FCAE VPN logo

FCAE VPN

Break through censorship with automatic endpoint discovery, encrypted MASQUE / WireGuard tunneling, and local SOCKS5 & HTTP proxy. Built for heavily restricted networks.

Windows Linux macOS Android LICENSE
⬇️ Download 📁 Source Code

🔧 How It Works

Connects to Cloudflare's WARP network — the infrastructure behind 1.1.1.1

1

Account Provisioning

Creates WARP device identity & obtains dedicated IPv4/IPv6 + WireGuard keypairs.

2

Endpoint Scanning

Probes Cloudflare edge IPs across multiple ports to find reachable gateways.

3

Tunnel Establishment

Encrypted MASQUE, WireGuard, or WARP-in-WARP tunnels to the best edge.

4

Local Proxy

SOCKS5 (:1819) & HTTP (:1820) proxies for all your apps.

🏗️ Architecture

From your app to the public internet

Your Device
Any Application
Browser, CLI, or system-wide TUN
↓
Local Proxies
SOCKS5 :1819 · HTTP :1820
Apps connect through FCAE VPN locally
↓
FCAE VPN Client
Core Engine
Netstack
TCP/IP Stack
Scanner
Endpoint Discovery
Obfuscation
aether-noize
Health
Auto-Reconnect
↓
Encrypted Tunnels
Best Available Transport
MASQUE HTTP/3
QUIC
MASQUE HTTP/2
TLS
WireGuard
UDP
WARP-in-WARP
Double WG
↓
Cloudflare WARP Edge
162.159.192.x
Automatic endpoint discovery
↓
Freedom
🌐 Public Internet

📊 Protocol Comparison

Choose the right tunnel depending on network restrictions

ProtocolTransportDPI ResistanceSpeedUse Case
MASQUE (HTTP/3)QUIC over UDPBestFastDefault, most resistant
MASQUE (HTTP/2)TLS over TCPBestFastFallback when QUIC blocked
WireGuardUDPModerateFastestWhen UDP is allowed
WARP-in-WARPNested UDPHighModerateExtra obfuscation layer

✨ Features

Built for restricted networks

🔍
Automatic endpoint discovery with end-to-end data-plane validation.
🔐
MASQUE (HTTP/3 QUIC / HTTP/2), WireGuard, and WARP-in-WARP support.
🎭
Traffic obfuscation with configurable profiles (aether-noize).
🔄
Automatic reconnection with quick-reconnect on failure.
🔌
Local SOCKS5 and HTTP proxies for any application.
🖥️
Native GUI on all platforms (ImGui + DX11 / OpenGL / Material UI).

💻 Supported Platforms

Native builds for major desktop and mobile systems

🪟
Windows
DirectX 11 + ImGui
🐧
Linux
GLFW + OpenGL + ImGui
🍎
macOS
GLFW + OpenGL + ImGui
📱
Android
Kotlin Material UI

🔨 Building from Source

For developers who want to compile FCAE VPN themselves

Requirements

Rust engine

cargo build --manifest-path core/Cargo.toml -p aether-ffi --release

Native GUI

cmake -B build -DAETHER_TARGET=LINUX_X64
cmake --build build --config Release

Targets: LINUX_X64, WIN_X64, MACOS_ARM64, MACOS_X64, ANDROID_ARM64.

🤝 Want to Contribute?

Open Source & Open to Contributions!

LICENSE

FCAE VPN welcomes pull requests, bug reports, and feature ideas. Join us in building a better censorship circumvention tool.

⭐ Star & Fork on GitHub

👥 Contributors

People who built FCAE VPN

Plangto avatar
@Plangto
 Bat-Script avatar
@Bat-Script

🙏 Credits

Standing on the shoulders of open-source giants

Aether

by CluvexStudio

The core censorship circumvention engine. Provides MASQUE, WireGuard, and WARP-in-WARP protocols.

Dear ImGui

by ocornut

Immediate-mode GUI library used for all native desktop rendering.

hev-socks5-tunnel

by heiher

High-performance SOCKS5 tunnel engine written in C, running in-process.

Psiphon

by Psiphon-Labs

The Psiphon tunnel core. Circumvention protocol with egress region selection and protocol chaining.

Quiche

by Cloudflare

Cloudflare HTTP/3 and QUIC implementation. Used as the QUIC transport backend.

Wintun

by WireGuard

A TUN driver for Windows. High-performance Layer 3 network interface for tunneling.

tun2socks

by xjasonlyu

Go library that transparently routes TUN device traffic through SOCKS5 proxy. Powers TUN mode on all platforms.

zeptun

by Noisemux

Zig TUN engine, statically linked and running in-process. An alternative to tun2socks on Linux, macOS, and Android.