Meta tags:
description=Advanced DNS tunneling VPN for censorship bypass, optimized beyond DNSTT and SlipStream with low-overhead ARQ, resolver load balancing, high packet-loss stability and speed. - masterking32/MasterDnsVPN;

Headings (most frequently used words):

section, and, server, client, the, uh, oh, masterdnsvpn, project, files, notes, it, use, installation, quick, with, on, an, step, setup, configuration, navigation, support, important, mtu, linux, run, from, tunnel, security, session, method, create, saved, searches, to, your, checklist, variables, toml, testing, practical, mobile, usage, system, architecture, license, about, releases, this, footer, projects, by, prerequisite, docker, preparing, running, source, local, proxy, dns, runtime, arq, packet, packing, 10, logging, policy, lifecycle, other, panels, in, record, download, links, search, code, repositories, users, issues, pull, requests, provide, feedback, masterking32, getting, started, structure, menu, filter, results, more, quickly, folders, latest, commit, history, repository, فارسی, english, русский, 中文, español, italiano, announcement, channel, key, features, advantages, battle, tested, during, total, internet, blackout, launch, client_config, server_config, finding, scanning, resolvers, better, understanding, fast, tuning, guide, android, iphone, side, extra, information, how, works, advanced, technical, contributing, developer, 38, sponsor, packages, contributors, languages, compared, similar, disclaimer, if, you, like, please, starring, github, helps, get, discovered, optional, financial, domain, preparation, prebuilt, recommended, image, windows, macos, directly, go, identity, resolver, selection, duplication, health, failover, compression, discovery, initial, workers, queues, timers, ping, keepalive, protocol, acceptance, udp, listener, front, door, capacity, deferred, stream, invalid, cookie, tracking, upstream, forwarding, external, socks, control, ttls, sync, suggestion, share, computer, intermediate, combine, or, services, for, community, related, fixing, port, 53, already, integrate, 3x, ui, as, outbound, high, level, diagram, flow, core, concepts, used, topics, resources, stars, watchers, forks, 🅰️, address, ns, delegate, subdomain, short, note, automatic, script, after, overview, supported, architectures, start, example, compose, required, environment, persistent, data, mikrotik, routeros, build, config, command, line, parameters,

Text of the page (most frequently used words):
the (299), and (167), for (127), #server (126), #client (96), dns (86), linux (85), this (70), masterdnsvpn (66), you (53), download (49), fallback (46), resolver (43), section (41), use (41), with (38), local (37), tunnel (36), socks5 (36), packets (33), value (33), code (33), can (32), session (32), data (32), your (32), toml (32), mtu (31), that (30), resolvers (28), applies (27), sample (26), invalid (26), values (26), real (26), control (25), how (25), example (25), clamp (25), domain (24), windows (24), full (23), project (22), proxy (22), from (22), number (22), behavior (22), arm (22), bit (22), udp (21), only (21), parameter (21), stream (20), true (20), run (20), allowed (20), mips (20), arq (19), setup (19), explanation (19), arm64 (19), github (18), timeout (18), port (18), may (18), must (18), com (18), not (17), more (17), all (17), false (17), client_config (17), config (17), are (17), after (17), clamped (17), simple (17), security (16), txt (16), used (16), same (16), these (16), but (16), when (16), seconds (16), packet (15), file (15), one (15), traffic (15), android (15), before (15), long (15), maximum (15), server_config (15), key (14), through (14), system (14), tcp (14), configuration (14), log (14), loss (13), external (13), outbound (13), servers (13), mode (13), systems (13), support (13), older (13), request (12), during (12), such (12), duplication (12), note (12), network (12), set (12), positive (12), termux (12), time (11), please (11), reload (11), license (11), speed (11), masterking32 (11), another (11), directly (11), target (11), into (11), app (11), want (11), valid (11), client_resolvers (11), size (11), advanced (10), requests (10), deferred (10), runtime (10), retransmission (10), create (10), build (10), out (10), legacy (10), window (10), encryption (10), string (10), very (10), macos (10), there (9), error (9), dnstt (9), overhead (9), open (9), packed (9), ack (9), direct (9), workers (9), will (9), add (9), protocol (9), projects (9), files (9), devices (9), service (9), main (9), list (9), derived (9), normal (9), 120 (9), initial (9), ttl (9), 86400 (9), compression (9), name (9), amd64 (9), installation (9), record (9), loading (8), page (8), high (8), stability (8), encrypt_key (8), important (8), usually (8), query (8), terminal (8), health (8), auto (8), inside (8), upstream (8), socks (8), address (8), new (8), then (8), sudo (8), already (8), users (8), path (8), lower (8), settings (8), retries (8), output (8), automatically (8), queries (8), environments (8), cmd (8), container (8), yes (8), armv7 (8), endian (8), x86 (8), was (7), latest (7), slipstream (7), developed (7), have (7), side (7), connect (7), healthy (7), connection (7), cache (7), top (7), enabled (7), username (7), password (7), any (7), other (7), developers (7), still (7), becomes (7), reduce (7), payload (7), missing (7), controls (7), capacity (7), queue (7), down (7), minimum (7), interval (7), lightweight (7), required (7), docker (7), than (7), view (7), while (6), pull (6), issues (6), block (6), better (6), links (6), repeated (6), blocks (6), disabled (6), use_external_socks5 (6), multiple (6), small (6), final (6), over (6), applications (6), optional (6), sessions (6), architecture (6), running (6), resolved (6), their (6), they (6), default (6), using (6), recommended (6), faster (6), quality (6), results (6), increase (6), wait (6), format (6), search (6), current (6), testing (6), remain (6), info (6), waits (6), nack (6), delay (6), streams (6), 300 (6), match (6), work (6), type (6), keep (6), latency (6), records (6), version (6), source (6), boards (6), software (6), enterprise (6), community (5), navigation (5), readme (5), tunneling (5), vpn (5), optimized (5), balancing (5), does (5), extra (5), its (5), usage (5), notes (5), between (5), participant (5), send (5), cookie (5), resolverruntime (5), end (5), custom (5), inbound (5), click (5), restart (5), tab (5), 127 (5), supports (5), systemd (5), start (5), independently (5), helps (5), built (5), review (5), related (5), useful (5), features (5), also (5), internet (5), some (5), enforced (5), 255 (5), 65535 (5), instead (5), closed (5), threshold (5), pressure (5), operating (5), domains (5), ping (5), step (5), every (5), mikrotik (5), mips64le (5), multi (5), subdomain (5), cloudflare (5), outside (5), multipath (5), medium (5), releases (4), activity (4), censorship (4), low (4), under (4), see (4), startup (4), last (4), close (4), per (4), failover (4), shared (4), sensitive (4), tasks (4), handling (4), user (4), response (4), clientarq (4), listener (4), store (4), authentication (4), listen_port (4), where (4), nano (4), most (4), web (4), based (4), designed (4), make (4), around (4), phone (4), few (4), practical (4), firewall (4), listen_ip (4), method (4), services (4), computer (4), range (4), them (4), test (4), too (4), suitable (4), find (4), saved (4), written (4), which (4), text (4), checks (4), automatic (4), back (4), old (4), policy (4), init (4), higher (4), debug (4), arrive (4), 1200 (4), many (4), packing (4), empty (4), bytes (4), socks5_auth (4), internal (4), each (4), recently (4), 600 (4), internally (4), upload (4), because (4), read (4), retry (4), channel (4), successful (4), tested (4), integer (4), efficiency (4), similar (4), uses (4), first (4), standard (4), xor (4), aes (4), quick (4), exe (4), copy (4), git (4), https (4), image (4), intel (4), macs (4), little (4), mips64 (4), big (4), mipsle (4), router (4), platforms (4), riscv64 (4), armv5 (4), embedded (4), armv6 (4), ubuntu (4), debian (4), tools (4), short (4), networks (4), feedback (4), goal (4), quic (4), actions (4), share (3), manage (3), terms (3), about (3), release (3), repository (3), stars (3), mit (3), resources (3), topics (3), bypass (3), beyond (3), load (3), developer (3), published (3), issue (3), preferred (3), need (3), stay (3), ordering (3), selection (3), description (3), lookup (3), subgraph (3), telegram (3), etc (3), ldns (3), remote (3), serverarq (3), dnsup (3), level (3), layer (3), avoid (3), exit (3), save (3), tags (3), enter (3), here (3), 18000 (3), panels (3), cannot (3), distributions (3), working (3), application (3), repositories (3), best (3), itself (3), include (3), own (3), design (3), change (3), otherwise (3), mobile (3), intermediate (3), clients (3), min (3), max (3), min_download_mtu (3), min_upload_mtu (3), program (3), next (3), scan (3), reuse (3), scanning (3), just (3), line (3), compatible (3), worker (3), counts (3), queues (3), fragment (3), both (3), defines (3), arq_control_initial_rto_seconds (3), arq_initial_rto_seconds (3), errors (3), result (3), off (3), critical (3), relative (3), data_encryption_method (3), non (3), forward_port (3), forward_ip (3), sends (3), transport (3), kept (3), often (3), runs (3), count (3), wrong (3), heavy (3), incoming (3), take (3), help (3), modes (3), shown (3), accepts (3), protocol_type (3), paths (3), items (3), treated (3), background (3), up_mtu (3), accept (3), payloads (3), reduces (3), enables (3), two (3), unstable (3), improve (3), round (3), robin (3), random (3), least (3), tier (3), hijacking (3), gcm (3), binaries (3), item (3), masterdnsvpn_client_linux_amd64 (3), extract (3), archive (3), unless (3), containers (3), ghcr (3), environment (3), modern (3), compatibility (3), prebuilt (3), ufw (3), allow (3), dig (3), cases (3), script (3), server_linux_install (3), world (3), completely (3), like (3), even (3), blackout (3), international (3), caching (3), laws (3), responsibility (3), provided (3), shadowsocks (3), noise (3), commit (3), insights (3), signed (3), refresh (3), sign (3), documentation (3), grade (3), copilot (3), platform (3), solutions (3), explore (3), perform (2), information (2), docs (2), footer (2), 2026 (2), contributors (2), sponsors (2), sponsor (2), report (2), forks (2), 693 (2), idea (2), performance (2), improvement (2), generation (2), turns (2), survive (2), lossy (2), gets (2), weak (2), connects (2), chains (2), pool (2), synced (2), tracking (2), disable (2), recheck (2), independent (2), overall (2), core (2), choose (2), deliver (2), dial (2), return (2), put (2), lifecycle (2), browser (2), balancer (2), public (2), ordinary (2), works (2), now (2), xray (2), tag (2), routing (2), vless (2), vmess (2), panel (2), follow (2), integrate (2), occupied (2), fixing (2), tool (2), iran (2), management (2), persian (2), interface (2), builder (2), allows (2), connecting (2), starring (2), possible (2), those (2), behave (2), additional (2), check (2), exposed (2), automated (2), sure (2), strongly (2), point (2), combine (2), destination (2), configure (2), currently (2), methods (2), together (2), slightly (2), improves (2), fragmentation (2), fail (2), heavily (2), discovered (2), tests (2), place (2), correctly (2), mtu_test_timeout (2), mtu_test_retries (2), mtu_servers_file_format (2), easier (2), save_mtu_servers_to_file (2), mtu_test_parallelism (2), parallel (2), max_download_mtu (2), max_upload_mtu (2), equal (2), binary (2), style (2), editor (2), replace (2), finding (2), feature (2), sync (2), simply (2), session_accept (2), state (2), stores (2), sizing (2), limits (2), clamps (2), decode (2), accepted (2), requested (2), starts (2), production (2), enough (2), warn (2), log_level (2), logging (2), 3600 (2), arq_terminal_ack_wait_timeout_seconds (2), drain (2), arq_terminal_drain_timeout_seconds (2), sequence (2), again (2), arq_data_nack_repeat_seconds (2), sending (2), eagerly (2), retransmissions (2), arq_data_nack_initial_delay_seconds (2), order (2), gap (2), arq_data_nack_max_gap (2), arq_max_data_retries (2), arq_control_packet_ttl_seconds (2), 2400 (2), arq_data_packet_ttl_seconds (2), inactivity (2), 1800 (2), arq_inactivity_timeout_seconds (2), 5000 (2), arq_max_control_retries (2), arq_control_max_rto_seconds (2), arq_max_rto_seconds (2), 16384 (2), arq_window_size (2), failure (2), reach (2), 400 (2), should (2), means (2), tries (2), max_packets_per_batch (2), encryption_key_file (2), above (2), fixed (2), socks5_pass (2), socks5_user (2), whether (2), forwarding (2), tunneled (2), fragments (2), several (2), followers (2), table (2), late (2), protection (2), recognized (2), cleanup (2), has (2), responds (2), concurrency (2), fills (2), 256 (2), 4096 (2), 128 (2), overload (2), logs (2), buffer (2), socket (2), limited (2), front (2), door (2), larger (2), increases (2), ids (2), what (2), happens (2), strings (2), below (2), receive (2), cold (2), 100 (2), base (2), restored (2), added (2), down_mtu (2), removed (2), single (2), probe (2), upper (2), bound (2), smallest (2), discovery (2), outgoing (2), safe (2), strict (2), quickly (2), creation (2), events (2), packet_duplication_count (2), survivability (2), chooses (2), hybrid (2), score (2), giving (2), disk (2), bind (2), master_dns_vpn (2), localhost (2), secret (2), exactly (2), encryption_key (2), chacha20 (2), none (2), configured (2), variables (2), delegated (2), checklist (2), content (2), cidr (2), purpose (2), structure (2), command (2), clone (2), prerequisite (2), masterdnsvpn_server_linux_amd64 (2), chmod (2), needed (2), unzip (2), apt (2), install (2), downloading (2), package (2), preparing (2), executable (2), host (2), mounts (2), dir (2), boot (2), routeros (2), persistent (2), stop (2), stopped (2), exists (2), overview (2), apple (2), silicon (2), risc (2), broader (2), installer (2), phones (2), nslookup (2), hours (2), handles (2), names (2), delegate (2), government (2), pieces (2), relies (2), smart (2), total (2), shutdown (2), global (2), filter (2), battle (2), conditions (2), socks4 (2), delivery (2), harsh (2), piece (2), development (2), ton (2), financial (2), our (2), consequences (2), without (2), warranty (2), research (2), configurable (2), strong (2), 10mb (2), implementation (2), good (2), kcp (2), sum (2), mod (2), readme_zh (2), readme_ru (2), readme_it (2), readme_fa (2), readme_es (2), gitignore (2), bench (2), scripts (2), assets (2), 030 (2), commits (2), message (2), menu (2), discussions (2), appearance (2), cancel (2), available (2), searches (2), business (2), customer (2), devops (2), merge (2), action, personal, cookies, contact, status, privacy, inc, dockerfile, shell, languages, packages, learn, jun, v2026, 234407, 7de2476, watching, watchers, masterdns, details, welcome, contributions, bug, contributing, exist, creates, repeat, chance, stuck, move, general, technical, chosen, across, flows, logical, carried, concept, concepts, sequencediagram, encrypt, checksum, queueing, acks, reply, reorder, consume, ordered, clean, flow, graph, client_side, device, dns_network, server_side, diagram, combines, multiplexing, usual, limitations, tunnels, via, select, pick, created, rule, rules, configs, proxies, steps, warning, systemctl, dnsstublistener, conf, companion, discovers, validates, especially, generates, ready, performs, verification, kevin, haji, kevinnet, easy, instances, abolix, masterdnsweb, explanations, guided, datacoder, revocgg, hidden, node, mdv, edition, benefit, ideas, consider, supporting, encounter, suggestions, contribute, introduce, been, people, inspiration, experimentation, differently, choices, less, scans, enable, trusted, anyone, facing, since, official, ios, introduced, guide, iphone, narrow, bring, closer, poor, let, suggestion, decreases, longer, depends, understanding, fast, tuning, previous, finish, process, completes, doing, likely, mark, miss, slower, accurate, later, 200, ceiling, really, avoiding, probing, following, suggested, ones, parts, discover, ranges, ips, byte, skipped, rebuilt, effective, sides, raise, append, compact, immediately, session_init, deep, investigation, temporarily, soon, issued, large, reported, 100000, 800, stream_failure_packet_ttl_seconds, success, stream_result_packet_ttl_seconds, stream_setup_ack_ttl_seconds, effectively, arrives, reliably, packet_block_control_duplication, pack, ttls, directory, absolute, supplied, normalizes, endpoint, zero, auth, 123456, admin, requires, mainly, chaining, hiding, egress, shows, socks_connect_timeout, dns_cache_ttl_seconds, 50000, dns_cache_max_records, dns_fragment_assembly_timeout, identical, performed, rest, dns_inflight_wait_timeout_seconds, exchange, dns_upstream_timeout, forwards, dns_upstream_servers, sweeping, terminal_stream_retention_seconds, entries, keeps, 1000000, 2000, recently_closed_stream_cap, syn, revive, recently_closed_stream_ttl_seconds, signatures, replay, session_init_reuse_ttl_seconds, metadata, closed_session_retention_seconds, periodic, loop, session_cleanup_interval_seconds, times, cleans, session_timeout_seconds, aggressively, invalid_cookie_error_threshold, detect, broken, repeatedly, invalid_cookie_window_seconds, socks5_fragment_store_capacity, dns_fragment_store_capacity, stream_queue_initial_capacity, orphan, batching, session_orphan_queue_initial_capacity, rejected, 14336, deferred_session_queue_limit, handle, assembly, slow, unnecessary, contention, deferred_session_workers, drop, spam, drop_log_interval_seconds, largest, allocates, max_packet_size, matters, bursts, 4194304, socket_buffer_size, dropped, emits, rate, max_concurrent_requests, pass, dns_request_workers, goroutines, reading, busy, context, switching, udp_readers, deployments, udp_port, binds, listen, interfaces, udp_host, supported_download_compression_types, supported_upload_compression_types, label, length, confusing, worth, adding, min_vpn_label_length, determines, kind, expects, takes, packet_stream_syn, packet_socks5_syn, treats, belonging, acceptance, contains, named, reason, included, effect, serverconfig, config_version, verbosity, operation, investigating, repeating, abandoned, batch, turn, ping_cold_threshold_seconds, cooling, ping_cool_threshold_seconds, warm, ping_warm_threshold_seconds, mostly, idle, ping_cold_interval_seconds, cooldown, ping_cooldown_interval_seconds, 750, ping_lazy_interval_seconds, fastest, hottest, ping_aggressive_interval_seconds, keepalive, explicitly, session_busy, session_init_busy_retry_interval_seconds, initialization, session_init_retry_max_seconds, backoff, linear, session_init_retry_linear_after, increment, schedule, session_init_retry_step_seconds, session_init_retry_base_seconds, retention, cancelled, completion, client_cancelled_setup_retention_seconds, bookkeeping, client_terminal_stream_retention_seconds, associate, socks_udp_associate_read_timeout_seconds, rx_channel_size, nothing, dispatcher, sleeps, polling, 020, dispatcher_idle_poll_interval_seconds, tunnel_packet_timeout_seconds, processing, tunnel_process_workers, reads, writes, rx_tx_workers, timers, reactive, mtu_reactive_added_server_log_format, mtu_added_server_log_format, due, cause, mtu_removed_server_log_format, separator, inserted, mtu_using_section_separator_text, template, masterdnsvpn_success_test_, mtu_servers_file_name, cpu, produce, noisy, failures, 500, 