v2.1.0 | github | docs

Let's keep people connected!

Internet censorship bypass tools, with easy setup for volunteers and activists to host their own proxy servers.

1
dns Get Server
Purchase a small VPS (Linux) from your favorite cloud provider. A domain is optional for most protocols.
2
terminal Connect (SSH)
Open your terminal and login to your server: ssh root@your-ip or using remote desktop tools.
3
bolt Run Command
Copy paste the install command you want, then follow the interactive prompts to finish setup.
Quick Install (All Protocols)
[-] [] [x]
$ curl vany.sh | sudo bash

Launches an interactive menu to install and manage all protocols.

vany — ssh (connecting...)
[-] [] [x]
root@vps:~# curl vany.sh | sudo bash
[*] Detecting cloud provider... GCP
[+] Loading interactive TUI...
Protocols Details
> VLESS + REALITY [recommended]
VLESS + REALITY
  WireGuard
  VLESS + WS + CDN [needs domain]
Advanced TLS camouflage.
  MTProto Proxy
No domain needed.
  DNS Tunnel [emergency]
Very fast, low overhead.
  Conduit (Psiphon) [relay]
  VLESS + TLS [needs domain]
Requirements:
  SOS Emergency Chat [emergency]
- Server with public IP
- Port 443 open
root@vps:~# vany status
Xray (Reality/WS): running (63h 29m uptime)
Conduit: running | Connected: 312 | Up: 145.1 GB | Down: 1.5 TB
DNSTT: running | WireGuard: running
root@vps:~#

Available Protocols

emergency DNS Tunnel (DNSTT) READY

Emergency protocol for total blackouts. Tunnels through DNS queries. Slow but works when all else fails.

emergency last-resort slow
$ curl vany.sh/dnstt | sudo bashcopied!
volunteer_activism Conduit (Psiphon Relay) READY

Volunteer relay node for Psiphon network. Help users in censored regions access the open internet.

volunteer psiphon no-domain
$ curl vany.sh/conduit | sudo bashcopied!
bolt VLESS + REALITY READY

Advanced TLS camouflage. Mimics HTTPS to popular sites. No domain required. Recommended for most users.

no-domain fast undetectable
$ curl vany.sh/reality | sudo bashcopied!
cloud VLESS + WebSocket + CDN READY

Route through Cloudflare CDN. Server IP completely hidden. Good when direct connection is blocked.

ip-hidden cdn cloudflare
$ curl vany.sh/ws | sudo bashcopied!
vpn_lock WireGuard VPN READY

Modern VPN with native app support. Fast, secure, works with official WireGuard apps on all platforms.

vpn native-apps fast
$ curl vany.sh/wg | sudo bashcopied!
send MTProto Proxy READY

Telegram-specific proxy with Fake-TLS. Direct integration, no third-party client needed.

telegram fake-tls easy
$ curl vany.sh/mtp | sudo bashcopied!
lock VLESS + TLS READY

Classic V2Ray with real TLS certificate. Requires domain but excellent compatibility.

domain-required lets-encrypt compatible
$ curl vany.sh/vray | sudo bashcopied!
sos SOS Emergency Chat READY

End-to-end encrypted chat over DNS tunnel. Works during total internet blackouts. No account needed.

emergency e2e-encrypted no-internet
$ curl vany.sh/sos | sudo bashcopied!

Features

terminal
One Command Install
No complex setup. Run one curl command, follow prompts. Works on any fresh VPS.
swap_horiz
Multi-Protocol
Different protocols for different situations. If one blocked, switch to another.
cloud_sync
Cloud Detection
Auto-detects AWS, GCP, Azure, DO, Vultr, Hetzner, Oracle, Linode. Configures firewalls.
group
Multi-User
Add multiple users with separate credentials. Each gets QR code and connection link.
code
Unified CLI
Manage all protocols with single `vany` command. Add, remove, list users easily.
lock_open
Open Source
100% open source. Audit the code, contribute, or fork for your own needs.
terminal
One Command Install
No complex setup. Run one curl command, follow prompts. Works on any fresh VPS.
swap_horiz
Multi-Protocol
Different protocols for different situations. If one blocked, switch to another.
cloud_sync
Cloud Detection
Auto-detects AWS, GCP, Azure, DO, Vultr, Hetzner, Oracle, Linode. Configures firewalls.
group
Multi-User
Add multiple users with separate credentials. Each gets QR code and connection link.
code
Unified CLI
Manage all protocols with single `vany` command. Add, remove, list users easily.
lock_open
Open Source
100% open source. Audit the code, contribute, or fork for your own needs.
Loading documentation...

gpp_maybe macOS Security Notice

This app isn't signed with an Apple Developer certificate, so macOS Gatekeeper will block it. Choose one of these methods to allow execution:

terminal Terminal (One Command)
cd ~/Downloads && xattr -d com.apple.quarantine sos-darwin-arm64 && chmod +x sos-darwin-arm64 && ./sos-darwin-arm64

mouse GUI Alternative
  1. Right-click the file Open
  2. Click Open in the warning dialog
  3. Or: System Settings Privacy & Security Open Anyway

emergency SOS Web Chat Setup

The SOS web chat is served through a DNS tunnel and requires a SOCKS5 proxy to access. This makes it uncensorable - it works even during total internet blackouts.

1 Start DNSTT Client (creates SOCKS5 proxy)
Run this command on your machine to start the DNS tunnel client:
curl vany.sh/dnstt/setup/$(uname -s | tr A-Z a-z) | bash

Or download directly: Linux | macOS | Windows

2 Configure Browser SOCKS5 Proxy
Set your browser to use SOCKS5 proxy at:
127.0.0.1:10800
Firefox Settings → Network → Manual Proxy → SOCKS Host
Chrome Use extension: Proxy SwitchyOmega
macOS System Settings → Network → Proxies → SOCKS
Windows Settings → Network → Proxy (use app like Proxifier)
3 Access Web Chat
With proxy configured, navigate to the relay server:
http://relay.vany.sh:8899/

The web UI will load entirely through the DNS tunnel. Create a room, share the 6-emoji ID + PIN verbally.

monitoring System Status

sync

Loading...

Checking services