masterking32/MasterDnsVPN
MasterDnsVPN
MasterDnsVPN is a DNS tunneling VPN and network censorship bypass tool that encapsulates network traffic within DNS queries to circumvent restrictive firewalls. It functions as a secure tunneling protocol and SOCKS5 proxy server, allowing local application traffic to be routed through a secure tunnel to a remote destination.
The project distinguishes itself through a DNS resolver load balancer that distributes traffic across multiple resolvers based on latency and packet loss scoring. It further secures and masks traffic using symmetric payload encryption—supporting ChaCha20, AES-GCM, and XOR—and employs outbound SOCKS5 proxy chaining to hide the server egress point.
The system includes comprehensive traffic management and optimization capabilities, such as automatic repeat request mechanisms for reliable data delivery, dynamic MTU discovery to prevent packet fragmentation, and stream-based payload compression using ZSTD, LZ4, or ZLIB. It also incorporates a local DNS caching resolver to prevent DNS hijacking and leaks.
Deployment is supported through automated server setup scripts for Linux and multi-architecture container images with persistent storage.
Features
- DNS Tunnels - Implements a system for establishing network tunnels by encapsulating traffic over DNS protocols to bypass firewalls.
- Censorship Bypasses - Circumvents network filters and state-level censorship using stealthy DNS tunneling methods.
- Censorship Circumvention Tools - Provides a utility to circumvent restrictive network filters using DNS tunneling and outbound proxy chaining.
- DNS Override Resolvers - Operates a local DNS resolver that intercepts queries and routes them through the tunnel to prevent hijacking.
- DNS Resolver - Distributes tunnel traffic across multiple DNS resolvers using latency and packet loss scoring.
- SOCKS5 Servers - Provides a SOCKS5 proxy server to route local application traffic through a secure DNS tunnel.
- Local Proxy Interfaces - Provides SOCKS4, SOCKS5, and TCP local interfaces to route application traffic into the DNS tunnel.
- Encrypted Tunneling - Secures communication between client and server using symmetric encryption methods like ChaCha20 and AES-GCM.
- Encrypted Tunneling Protocols - Employs a secure communication layer using ChaCha20, AES-GCM, and ARQ for encrypted and reliable data delivery.
- Secure Tunneling - Protects tunneled data using encryption methods like ChaCha20 or AES-GCM to ensure privacy.
- Payload Traffic Encryptions - Secures tunnel communications using symmetric ciphers like ChaCha20, AES-GCM, and XOR to evade detection.
- Automatic Repeat Request Mechanisms - Implements a low-overhead automatic repeat request mechanism with window management to ensure reliable data delivery.
- DNS Leak Protection - Prevents DNS hijacking and leaks by managing resolution internally via a local DNS server with caching.
- Network Reliability - Improves connection stability on unstable networks using multipath routing and selective packet duplication.
- Path MTU Discoverers - Probes active network paths to determine the maximum transmission unit and prevent packet fragmentation.
- Proxy Chaining - Routes outbound server traffic through sequential SOCKS5 proxies to mask the server's egress point.
- Reliable Transmission Mechanisms - Ensures reliable data delivery over lossy networks using an Automatic Repeat Request mechanism with retransmissions.
- Proxy Chaining - Routes outbound server traffic through external SOCKS5 proxies to mask the egress point and hide the server origin.
- Egress Masking - Routes outbound server traffic through external proxies to mask the server location and hide the egress point.
- Tunnel Payload Compression - Applies ZSTD, LZ4, or ZLIB algorithms to tunneled data to reduce request overhead and bandwidth consumption.
- Resolver Health Probes - Tests DNS resolvers to identify functional servers and measure their maximum transmission unit.
- General Productivity Tools - VPN solution using DNS tunneling.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