150, attempted, grow, shrinking, avoids, pointless, compression_min_size, expected, download_compression_type, zlib, lz4, zstd, upload_compression_type, encoded, base_encode_data, decide, observations, timeouts, auto_disable_timeout_window_seconds, disabling, timing, show, auto_disable_timeout_servers, rechecks, unhealthy, once, unusable, until, manual, rebuild, recheck_inactive_servers_enabled, failovers, prevents, oscillation, stream_resolver_failover_cooldown, accumulates, resend, stream_resolver_failover_resend_threshold, setup_packet_duplication_count, cost, selected, lowest, weighted, combined, shortlists, prefers, rotates, among, near, candidates, picks, randomly, stick, cycles, deterministic, rotation, resolver_balancing_strategy, dns_response_fragment_timeout_seconds, persisted, flushed, local_dns_cache_flush_interval_seconds, local_dns_cache_persist_to_file, progress, follower, launching, local_dns_pending_timeout_seconds, 28800, local_dns_cache_ttl_seconds, lookups, memory, local_dns_cache_max_records, local_dns_port, local_dns_ip, exposes, resolve, reducing, well, local_dns_enabled, enabling, listens, prefer, ipv6, choice, understand, implications, codec, parsed, garbage, weaker, aead, stronger, 192, belong, ignore, forward, identity, chain, fill, connections, contain, 208, 222, 5353, formats, print, arguments, parameters, newer, intended, who, edit, give, execute, permission, zip, update, changed, defaults, notepad, modifications, dst, src, envs, certificate, envlists, hostname, mountlists, root, spaces, ros, pages, 84901929, nat, mount, volume, stored, variable, ports, volumes, compose, pwd, supported, architectures, injects, boots, containerized, builds, raspberry, archives, plus, convenience, correct, ways, launch, safely, needs, troubleshooting, permanent, firewalld, verify, nameserver, creating, propagation, minutes, depending, provider, asked, finishes, bash, curl, raw, githubusercontent, deploy, easiest, shorter, leave, space, actual, throughput, relevant, normally, cloud, icon, gray, proxied, ipv4, points, delegates, preparation, getting, started, exact, combination, maintain, stable, blocked, looks, basic, everyday, firewalls, reaches, forces, restricted, controlled, bypassing, traps, wraps, perfectly, disguised, legitimate, encrypts, breaks, tiny, scattered, splitting, routes, various, ensuring, never, easily, blockable, acting, techniques, pierce, did, circumvention, useless, yet, massive, stood, lifelines, actually, connected, day, authorities, didn, vpns, websites, pulled, plug, bandwidth, physically, cut, were, trapped, intranet, isn, theoretical, proven, severed, summary, sections, explain, area, detail, tuned, heavier, loads, scalable, resource, expose, limit, opportunities, balance, flexible, groups, chatter, common, optimization, detects, aligns, synchronization, selects, manages, problematic, selective, probability, logic, usable, filtered, resistance, brief, capabilities, advantages, contribution, appreciated, ongoing, tlapdy8apwkfhhoxebxgy8jhmechietqfh, trc20, tron, 0x517f07305d6ed781a089322b6cd93d1461bf8652, evm, eth, get, news, updates, announcement, copying, distribution, modification, governed, prohibited, civil, criminal, regulations, country, violations, national, legal, compliance, disrupt, damage, alone, responsible, indirect, incidental, consequential, damages, arising, inability, limitation, liability, express, implied, including, merchantability, fitness, particular, infringement, educational, disclaimer, openvpn, helper, almost, subsystem, fine, grained, professional, resolving, reactivation, 746s, 207s, 249s, 270s, 492s, 978s, tolerance, reliability, python, rust, language, surviving, harshest, simplicity, adaptive, indirectly, carry, protocols, reduced, complex, customize, complexity, resilience, others, layered, smux, unified, everything, curve25519, tls, 59b, 24b, header, classic, compared, scientific, oriented, carrying, responses, broad, follows, fundamentally, different, approach, behaviors, preserving, highest, worst, italiano, español, русский, english, فارسی, history, date, folders, branches, options, star, fork, notification, notifications, dismiss, alert, switched, accounts, resetting, focus, qualifiers, submit, email, contacted, input, seriously, provide, syntax, tips, clear, jump, pricing, premium, ons, powered, collections, trending, accelerator, maintainer, lab, programs, fund, partners, trust, center, forum, skills, ebooks, reports, webinars, stories, topic, industries, manufacturing, healthcare, industry, devsecops, modernization, case, nonprofits, startups, teams, enterprises, company, marketplace, changelog, blog, why, leaks, secure, fix, vulnerabilities, enforce, changes, plan, track, instant, dev, codespaces, automate, workflow, workflows, mcp, registry, agents, write, toggle, skip,

Text of the page (random words):
