MintFlow NetStack

MintFlow NetStack is a performant, purpose-built, and highly customizable networking toolkit based on Cisco's open-source fd.io VPP technology. It can capture all system traffic, send it over local Internet or VPN/proxy connections using advanced routing rules, and can selectively capture and rewrite HTTP/HTTPS traffic. It also supports customizable MTU/split DNS settings and diagnostic utilities such as traceroute and ping. MintFlow NetStack does NOT provide any VPN/Proxy service, you should configure your existed or self hosted VPN/Proxy servers as virtual interfaces and customize with advanced routing behavior to satisfy your various scenarios. MintFlow NetStack can support following example scenarios, you can fully customize your scenario: - Route all traffic through a VPN/Proxy interface, or split VPN traffic across multiple interfaces for maximum privacy - Route selected traffic through VPN interface and rest to the local internet for unblocking some limit - Route all traffic through local Internet for override provider DNS or app traffic debugging KEY FEATURES: - Powered by a high-performance, actively maintained lower level network stack - Plain-Text based profile to manage different combination of VPN/Proxy/DNS/HTTP Engine settings, easy for share and backup - Custom traffic routing & blocking by CIDR prefix, CIDR set, Domain, or DomainSet - Transparent proxying traffic to the local internet based on Domain or DomainSet, leveraging VPP’s advanced host stack capabilities - Includes a high-performance in-app DNS resolver with support for advanced split DNS - Includes a high-performance in-app HTTP Engine to handle HTTP/HTTPS traffic belong to interested domains - Customizable system VPN settings, including MTU and DNS servers HTTP Engine Features: - selective HTTP/HTTPS traffic processing, with a locally generated self-signed CA installed and trusted by user for HTTPS by MITM - Work with any traffic destination such as L3VPN or L4Proxy or Direct local Internet - Capture anytime interested domains traffic when VPN is running - Auto decompress HTTP body, support preview png/jpeg images, CSS/JS/HTML/JSON with TreeSitter based syntax highlighting - Block malicious or ADs HTTP/HTTPS traffic by using HTTP Engine URL Rewrite Capability with reject action or redirect action with new target URL - More Rewrite capability and Scripting capability will be added in coming releases - Prefer HTTP/2 for upstream connection even local App does not support HTTP/2 for performance - Using Post quantum crypto(PQC) for HTTPS/TLS negotiations for maximum your privacy and safety VPN Protocols supported: - High-performance fd.io VPP native WireGuard support, Import WireGuard configurations via QR code, iCloud config files, or create manually - VMESS-WS-TLS support, created manually - SHADOWSOCKS with obfs support, created manually - More protocols will be released in coming releases, stay tuned! Diagnose Capability: - Built-in ping and trace route tools for network troubleshooting - Inspect in-app DNS activity to debug device app traffic and gather domains that need to be processed by HTTP Engine Lean UI: - Modern, intuitive interface with a clean design - Dark mode support Automation: - Siri Shortcuts support for automation and quick actions - Flexible On-Demand VPN rules which let your connect/disconnect on different network conditions MintFlow NetStack is highly customizable networking toolkit, we strongly recommend you to read the online manual below to use it more effectively: http://mintflow.galaxnet.cc/manual Notes: 1. fd.io VPP is the actively maintained open-source version of Cisco’s Vector Packet Processing (VPP) technology 2. WireGuard® is a registered trademark of Jason A. Donenfeld 3. WireGuard QR code and config file compatibility tested with Mullvad, Windscribe, and others Special Notes: The price may increase as more advanced features are added. Buy now to lock in all current and future features at today’s price