Yet Another Shadow Socket

yass is an efficient forward proxy client supporting http/socks4/socks4a/socks5/socks5h protocol running on PC and mobile devices.

License

Releases

More details are at Latest Release Page

Prebuilt binaries (Linux)

• GTK3 download rpm or download deb (require glibc >= 2.16)
• Qt5 download rpm or download deb (require glibc >= 2.16)
• GTK4 download rpm or download deb (require glibc >= 2.34)
• Qt6 download rpm or download deb (require glibc >= 2.36)

See Status of Package Store for more.

• CLI download tgz for amd64 or download tgz for i386 or download tgz for arm64 (require glibc >= 2.25)
• CLI download tgz for loongarch64 (require glibc >= 2.38, require new world)
• CLI download tgz for riscv64 or download tgz for riscv32 (require glibc >= 2.36)
• CLI(openwrt) download tgz for amd64 or download tgz for i386 or download tgz for aarch64 generic (require openwrt >= 23.05.3)
• CLI(musl) download tgz for amd64 or download tgz for i386 (require musl >= 1.2.5)

Prebuilt binaries (Other platforms)

• Android download apk or download 32-bit apk
• iOS Continue to accept TestFlight invitation
• Windows download installer (require KB2999226 below windows 10) or download 32-bit installer (require vc 2010 runtime) or download woa arm64 installer
• macOS download intel dmg or download apple silicon dmg

  via homebrew: brew install --cask yass

See Supporteded Operating System for more.

Build from Source

Take a look at build instructions and packaging instructions.

Highlight Features

Post Quantum Kyber Support

Post Quantum Kyber Support (not enabled by default) is added on all of supported Platforms.

See Protecting Chrome Traffic with Hybrid Kyber KEM for more.

NaïveProxy-Compatible Protocol Support

Cipher http2 and https are NaïveProxy-compatible.

See NaïveProxy's project homepage for support.

Android/iOS/macOS (M1/M2/M3 only) comes with VPN Service support

Mobile users including macOS (M1/M2/M3) machines can use yass as VPN Service more than just Global Proxy.

More Usages

Visit wiki's Usages.

Extra Features (Limited)

SOCKS cipher Support

Experimental socks4/socks4a/socks5/socks5h cipher support is added for both of CLI and GUI.

DoH (DNS over HTTPS) and DoT (DNS over TLS) Support

Experimental DoH and DoT support is added for both of CLI and GUI.

Supplementary Support for ISRG Root X2 and ISRG Root X1 ca which is missing on some machines

These ca certificates are provided in both builtin ca bundle support and supplementary ca bundle support (bundled).

Supplementary Support for DigiCert Global Root G2 ca which is missing on some machines

These ca certificates are provided in both builtin ca bundle support and supplementary ca bundle support (bundled).

Specify Rate Limit (Command Line only)

Pass --limit_rate rate to command line. Limits the rate of response transmission to a client. Uint can be (none), k and m.

Specify TCP Congestion Algorithm (Command Line only)

Pass --congestion_algorithm algo to command line. Specify algo as TCP congestion control algorithm for underlying TCP connections (Linux only). See more at manpage tcp(7)

Use custom CA (Command Line only)

Pass --certificate_chain_file file to command line. Use custom certificate chain provided by file to verify server's certificate.

Use server Side Support (Commmand Line only)

All ciphers supported by client are also supported by yass_server. See more at manpage _yassserver(1)

See Server Usage for more.

Sponsor Me

Please visit the pages site.

Build Status