duplication system yes increases traffic to improve reliability configurable or can be disabled mtu tolerance better than dnstt works even with very small mtu because protocol overhead is very low failover system download speed 10mb local 0 978s 2 492s 0 270s upload speed 10mb local 3 249s 16 207s 1 746s resolver health checks and auto disable background reactivation of healthy resolvers local dns service on client to reduce dns hijacking with strong dns caching dns resolving through socks5 with dns caching fine grained professional configuration almost every subsystem is configurable no external helper software required no extra software is required if needed you can still combine it with socks or tools such as shadowsocks or openvpn disclaimer masterdnsvpn is provided as an educational and research project only provided without warranty this software is provided as is without any express or implied warranty including merchantability fitness for a particular purpose or non infringement limitation of liability the developers and contributors of this project accept no responsibility for any direct indirect incidental consequential or other damages arising from the use of this software or the inability to use it user responsibility using this project outside test environments may disrupt or damage network behavior the user alone is responsible for all consequences of installation configuration and use legal compliance using this project to bypass local laws may result in civil or criminal consequences please review the laws and regulations of your country before use the developers accept no responsibility for violations of local national or international laws by users license terms use copying distribution or modification of this software is governed by the license in the license file of this repository any use outside those terms is prohibited announcement and support channel for the latest news releases and project updates follow our telegram channel telegram channel if you like this project please support it by starring it on github it helps the project get discovered optional financial support ton network masterking32 ton evm compatible networks eth and compatible chains 0x517f07305d6ed781a089322b6cd93d1461bf8652 trc20 network tron tlapdy8apwkfhhoxebxgy8jhmechietqfh every contribution and every piece of feedback is appreciated support directly helps ongoing development and improvement key features and advantages a brief overview of the main capabilities of masterdnsvpn censorship resistance and harsh network survivability ️ designed to work on filtered networks unstable links and strict mtu environments lightweight custom protocol uses a custom protocol with retransmission logic to reduce overhead and increase usable dns payload multipath and packet duplication sends traffic through multiple paths and supports selective duplication to increase delivery probability on unstable networks smart resolver selection and health checks selects resolvers based on quality and health and manages problematic resolvers automatically mtu discovery and synchronization detects the practical mtu of working paths and aligns around it to reduce fragmentation and improve stability socks5 socks4 support and optimization optimized local proxy handling for common applications packed control blocks and lower control overhead groups ack control traffic together to reduce control chatter optional compression and request packing ️ reduces request counts and improves efficiency under small mtu conditions flexible encryption supports multiple encryption methods to balance speed and security optional client side local dns and caching can expose a local dns service reduce latency and limit hijacking opportunities scalable resource control ️ can run on small servers or be tuned for heavier loads this list is only a high level summary the related sections below explain each area in more detail battle tested during a total internet blackout masterdnsvpn isn t just a theoretical project it is battle tested and proven to work in environments where the global internet is completely severed recently during the 88 day internet blackout in iran authorities didn t just block vpns or filter websites they completely pulled the plug on international bandwidth with 99 of the connection to the outside world physically cut off users were trapped inside a closed local intranet standard circumvention tools are useless when there is no international internet to connect to yet during this massive shutdown masterdnsvpn stood out as one of the very few lifelines that actually kept users connected to the global web how did it survive a total shutdown instead of acting like a standard vpn masterdnsvpn relies on smart dns tunneling techniques to pierce through the blackout multiple resolvers it routes traffic through various dns resolvers ensuring the connection never relies on a single easily blockable path encryption data splitting it encrypts your data and breaks it down into tiny scattered pieces disguised as legitimate traffic it wraps these data pieces inside standard perfectly normal dns queries