Yet Another Shadow Socket
yass is an efficient forward proxy client supporting http/socks4/socks4a/socks5/socks5h protocol running on PC and mobile devices.
License
Releases
Because we are reusing chromium's network stack directly, we are following chromium's release schedule and delivering new versions based on its beta branch.
- Latest M128's Release (1.12.x) will become Stable since Aug 20, 2024 (Extended Support).
- Latest M127's Release (1.11.x) becomes Stable since Jul 23, 2024
- Latest M126's Release (1.10.x) becomes Stable since Jun 11, 2024 (Extended Support)
- Latest M125's Release (1.9.x) becomes Stable since May 14, 2024
- Latest M124's Release (1.8.x) becomes Stable since Apr 16, 2024 (Extended Support)
- Latest M123's Release (1.7.x) becomes Stable since Mar 19, 2024
- Latest M122's Release (1.6.x) becomes Stable since Feb 20, 2024 (Extended Support)
- Latest M121's Release (1.5.x) becomes Stable since Jan 23, 2024
Prebuilt binaries (Linux)
-
GTK3 download rpm or download deb (minimum requirement: CentOS 8 or Ubuntu 16.04)
-
Qt5 download rpm or download deb (minimum requirement: CentOS 8 or Ubuntu 16.04)
-
GTK4 download rpm or download deb (minimum requirement: openSUSE Leap 15.5, CentOS 9 or Ubuntu 22.04)
-
Qt6 download rpm or download deb (minimum requirement: openSUSE Leap 15.5, CentOS 9 with epel or Ubuntu 22.04)
-
GTK4 (Archlinux) download binary pkg file (PGP Keys:
sudo pacman -S archlinuxcn-keyring)
See Status of Package Store for more.
- CLI download tgz for amd64 or download tgz for i386 or download tgz for arm64 (require glibc >= 2.25)
- CLI download tgz for loongarch64 (require glibc >= 2.38, new world)
- CLI download tgz for riscv64 or download tgz for riscv32 (require glibc >= 2.36)
- CLI(openwrt) download tgz for amd64 or download tgz for i486 or download tgz for aarch64 generic (require openwrt >= 23.05.3)
- CLI(musl) download tgz for amd64 or download tgz for i386 (require musl >= 1.2.5)
Prebuilt binaries (Other platforms)
- Flatpak (Qt5) download flatpak (PS: Flathub is incoming)
- Android download 64-bit apk or download 32-bit apk (require Android 7.0 or above)
- iOS Continue to accept TestFlight invitation (require TestFlight from AppStore, and iOS 13.0 or above)
- Windows download 64-bit installer (require KB2999226 on windows 7/8/8.1) or download 32-bit installer (require vc 2010 runtime on windows xp sp3) or download arm64 installer (require windows 10/11)
- macOS download intel dmg or download apple silicon dmg (require macOS 10.14 or above)
via homebrew:
brew install --cask yass
See Supporteded Operating System for more.
Build from Source
Take a look at build instructions and packaging instructions.
Highlight Features
Post Quantum Kyber Support
Post Quantum Kyber Support (not enabled by default) is added on all of supported Platforms.
See Protecting Chrome Traffic with Hybrid Kyber KEM for more.
NaïveProxy-Compatible Protocol Support
Cipher http2 and https are NaïveProxy-compatible.
See NaïveProxy's project homepage for support.
Android/iOS/macOS (M1/M2/M3 only) comes with VPN Service support
Mobile users including macOS (M1/M2/M3) machines can use yass as VPN Service more than just Global Proxy.
More Usages
Visit wiki's Usages.
Extra Features (Limited)
SOCKS cipher Support
Experimental socks4/socks4a/socks5/socks5h cipher support is added for both of CLI and GUI.
DoH (DNS over HTTPS) and DoT (DNS over TLS) Support
Experimental DoH and DoT support is added for both of CLI and GUI.
Supplementary Support for ISRG Root X2 and ISRG Root X1 ca which is missing on some machines
These ca certificates are provided in both builtin ca bundle support and supplementary ca bundle support (bundled).
Supplementary Support for DigiCert Global Root G2 ca which is missing on some machines
These ca certificates are provided in both builtin ca bundle support and supplementary ca bundle support (bundled).
Specify TCP Congestion Algorithm (Command Line only)
Pass --congestion_algorithm algo to command line.
Specify algo as TCP congestion control algorithm for underlying TCP connections (Linux only).
See more at manpage tcp(7)
Use custom CA (Command Line only)
Pass --certificate_chain_file file to command line.
Use custom certificate chain provided by file to verify server's certificate.
Use server Side Support (Commmand Line only)
All ciphers supported by client are also supported by yass_server.
See more at manpage yass_server(1)
See Server Usage for more.
Sponsor Me
Please visit the pages site.