SadeghHayeri/GreenTunnel

Health v2 · maintenance only

Adoption not part of the score

4902 stars · 309 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

GreenTunnel is an anti-censorship tool that bypasses ISP Deep Packet Inspection (DPI) systems by splitting TLS ClientHello packets and using encrypted DNS (DoH/DoT). It ships as a CLI, a library, and an Electron desktop app that runs a local proxy.

Use cases

• bypass ISP website blocking caused by deep packet inspection
• access blocked websites without a VPN
• prevent DNS-based blocking by resolving DNS over HTTPS
• split TLS ClientHello so the SNI hostname is not visible to DPI
• run a local proxy to defeat hostname-based censorship
• restore system proxy settings automatically after crashes

When to choose

• your ISP blocks sites via DPI based on hostname/SNI inspection
• you need lightweight censorship circumvention without hiding your IP
• you want encrypted DNS (DoH/DoT) to avoid DNS-level blocking
• you prefer a simple desktop app or CLI over configuring a full VPN

When to avoid

• you need to hide your IP address or location - it is not a VPN
• censorship is not hostname/DPI-based (e.g., IP blocking or port filtering)
• you need full traffic encryption or anonymity
• your environment cannot run Node.js 24+ or install a local proxy

Facets

application · maturity active

proxy security networking privacy cli censorship-circumvention privacy networking security cross-platform cli anti-censorship dpi-bypass sni-splitting dns-over-https dns-over-tls electron-app local-proxy firewall-bypass nodejs desktop docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="SadeghHayeri/GreenTunnel")