bypassing local traps because the traffic looks exactly like basic everyday dns requests firewalls allow it through the data gets resolved and reaches the outside world even if the network forces you to use their own restricted government controlled local resolvers this exact combination is what allowed masterdnsvpn to maintain a stable connection when the outside world was completely blocked setup and getting started section 1 ️ server setup section 1 1 domain setup and preparation prerequisite to receive dns requests directly on your server you must delegate a subdomain to it in short create two records one a record that points to your server ip and one ns record that delegates the tunnel subdomain to that a record step 1 1 1 🅰️ create an a record server address type a name a short name such as ns value your server ipv4 address example ns example com 1 2 3 4 cloudflare note if the domain uses cloudflare open the dns page and click the cloud icon next to the a record so it becomes gray dns only it must not remain proxied step 1 1 2 ️ create an ns record delegate the subdomain type ns name the tunnel subdomain for example v value target ns example com example v example com ns example com cloudflare note add the ns record normally cloudflare does not proxy ns records but make sure the ns a record is already set to dns only section 1 1 3 a short note about mtu shorter domain names leave more space for actual data inside each dns request for better throughput keep names short if you use cloudflare still keep the relevant records in dns only mode section 1 2 quick linux server installation step 1 2 1 automatic installation script if you want to deploy the server on linux the easiest method is the automatic installer script run this command on the server bash curl ls https raw githubusercontent com masterking32 masterdnsvpn main server_linux_install sh the script handles installation and configuration automatically when it finishes the server starts and the encryption key is shown in the terminal log and also written to encrypt_key txt next to the executable keep this key safe step 1 2 2 important notes after installation during installation you will be asked for a domain it must be the same delegated subdomain you configured in the ns record for example v example com after creating dns records wait for propagation this may take from a few minutes to several hours and in some cases up to 48 hours depending on ttl and the dns provider to verify the dns setup you can use tools such as dig or nslookup for example dig v example com ns or nslookup type ns v example com for a direct query to the new nameserver dig ns example com v example com a if the server firewall is enabled allow udp port 53 example for ufw sudo ufw allow 53 udp sudo ufw reload for firewalld sudo firewall cmd add port 53 udp permanent sudo firewall cmd reload if port 53 is already occupied by another service such as systemd resolved see the troubleshooting section fixing port 53 already in use the encryption key encrypt_key txt is shown after installation copy it and store it safely because the client needs it to connect section 2 installation and launch client and server you can install and run this project in two ways use the prebuilt binaries recommended for most users run directly from source with go recommended for developers section 2 1 use prebuilt releases recommended for convenience prebuilt client and server binaries are published in the release page download the correct archive for your operating system and extract it note release archives usually include the binary plus sample configuration files client download links operating system architecture suitable for direct download windows amd64 64 bit windows 10 and 11 download windows client ️ windows x86 32 bit older 32 bit windows systems download windows x86 client ️ windows arm64 windows on arm devices download windows arm64 client ️ macos arm64 apple silicon macs m1 m2 m3 download macos client ️ macos amd64 intel macs download macos intel client ️ linux amd64 64 bit modern distributions ubuntu 22 04 debian 12 download linux client ️ linux x86 32 bit older 32 bit linux systems download linux x86 client ️ linux legacy amd64 64 bit older distributions ubuntu 20 04 debian 11 download linux legacy client ️ linux legacy arm64 older arm64 linux systems that need broader compatibility download linux legacy arm64 client ️ linux arm arm64 arm servers raspberry pi and similar boards download linux arm client ️ linux arm armv7 32 bit arm boards and older embedded linux devices download linux armv7 client ️ linux arm armv6 older arm boards and lightweight linux devices download linux armv6 client ️ linux arm armv5 very old arm devices and embedded linux systems download linux armv5 client ️ linux riscv64 risc v linux boards and servers download linux riscv64 client ️ linux mips mips big endian mips linux and router platforms