-
3.3.1 Pre-Release
released this
2026-08-31 23:31:51 +03:00 | 48 commits to main since this releaseSecure routing and runtime resilience.
Connection modes
Two explicit modes replace the old Auto mode. TUN is the default Android VPN routing. SOCKS5 runs a local authenticated proxy with no VPN interface, and never requests the VPN permission.
Authenticated local SOCKS5
Every connection binds an ephemeral loopback port with fresh random credentials. Android loopback is reachable by any app on the device, so this authentication is load-bearing. Credentials stay in memory and are never persisted or logged.
Resilience
Standard and Extreme profiles. Extreme restarts a failed Xray/tun2socks runtime rather than dropping to the direct network. Android physical-network monitoring ignores the VPN's own network, fixing the old reconnect loop.
Privacy
Session metadata is now hidden from public lock-screen previews. The app requests no package visibility at all.
Fixes
- Extreme recovery survives an app-process restart
- First tap on the connect button is no longer ignored
- The health probe no longer polls while connected
- Session countdown reconciles against wall-clock time on resume
Full detail in CHANGELOG.md.
Contains work from #2 by @Naveax.
Downloads