SniShaper

中文 | English | Русский

SniShaper is a local proxy tool for complex network environments, using ECH Injection, TLS Fragmentation, QUIC Conversion, Session Migration and other solutions to deliver a stable and flexible browsing experience.

This project provides cross-platform support. See Platform_EN.md.

---

Sister project: FlowWeaver

FlowWeaver is the full-featured branch of this project, led by the same maintainer. Both are actively maintained:

	SniShaper (this repository)	FlowWeaver
Focus	Lightweight proxy server	Full-featured client / gateway
Core strengths	ECH injection, TLS fragmentation, session migration	Clash subscriptions, multi-protocol nodes, WireGuard, TUN gateway

They keep separate codebases and evolve independently. Subscription and rule files are format-compatible. If you need subscription import, multi-protocol node selection or WireGuard tunnels, use FlowWeaver.

Both projects take their proxy engine from the standalone snishaper-core library: the proxy server, rule engine, DoH resolver, certificate manager and TUN data plane live there, while this repository keeps only the application layer (GUI, CLI, system integration and rule data).

---

Community

Join the QQ group Snishaper and FlowWeaver building to talk directly with SniShaper and FlowWeaver users and developers, report issues and send suggestions.

---

TODO

To learn about the next development plan and completed tasks, please refer to todo.md.

---

Features

• Multi-Mode Proxy: MITM (man-in-the-middle), Transparent, TLS-RF (TLS fragmentation), QUIC, Migration (session migration), Direct — covering a wide range of site scenarios.
• TUN Virtual NIC: Transparent global traffic hijacking, auto-routing and DNS hijacking.
• ECH Injection: Automatically fetches and injects ECH Config, with DoH discovery and hot-reload.
• Smart Routing: Auto-identifies blocked domains based on GFWList, automatically covering many sites not included in the rules.
• Encrypted DNS: Built-in anti-pollution DNS resolver with multi-node failover for stable resolution.
• Cloudflare IP Pool: Auto speed-test, health check, and refresh.
• NAT64 Support: More flexible IP egress, enabling service access under IP blocking.
• Evolution Mode: Automatically tests combinations of rules to find the optimal access method for a target site and applies it with one click.

---

Quick Start

The project started out Windows-only and later added Linux support. It now ships both a GUI and a CLI.

For most users, we recommend downloading the latest stable Windows build straight from Releases.

For the other platforms and for build instructions, see the following documents:

• Platform_EN.md — per-platform quick start, CLI usage and mobile companions.
• build_EN.md — build guide and the 12-target artifact matrix.

---

Documentation

For detailed technical principles and custom rule guides, refer to the GitHub Wiki:

• Core Mode Introduction: Understand TLS-RF, QUIC and Server mode operation.
• Rule Customization Guide: Learn how to develop targeted rules.
• GUI Configuration Practice: Quickly configure rules in the GUI.
• FAQ: Resolve certificate warnings, rule issues and other common problems.
• Collaborator Agreement: Terms, invitation and acceptance process for becoming a repository collaborator.

---

Build and Development

The frontend is currently built with Wails v3 + React 19 + MUI, with the core developed in Go, supporting Windows / Linux dual-platform GUI and cross-platform CLI for a total of 12 build targets. The full build guide is in build_EN.md.

We will complete a native GUI implementation in an upcoming stable release, to reduce the frontend's memory footprint.

---

Acknowledgements

This project has benefited from the inspiration of the following excellent open-source projects:

• DoH-ECH-Demo
• lumine

Project Activity & Contributors

Activity Badges

  

Activity Trend

Contributors Graph

Star History

---

License

GNU Affero General Public License v3.0 (AGPL-3.0).