#BIND_VPN_SERVICE permission so that other applications cannot abuse it.