Socks5 Proxy

Socks5 Proxy routes your device's internet traffic through an encrypted SSH tunnel using Android's built-in VPN framework — no root access required. It creates a local TUN network interface that captures all outgoing IPv4 traffic, forwards it through a secure SSH connection to your server, and sends it out to the internet from there. This effectively masks your device's real IP address and encrypts all data in transit between your device and the SSH server.

=== WHAT IT DOES ===

When connected, every app on your device — browsers, email, messaging, streaming — has its traffic routed through the SSH tunnel automatically. You don't need to configure individual apps. The persistent notification shows real-time connection status and data usage so you always know what's happening.

It also includes a local SOCKS5 proxy (RFC 1928 compliant) on 127.0.0.1:1080, allowing individual apps like browsers to use the tunnel without enabling the system-wide VPN. An interactive terminal lets you open shell sessions directly to the remote server from within the app, useful for server administration, file management, or running commands.

=== KEY FEATURES ===

• System-Wide VPN — Routes all device IPv4 traffic through an SSH tunnel via Android VpnService. No root needed.

• SOCKS5 Proxy — Built-in RFC 1928 proxy on localhost:1080 for per-app or per-browser use.

• SSH Key Support — Full support for RSA (up to 4096-bit), ECDSA (P-256/P-384/P-521), and Ed25519 key algorithms.

• Dual Authentication — Connect using password authentication or SSH private key authentication with optional encrypted passphrases.

• Interactive Terminal — Open multiple concurrent shell sessions to the remote server with PTY resize support.

• DNS over TCP — Intercepts DNS queries from the VPN interface and resolves them through the encrypted tunnel, preventing DNS leaks.

• Secure Storage — SSH private keys are encrypted with AES-256-GCM using the Android Keystore (hardware-backed on supported devices). Passwords and key passphrases are stored in EncryptedSharedPreferences.

• Connection Profiles — Save multiple server configurations with different authentication methods and switch between them quickly.

• Auto-Reconnect — Exponential backoff reconnection with configurable keep-alive interval to maintain connectivity on unstable networks.

• Boot Start — Optionally start the VPN automatically when your device boots.

• Traffic Statistics — Real-time upload and download byte counters shown in the notification…