CluvexStudio / ZedSecure

ZedSecure 
 Every way through, in one app. 
 English · فارسی 
## What is ZedSecure?
ZedSecure is a VPN and proxy client for Android, Linux, Windows and macOS that ships with more than one
engine. When one route is blocked, the next one is already installed: Xray and sing-box for the
usual protocols, Psiphon and Tor for when nothing else connects, DNS tunnels for networks that let
little more than DNS through, and WireGuard, AmneziaWG, OpenConnect and IKEv2 for servers you
already run. Engines can be chained through each other, and one tap tests every server and moves
the connection to the fastest one.
## Engines
| Engine | Carries |
|---|---|
| Xray | VLESS with Reality, Vision and XHTTP, VMess, Trojan, Shadowsocks, Hysteria2, WireGuard, AmneziaWG |
| sing-box | TUIC, Naive, AnyTLS, ShadowTLS, OpenVPN `.ovpn` files, and plain sing-box JSON |
| Psiphon | Psiphon's own network; no server of yours needed |
| Tor | obfs4, Snowflake and Conjure bridges |
| DNS tunnels | DNSTT, VayDNS and MasterDNS, over UDP, TCP, DoT or DoH |
| OpenConnect | Cisco AnyConnect and compatible gateways |
| IKEv2 | the IPsec client built into Android |
| SSH | on its own, or through any of the above |
Android has all of them. Linux, Windows and macOS carry Xray, sing-box, the DNS tunnels and SSH.
## Features
- Imports share links, subscriptions, Xray and sing-box JSON, `.ovpn`, Amnezia `vpn://` and QR codes
- Auto-select keeps the tunnel on the fastest server and fails over on its own
- Chains in both directions, for example Xray over Tor or Tor over Xray
- Per-app routing, a geoip/geosite rule editor, and SNI spoofing on rooted devices
- Vault: share a config as a `.zsx` file that connects without showing it, with an optional password and expiry date
- Speed test, MTU finder, DNS resolver scanner and a live log
- Material 3 Expressive, light and dark, in English, Persian, Russian and Chinese
## Download
**Android:** Google Play, or the
APK for your device from Releases
(`arm64-v8a` for almost every phone, `armeabi-v7a` for older ones).
**Linux:** `.deb`, `.rpm`, `.AppImage` or `.tar.gz` from Releases. On Arch Linux, the community
package `zedsecure-bin` is in the AUR:
`yay -S zedsecure-bin`. On NixOS, `nix run github:CluvexStudio/ZedSecure`.
**Windows:** the `.msi` installer, or the portable `.zip`.
**macOS:** the `.dmg` for Apple Silicon or for Intel. The app is not notarized, so open it the
first time with right-click, then Open.
## Building
 [code] 
Every engine is built in ZedSecure-Cores, one
workflow per engine, from the forks and exact commits in its `pins.txt`. `tools/cores.txt`
names the build each release takes. Pushing a `v*` tag builds Android and every desktop system in CI
and puts them all in one release; Android and desktop share one version.
## Credits
The DNSTT and VayDNS modes of the DNS tunnel are built with the
VayDNS library, a fork of dnstt. The MasterDNS mode is a separate engine, credited below.
The main ideas of the tunnel come from SlipNet by ano