NexVPN Pro

⚡ Next-Generation Multi-Core Anti-Censorship & Privacy Gateway

Unifying Sing-box, Xray, Aether (MASQUE/HTTP3), WireGuard, OpenVPN, and Psiphon under a single high-performance cross-platform desktop client.

Key Features • Engines & Architecture • Protocols Matrix • Installation • Build from Source • Documentation • 🇮🇷 مستندات فارسی

---

🌟 Overview

NexVPN Pro is a state-of-the-art circumvention platform engineered to withstand severe, multi-layered Deep Packet Inspection (DPI) firewalls and national censorship blackouts. Developed using Go, Wails v2, TypeScript, and React 18, NexVPN eliminates single-point-of-failure routing by unifying the world's most capable networking cores into a reactive, intelligent client.

Whether dealing with active SNI filtering, TLS fingerprinting, UDP throttling, DNS poisoning, or complete protocol blocks, NexVPN dynamically adapts using intelligent scanners, multi-hop tunneling, and process-level routing.

---

🚀 Key Features

🧠 Unified Multi-Engine Core Dispatcher

• Seamlessly controls and orchestrates Sing-box, Xray-core, Aether (MASQUE/HTTP3), Cloudflare WARP / WireGuard, OpenVPN, and Psiphon.
• Zero-downtime auto-failover: Automatically detects dead servers and switches to the lowest-latency active node.

📡 Intelligent Discovery Hub & Scanner Suite

• Telegram Proxy Scraper: Real-time extraction, decryption, and live ping testing of public MTProto and V2Ray proxies.
• Cloudflare Clean IP Scanner: Multi-threaded CIDR scanner testing latency, jitter, and packet loss across WARP & CDN IPv4 subnets.
• TLS Fragment Studio: Visual editor and automatic tester for ClientHello packet splitting and sleep delays to shatter SNI-based DPI blocking.
• Free Configs Aggregator: Continuous live updates with ISP-optimized tagging (MCI, Irancell, Rightel, Shatel, Mokhaberat).
• Smart ISP Optimizer: Auto-detects your active Internet Service Provider and tailors fragmentation, MTU, and clean endpoints.

🛡️ Enterprise Security & OS Integration

• Zero-Leak Kill Switch: Kernel-level firewall lockdown (Windows Netsh, Linux iptables/nftables, macOS pfctl) ensuring zero IP exposure if connections drop.
• Multi-Resolver DNS Leak Shield: Probes and enforces DNS queries through encrypted resolvers (Cloudflare, Quad9, Google, OpenDNS, Custom DoH/DoT).
• Process-Based App Split Tunneling: Route only specific applications (or bypass domestic apps and online banking) at the OS process level.
• Smart Network Doctor & Emergency Repair: One-click recovery to purge DNS caches, reset Winsock stacks, clear zombie system proxies, and terminate dangling core processes.
• Linux Polkit Daemon: Passwordless background execution using cap_net_admin capabilities without repetitive sudo prompts.

⚡ Productivity & Power Ecosystem

• Mobile Remote Web Companion: Control your desktop VPN from any smartphone on your local Wi-Fi via a secure, PIN-authenticated QR code.
• LAN Proxy Sharing: Share encrypted tunnel access with Smart TVs, gaming consoles, and mobile devices across your local network.
• P2P Nearby Sync: Auto-discover local NexVPN clients on LAN to instantly synchronize profiles and clean IP pools.
• Cloud Sync & Encrypted Vault: Backup and restore profiles with AES-GCM encrypted vaults or GitHub Gist sync.
• Gaming Mode HUD: Low-jitter UDP booster with MTU optimization and an interactive desktop Floating Mini Widget.
• Interactive Screen QR Scanner: Scan proxy QR codes directly from screen regions, image files, or webcams.

---

📐 Architecture & Engines

graph TD
    subgraph UI ["Frontend (React 18 + TypeScript + TailwindCSS)"]
        Dash[Dashboard & Real-time Graph]
        Disc[Discovery Hub & Scrapers]
        Tools[Network Doctor & Split Tunneling]
        Remote[Mobile Remote & LAN Share]
    end

    subgraph IPC ["Wails v2 Event & IPC Bridge"]
        Events[Bidirectional Event Streaming]
        RPC[Go Method Bindings]
    end

    subgraph Core ["Go Backend Architecture"]
        Dispatcher[Unified Engine Dispatcher]
        Store[Encrypted Config Store]
        KillSwitchMgr[Zero-Leak Killswitch]
        DNSShield[DNS Leak Shield]
        Doctor[Network Doctor]
        
