Your beacon in the darkness

Minimum setup tools to bypass internet censorship. Help people around the world access the open internet with just one command.

emergency SOS Emergency Chat emergency

Encrypted chat rooms over DNS tunnel. Works during total blackouts. Auto-wipes after 1 hour.

$ curl -sSL sos.dnscloak.net | sudo bash

emoji_symbols 6-Emoji Room ID key Rotating PIN (15s) lock E2E Encrypted timer 1-Hour TTL

download Offline Binaries (Pre-download before blackout)

desktop_windows Windows 10/11 (64-bit) keyboard_command_key macOS Apple Silicon (M-series) keyboard_command_key macOS Intel (10.13+) terminal Linux x64 (Ubuntu, Debian, etc.) terminal Linux ARM64 (Raspberry Pi, etc.)

For emergencies in Iran, China, Russia during internet blackouts. Share room ID + PIN verbally.

dns Get Server

Purchase a VPS (Ubuntu 22.04) from any cloud provider. A domain is optional for most protocols.

terminal Connect (SSH)

Open your terminal and login to your server: ssh root@your-ip

bolt Run Command

Paste the install command below. Follow the interactive prompts to finish setup.

Quick Install (Conduit - recommended)

[-] [□] [x]

$ curl -sSL conduit.dnscloak.net | sudo bash

Turns your machine into a volunteer relay node for Psiphon network. Read more on their website.

Available Protocols

emergency DNS Tunnel (DNSTT) READY

Emergency protocol for total blackouts. Tunnels through DNS queries. Slow but works when all else fails.

emergency last-resort slow

$ curl -sSL dnstt.dnscloak.net | sudo bash

volunteer_activism Conduit (Psiphon Relay) READY

Volunteer relay node for Psiphon network. Help users in censored regions access the open internet.

volunteer psiphon no-domain

$ curl -sSL conduit.dnscloak.net | sudo bash

bolt VLESS + REALITY READY

Advanced TLS camouflage. Mimics HTTPS to popular sites. No domain required. Recommended for most users.

no-domain fast undetectable

$ curl -sSL reality.dnscloak.net | sudo bash

cloud VLESS + WebSocket + CDN READY

Route through Cloudflare CDN. Server IP completely hidden. Good when direct connection is blocked.

ip-hidden cdn cloudflare

$ curl -sSL ws.dnscloak.net | sudo bash

vpn_lock WireGuard VPN READY

Modern VPN with native app support. Fast, secure, works with official WireGuard apps on all platforms.

vpn native-apps fast

$ curl -sSL wg.dnscloak.net | sudo bash

send MTProto Proxy READY

Telegram-specific proxy with Fake-TLS. Direct integration, no third-party client needed.

telegram fake-tls easy

$ curl -sSL mtp.dnscloak.net | sudo bash

lock VLESS + TLS COMING

Classic V2Ray with real TLS certificate. Requires domain but excellent compatibility.

domain-required lets-encrypt compatible

$ curl -sSL vray.dnscloak.net | sudo bash

Features

terminal

One Command Install

No complex setup. Run one curl command, follow prompts. Works on any fresh VPS.

swap_horiz

Multi-Protocol

Different protocols for different situations. If one blocked, switch to another.

cloud_sync

Cloud Detection

Auto-detects AWS, GCP, Azure, DO, Vultr, Hetzner, Oracle, Linode. Configures firewalls.

group

Multi-User

Add multiple users with separate credentials. Each gets QR code and connection link.

code

Unified CLI

Manage all protocols with single `dnscloak` command. Add, remove, list users easily.

lock_open

Open Source

100% open source. Audit the code, contribute, or fork for your own needs.