Yet Another Shadow Socket
yass is an efficient forward proxy client supporting http/socks4/socks4a/socks5 protocol running on PC and mobile devices.
License
Features
Android/iOS/macOS (M1/M2/M3 only) comes with VPN Service support
Mobile users including macOS (M1/M2/M3) machines use YASS as VPN Service more than Global Proxy.
See Supporteded Operating System for more. See Status of Package Store for more.
Post Quantum Kyber Support
Post Quantum Kyber Support (not enabled by default) is added on all of supported Platforms.
See Protecting Chrome Traffic with Hybrid Kyber KEM for more.
Prebuilt binaries
- Android download apk or download 32-bit apk
- iOS join via TestFlight
- Windows download installer (require KB2999226 below windows 10) or download 32-bit installer (require vc 2010 runtime) or download woa arm64 installer
- macOS download intel dmg or download apple silicon dmg
via homebrew:
brew install --cask yass
- Linux download rpm or download deb
View more at Release Page
NaïveProxy-Compatible Protocol Support
Cipher http2 and https are NaïveProxy-compatible.
See NaïveProxy's project homepage for support.
Usages
Visit wiki's Usages.
Build from Source
Take a look at instructions.
Sponsor Me
Please visit the pages site.
Build Status
Additional Features
SOCKS cipher Support
Experimental socks4/socks4a/socks5/socks5h cipher support is added for both of CLI and GUI.
DoH (DNS over HTTPS) and DoT (DNS over TLS) Support
Experimental DoH and DoT support is added for both of CLI and GUI.
Supplementary Support for ISRG Root X2 and ISRG Root X1 ca which is missing on some machines
These ca certificates are provided in both builtin ca bundle support and supplementary ca bundle support (bundled).
Supplementary Support for DigiCert Global Root G2 ca which is missing on some machines
These ca certificates are provided in both builtin ca bundle support and supplementary ca bundle support (bundled).
Specify Rate Limit (Command Line only)
Pass --limit_rate rate to command line.
Limits the rate of response transmission to a client.
Uint can be (none), k and m.
Specify TCP Congestion Algorithm (Command Line only)
Pass --congestion_algorithm algo to command line.
Specify algo as TCP congestion control algorithm for underlying TCP connections (Linux only).
See more at manpage tcp(7)
Use custom CA (Command Line only)
Pass --certificate_chain_file file to command line.
Use custom certificate chain provided by file to verify server's certificate.
Use server Side Support (Commmand Line only)
All ciphers supported by client are also supported by yass_server.
See more at manpage yass_server(1)
See Server Usage for more.