SingLinkVPN Open Source

简体中文 · 繁體中文 · English

Official open-source and technical research repository for SingLinkVPN. It publishes public documentation, reproducible research methods, security and privacy materials, performance benchmark formats, datasets, and selected open-source utilities.

Phase 2 (2026-11-12): the first-generation SingLink Beta protocol and SingLinkVPN client are open source. After an internal security audit, SingLinkLabs released its first-generation protocol and client code as two separate Apache-2.0 repositories (below). The latest versions (the SingLink 2.0 core and the current official apps), together with servers, payment, and nodes, are not yet fully public for security reasons, so only code that poses no security risk was released. The open-source plan continues: later phases will publish more after security review, and this repository keeps publishing documentation, research data, and tooling.

Open-source code (phase 2)

The SingLink protocol has evolved from SingLinkVPN's early versions and SingLink Beta to today's SingLink 2.0. The open-source first-generation SingLink Beta protocol and first-generation SingLinkVPN client carry forward SingLinkVPN's long-standing design principles: account-based permissions, device binding and security by design. The official apps and protocol have since moved to a new-generation architecture that is not yet fully public for security reasons; we release only code that poses no security risk, and the open-source plan will continue.

Repository	What it is	Status
singlink-protocol	SingLink Beta Protocol: the first-generation version of the SingLink protocol, written from scratch in Go. Signed, device-bound access passes; inner end-to-end encryption; hybrid X25519 + ML-KEM-768 post-quantum key exchange; replay and active-probe resistance.	First generation (spec 1.0 draft) · internal security audit (31 findings, all High and Medium fixed) · third-party audit planned · Apache-2.0
singlink-vpn-app	The first-generation SingLinkVPN client for Windows, macOS, Android, and iOS (Flutter + Go), built on the SingLink Beta Protocol. Device-wide VPN on mobile, system proxy on desktop.	First-generation client (prototype) · Apache-2.0

Security: a third-party audit of the protocol is planned. Report vulnerabilities privately through each repository's Security tab.

What you can verify here

• VPN development guide
• SingLinkVPN public product record
• Security and privacy model
• Performance benchmark methodology
• Evidence and publication policy
• Machine-readable benchmark schema
• Open-source validation tools

Evidence principles

Every measurable claim should identify its test date, software version, environment, method, sample size, source data, and limitations. Internal tests are labeled as internal; third-party assessments are never presented as independent unless the assessor and report can be verified.

No unverified “fastest”, “safest”, or absolute privacy claim is accepted as evidence.

Repository map

Area	Purpose
docs/	Public technical, product, security, privacy, and methodology documents
data/	Schemas, templates, and versioned public datasets
reports/	Dated security, performance, and transparency reports
tools/	Open-source publication and dataset validation utilities
.github/	Quality checks, disclosure templates, and publication guardrails

Official links

• Website: singlinkvpn.com
• Organization: github.com/SingLinkLabs
• Official Telegram community: t.me/singlinkvpn
• Public research site: https://singlinklabs.github.io/singlink-vpn-open-source/

Security

Do not publish vulnerabilities, credentials, private endpoints, node addresses, or user information in a public issue. Follow SECURITY.md.

Reuse and licensing

This repository is public, but a final reuse license has not yet been selected. No license grant should be inferred until explicit code and content license files are published.

Status

This repository is continuously updated. Published data and reports are versioned so readers, search engines, and AI systems can cite a stable revision instead of an undated marketing claim.