download linux mips client ️ linux mips mipsle little endian mips linux and router platforms download linux mipsle client ️ linux mips mips64 64 bit big endian mips linux systems download linux mips64 client ️ linux mips mips64le 64 bit little endian mips linux systems download linux mips64le client ️ termux android arm64 modern android phones running termux download termux arm64 client ️ termux android armv7 older android phones running 32 bit termux environments download termux armv7 client ️ server download links use these if you do not want the automated linux installer operating system architecture suitable for direct download windows amd64 64 bit windows server windows 10 and 11 download windows server ️ windows x86 32 bit older 32 bit windows systems download windows x86 server ️ windows arm64 windows on arm devices download windows arm64 server ️ linux amd64 64 bit ubuntu 22 04 debian 12 servers download linux server ️ linux x86 32 bit older 32 bit linux systems download linux x86 server ️ linux legacy amd64 64 bit older servers ubuntu 20 04 debian 11 download linux legacy server ️ linux legacy arm64 older arm64 linux systems that need broader compatibility download linux legacy arm64 server ️ linux arm arm64 arm servers download linux arm server ️ linux arm armv7 32 bit arm servers and embedded linux devices download linux armv7 server ️ linux arm armv6 older arm boards and lightweight linux devices download linux armv6 server ️ linux arm armv5 very old arm devices and embedded linux systems download linux armv5 server ️ linux riscv64 risc v linux boards and servers download linux riscv64 server ️ linux mips mips big endian mips linux and router platforms download linux mips server ️ linux mips mipsle little endian mips linux and router platforms download linux mipsle server ️ linux mips mips64 64 bit big endian mips linux systems download linux mips64 server ️ linux mips mips64le 64 bit little endian mips linux systems download linux mips64le server ️ macos arm64 apple silicon macs download macos server ️ macos amd64 intel macs download macos intel server ️ termux android arm64 modern android termux environments download termux arm64 server ️ termux android armv7 older android 32 bit termux environments download termux armv7 server ️ section 2 2 masterdnsvpn docker image section 2 2 1 ️ overview this docker image runs the masterdnsvpn server in a containerized environment and supports multi architecture builds it automatically boots a default configuration if none exists injects your domain on first startup stores persistent data in data section 2 2 2 supported architectures linux amd64 linux arm v5 linux arm v7 linux arm64 v8 linux mips64le section 2 2 3 quick start run the container with docker docker run d name masterdnsvpn restart unless stopped e domain v example com v pwd data data p 53 53 tcp p 53 53 udp ghcr io masterking32 masterdnsvpn latest section 2 2 4 example with docker compose services masterdnsvpn image ghcr io masterking32 masterdnsvpn latest restart unless stopped environment domain v example com volumes data data ports 53 53 tcp 53 53 udp section 2 2 5 ️ required environment variables variable description domain your dns domain required on first run ️ if domain is not set on first boot the container will stop with an error section 2 2 6 persistent data stored in data server_config toml encrypt_key txt you can mount it as volume v data data section 2 2 7 mikrotik routeros usage for mikrotik containers use latest v7 mikrotik routeros destination nat port udp tcp 53 to your container full mikrotik container setup https help mikrotik com docs spaces ros pages 84901929 container example container mounts add dst data list masterdnsvpn src containers mounts masterdnsvpn container envs add key domain list masterdnsvpn value v example com container add check certificate no dns 1 1 1 1 envlists masterdnsvpn hostname masterdnsvpn interface masterdnsvpn layer dir mountlists masterdnsvpn name masterdnsvpn remote image ghcr io masterking32 masterdnsvpn latest root dir containers data masterdnsvpn start on boot yes section 2 2 8 notes dns port 53 is required udp tcp do not run another dns service on the same host designed for production use but still lightweight no systemd or host modifications required section 2 3 preparing and running the client on windows after downloading the windows package extract it open client_config toml with a text editor such as notepad replace the default values with your real domain encryption key and resolver list run the client executable configure your browser or app to use the local socks5 proxy at 127 0 0 1 18000 unless you changed the defaults section 2 4 preparing and running on linux macos after downloading the package on linux sudo apt update sudo apt install unzip nano extract the archive unzip masterdnsvpn_client_linux_amd64 zip ls give execute permission if needed chmod x masterdn...