dndx/phantun

Health v2 · maintenance only

Adoption not part of the score

2376 stars · 219 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Phantun is a lightweight, high-performance UDP-to-TCP obfuscator written in safe Rust that disguises UDP packets as TCP streams to pass through Layer 3/Layer 4 firewalls and NATs. It preserves UDP semantics like out-of-order delivery while avoiding TCP retransmission and flow-control overhead, and is commonly used where UDP is blocked or throttled but TCP is allowed.

Use cases

• make udp traffic pass through firewalls that block udp
• run wireguard over tcp to bypass nat restrictions
• obfuscate udp packets as tcp streams
• tunnel udp through stateful firewalls
• avoid udp throttling by isps
• traverse napt devices with fake tcp connections

When to choose

• UDP is blocked or throttled but TCP passes through L3/L4 firewalls or NATs
• you need high throughput without TCP retransmission/flow-control overhead
• you want a fast, low-overhead alternative to udp2raw
• you need to tunnel WireGuard or other UDP protocols through restrictive networks

When to avoid

• traffic must pass through L7 proxies or deep packet inspection that validates real TCP behavior
• you need full TCP reliability features like retransmission and congestion control
• you need a cross-platform GUI tool - Phantun is Linux-focused and requires kernel IP forwarding and nftables/iptables rules
• you need MIPS support as a first-class target

Facets

cli-tool · maturity active

networking proxy security cli networking privacy censorship-circumvention security rust cli self-hosted udp-over-tcp traffic-obfuscation nat-traversal firewall-bypass wireguard tun fake-tcp linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="dndx/phantun")