🧅 MoaV 1.9 is out.
Mother of All VPNs -- one command, a $5 VPS, 16+ censorship-circumvention protocols on a single box.
Run MoaV and you're not just getting yourself out; you're part of the free internet's infrastructure, carrying your loved ones, and strangers behind the wall, out with you. Enable
@PsiphonConduit +
@torproject Snowflake and someone breathes through your bandwidth tonight.
The design philosophy isn't elegance, it's redundancy: the censor has to block every protocol; you only need one to get through.
----
Since 1.8.4, a major anti-DPI + reliability upgrade for server and client 👇
🏗️ Project maturity
• Server and client now both under the MotherofallVPNs org.
• CONTRIBUTING guide
• Server:
• Client:
•
🛡️ Harder to detect
• wstunnel now wraps WireGuard in real TLS (wss://): the WebSocket upgrade used to travel in cleartext and was trivially DPI-fingerprintable. Now it just looks like HTTPS.
• New AnyTLS protocol (opt-in).
• XDNS can tunnel over AAAA records, not only TXT.
• telemt anti-DPI MSS-clamping knobs for Fake-TLS.
📡 Network tuning, built in
• moav net: BBR + fq, RAM-aware socket buffers
• moav doctor net now flags packet drops, PMTU black holes, CGNAT and MTU issues
🔐 Reliability that actually bit operators
• TLS certs were silently expiring at ~90 days: auto-renewal is fixed, and moav cert manages it.
• Killed a class of "everything breaks after an update" bugs: Reality short_id blanking, and users hitting "unknown UUID" after a re-bootstrap. nobody gets cut off by a maintenance step.
🖥️ The native client grew up too: moav-client
Feed it one MoaV subscription bundle and it:
• delegates real crypto to sing-box + optional sidecars (MasterDNS, AmneziaWG, Psiphon, TrustTunnel, Tor),
• latency-probes every endpoint end-to-end through its own tunnel and load-balances across the healthy ones,
• exposes a single local SOCKS5 / HTTP proxy: point your browser or anyone in your network at it and you're always on the fastest working endpoint,
• ships a React dashboard: live endpoint health, per-protocol throughput, streaming debug log.
One command to install (moavc). No config wrangling import once, it auto-falls-back across protocols.
👉
🧪 Actually tested now
• Full CI on every PR: shellcheck, Go tests, compose validation.
• A real end-to-end harness stands up the whole server stack and connects through every protocol: Reality, Trojan, Hysteria2, AnyTLS, Shadowsocks-2022, XHTTP, XDNS, wstunnel, WireGuard, AmneziaWG, telemt. verifying real exit IPs. moav-client got its own full test suite + CI, and the e2e now does a true server↔client round-trip.
• Component bumps: sing-box 1.13.12, xray v26.6.27, wstunnel 10.6.1, telemt 3.4.23.
—
Spin up the server, hand out a bundle, point the client at it.