Yet Another Shadow Socket

yass is an efficient forward proxy client supporting http/socks4/socks4a/socks5 protocol running on PC and mobile devices.

License

GPLv2-only

Features

Android/iOS/macOS (M1/M2/M3 only) comes with VPN Service support

Mobile users including macOS (M1/M2/M3) machines use YASS as VPN Service more than Global Proxy.

See Supporteded Operating System for more. See Status of Package Store for more.

Post Quantum Kyber Support

Post Quantum Kyber Support (not enabled by default) is added on all of supported Platforms.

See Protecting Chrome Traffic with Hybrid Kyber KEM for more.

Prebuilt binaries

• Android download apk or download 32-bit apk
• iOS join via TestFlight
• Windows download installer (require KB2999226 below windows 10) or download 32-bit installer (require vc 2010 runtime) or download woa arm64 installer
• macOS download intel dmg or download apple silicon dmg

via homebrew: brew install --cask yass

• Linux download rpm or download deb

View more at Release Page

NaïveProxy-Compatible Protocol Support

Cipher http2 and https are NaïveProxy-compatible.

See NaïveProxy's project homepage for support.

Usages

Visit wiki's Usages.

Build from Source

Take a look at instructions.

Sponsor Me

Please visit the pages site.

Build Status

Additional Features

SOCKS cipher Support

Experimental socks4/socks4a/socks5/socks5h cipher support is added for both of CLI and GUI.

DoH (DNS over HTTPS) and DoT (DNS over TLS) Support

Experimental DoH and DoT support is added for both of CLI and GUI.

Supplementary Support for ISRG Root X2 and ISRG Root X1 ca which is missing on some machines

These ca certificates are provided in both builtin ca bundle support and supplementary ca bundle support (bundled).

Supplementary Support for DigiCert Global Root G2 ca which is missing on some machines

These ca certificates are provided in both builtin ca bundle support and supplementary ca bundle support (bundled).

Specify Rate Limit (Command Line only)

Pass --limit_rate rate to command line. Limits the rate of response transmission to a client. Uint can be (none), k and m.

Specify TCP Congestion Algorithm (Command Line only)

Pass --congestion_algorithm algo to command line. Specify algo as TCP congestion control algorithm for underlying TCP connections (Linux only). See more at manpage tcp(7)

Use custom CA (Command Line only)

Pass --certificate_chain_file file to command line. Use custom certificate chain provided by file to verify server's certificate.

Use server Side Support (Commmand Line only)

All ciphers supported by client are also supported by yass_server. See more at manpage yass_server(1)

See Server Usage for more.