        subgraph Engines ["Protocol Adapters"]
            SingBox["Sing-box Core<br/>(VLESS, Hysteria2, TUIC, WireGuard)"]
            XrayCore["Xray Core<br/>(Reality, VMess, Trojan, gRPC)"]
            AetherCore["Aether MASQUE Engine<br/>(HTTP/3 UDP + WARP-in-WARP)"]
            OpenVPNCore["OpenVPN Core<br/>(Native Layer-3 TUN)"]
            PsiphonCore["Psiphon Engine<br/>(Obfuscated SSH Blackout)"]
        end
    end

    subgraph OS ["Operating System Layer"]
        TUN["Virtual TUN Device (Wintun / Linux TUN)"]
        Firewall["Firewall Chains (Netsh / Iptables / PF)"]
        SysProxy["System Proxy (WinINet / GNOME / macOS)"]
    end

    UI --> IPC
    IPC --> Core
    Dispatcher --> Engines
    Engines --> TUN
    KillSwitchMgr --> Firewall
    Core --> SysProxy

Loading

---

📊 Protocols Matrix

Protocol	Engine	Transport / Security	DPI Bypass Score	UDP Acceleration	Best Use Case
VLESS Reality	Sing-box / Xray	TCP, gRPC, WebSocket	🟢 99%	✅	Strict SNI filtering & DPI evasion
Aether MASQUE	Aether Native	HTTP/3 UDP / Nested WARP	🟢 98%	🚀 Turbo	National blackouts & UDP throttling
Hysteria 2	Sing-box	Custom QUIC / Brutal Congestion	🟢 96%	🚀 Extreme	Lossy mobile networks & gaming
TUIC v5	Sing-box	QUIC / Congestion Control	🟢 95%	🚀 Extreme	High-speed streaming & downloads
WARP / WireGuard	Sing-box / Native	UDP + Clean IP Scanning	🟡 88%	✅	General browsing & IP masking
Trojan / VMess	Sing-box / Xray	TLS, WS, gRPC	🟡 90%	✅	Standard CDN & reverse proxy
OpenVPN	OpenVPN	TCP / UDP Layer-3 TUN	🟡 80%	⚠️ Standard	Enterprise & legacy infrastructure
Psiphon SSH	Psiphon	Obfuscated SSH Handshake	🟢 95%	⚠️ TCP-only	Emergency backup during total DPI block

---

🛠️ Installation

🪟 Windows (10 / 11)

1. Download NexVPN-Setup.exe (or NexVPN-windows-amd64.zip for portable mode) from Latest Releases.
2. Run the installer. The installer automatically registers the high-performance Wintun driver and taskbar system tray integration.

🐧 Linux (Ubuntu / Debian / Arch / Fedora)

1. Download NexVPN-linux-amd64.tar.gz from Releases and extract it:

   tar -xvf NexVPN-linux-amd64.tar.gz
   cd NexVPN

2. Crucial: Run the one-time rootless initialization script:

   sudo ./install_linux.sh

   💡 This configures Polkit policies and grants cap_net_admin capabilities to the core binaries so you never get prompted for sudo passwords.

🍏 macOS (Intel & Apple Silicon)

1. Download NexVPN-darwin-universal.dmg.
2. Drag NexVPN.app to your Applications folder.

---

🏗️ Build from Source

Prerequisites

• Go 1.22+
• Node.js 20+ LTS
• Wails CLI v2 (go install github.com/wailsapp/wails/v2/cmd/wails@v2.9.3)

# 1. Clone the repository
git clone https://github.com/Rpg-420/NexVPN.git
cd NexVPN

# 2. Install frontend packages
cd frontend && npm install && cd ..

# 3. Build optimized desktop binary
wails build -clean

The compiled executable will be generated at build/bin/NexVPN.exe (or build/bin/NexVPN).

---

📚 Documentation & Website

Experience our comprehensive online guides and interactive tools:

• 🌐 NexVPN Official Landing Page & Interactive Tools
• 📖 User Guide (English) | راهنمای کاربری فارسی
• 💻 Developer Guide (English) | راهنمای توسعه‌دهندگان فارسی

---

🤝 Contributing

Contributions make the open-source community thrive! Please check our Contributing Guidelines and Code of Conduct before submitting pull requests.

---

📄 License

This project is licensed under the MIT License - see the LICENSE file for details.