v2.0.0 | github | docs

Let's keep people connected!

Internet censorship bypass tools, with easy setup for volunteers and activists to host their own proxy servers.

1
dns Get Server
Purchase a small VPS (Linux) from your favorite cloud provider. A domain is optional for most protocols.
2
terminal Connect (SSH)
Open your terminal and login to your server: ssh root@your-ip or using remote desktop tools.
3
bolt Run Command
Copy paste the install command you want, then follow the interactive prompts to finish setup.
Quick Install (Conduit - recommended)
[-] [] [x]
$ curl -sSL conduit.dnscloak.net | sudo bash

Turns your machine into a volunteer relay node for Psiphon network. Read more on their website.

Available Protocols

emergency DNS Tunnel (DNSTT) READY

Emergency protocol for total blackouts. Tunnels through DNS queries. Slow but works when all else fails.

emergency last-resort slow
$ curl -sSL dnstt.dnscloak.net | sudo bash
volunteer_activism Conduit (Psiphon Relay) READY

Volunteer relay node for Psiphon network. Help users in censored regions access the open internet.

volunteer psiphon no-domain
$ curl -sSL conduit.dnscloak.net | sudo bash
emergency SOS Emergency Chat READY

Encrypted chat rooms over DNS tunnel. Works during total blackouts. Auto-wipes after 1 hour.

emergency encrypted dns-tunnel
open_in_new Open Web Chat
bolt VLESS + REALITY READY

Advanced TLS camouflage. Mimics HTTPS to popular sites. No domain required. Recommended for most users.

no-domain fast undetectable
$ curl -sSL reality.dnscloak.net | sudo bash
cloud VLESS + WebSocket + CDN READY

Route through Cloudflare CDN. Server IP completely hidden. Good when direct connection is blocked.

ip-hidden cdn cloudflare
$ curl -sSL ws.dnscloak.net | sudo bash
vpn_lock WireGuard VPN READY

Modern VPN with native app support. Fast, secure, works with official WireGuard apps on all platforms.

vpn native-apps fast
$ curl -sSL wg.dnscloak.net | sudo bash
send MTProto Proxy READY

Telegram-specific proxy with Fake-TLS. Direct integration, no third-party client needed.

telegram fake-tls easy
$ curl -sSL mtp.dnscloak.net | sudo bash
lock VLESS + TLS COMING

Classic V2Ray with real TLS certificate. Requires domain but excellent compatibility.

domain-required lets-encrypt compatible
$ curl -sSL vray.dnscloak.net | sudo bash

Features

terminal
One Command Install
No complex setup. Run one curl command, follow prompts. Works on any fresh VPS.
swap_horiz
Multi-Protocol
Different protocols for different situations. If one blocked, switch to another.
cloud_sync
Cloud Detection
Auto-detects AWS, GCP, Azure, DO, Vultr, Hetzner, Oracle, Linode. Configures firewalls.
group
Multi-User
Add multiple users with separate credentials. Each gets QR code and connection link.
code
Unified CLI
Manage all protocols with single `dnscloak` command. Add, remove, list users easily.
lock_open
Open Source
100% open source. Audit the code, contribute, or fork for your own needs.
terminal
One Command Install
No complex setup. Run one curl command, follow prompts. Works on any fresh VPS.
swap_horiz
Multi-Protocol
Different protocols for different situations. If one blocked, switch to another.
cloud_sync
Cloud Detection
Auto-detects AWS, GCP, Azure, DO, Vultr, Hetzner, Oracle, Linode. Configures firewalls.
group
Multi-User
Add multiple users with separate credentials. Each gets QR code and connection link.
code
Unified CLI
Manage all protocols with single `dnscloak` command. Add, remove, list users easily.
lock_open
Open Source
100% open source. Audit the code, contribute, or fork for your own needs.

CLI Preview

dnscloak — ssh
[-] [] [x]
root@vps:~# dnscloak add reality alice
[+] User 'alice' added to Reality

[*] Reality Link for 'alice'
════════════════════════════════════════

vless://abc123...@1.2.3.4:443?...

[*] Scan with Hiddify or v2rayNG
root@vps:~# dnscloak list
[*] All Users
════════════════════════════════════════
  alice: reality, wg
  bob: reality
  carol: ws
root@vps:~#
Loading documentation...

gpp_maybe macOS Security Notice

This app isn't signed with an Apple Developer certificate, so macOS Gatekeeper will block it. Choose one of these methods to allow execution:

terminal Terminal (One Command)
cd ~/Downloads && xattr -d com.apple.quarantine sos-darwin-arm64 && chmod +x sos-darwin-arm64 && ./sos-darwin-arm64

mouse GUI Alternative
  1. Right-click the file Open
  2. Click Open in the warning dialog
  3. Or: System Settings Privacy & Security Open Anyway

emergency SOS Web Chat Setup

The SOS web chat is served through a DNS tunnel and requires a SOCKS5 proxy to access. This makes it uncensorable - it works even during total internet blackouts.

1 Start DNSTT Client (creates SOCKS5 proxy)
Run this command on your machine to start the DNS tunnel client:
curl -sSL dnstt.dnscloak.net/setup/$(uname -s | tr A-Z a-z) | bash

Or download directly: Linux | macOS | Windows

2 Configure Browser SOCKS5 Proxy
Set your browser to use SOCKS5 proxy at:
127.0.0.1:10800
Firefox Settings → Network → Manual Proxy → SOCKS Host
Chrome Use extension: Proxy SwitchyOmega
macOS System Settings → Network → Proxies → SOCKS
Windows Settings → Network → Proxy (use app like Proxifier)
3 Access Web Chat
With proxy configured, navigate to the relay server:
http://relay.dnscloak.net:8899/

The web UI will load entirely through the DNS tunnel. Create a room, share the 6-emoji ID + PIN verbally.