An self-hosted secure tunnel for your own VPS. Rust client and server, desktop and Android apps, and encrypted connection invites all opensource. Carries SOCKS5 and HTTP CONNECT traffic over TLS + WebSocket.
- DPI‑resistant SOCKS5/HTTP tunnel over TLS+WebSocket
- Self‑hosted single‑VPS setup
- Implemented in Rust
- Supports both client and server binaries
- Can be launched via --proxy-server flag
- Available as AUR package for Arch Linux
BibaVPN is a self-hosted Rust tunnel that carries SOCKS5 and HTTP CONNECT traffic over TLS + WebSocket.
- for
- Developers and sysadmins who want a DIY VPN on a single VPS.
- pricing
- open source
- license
- MIT
works withWindowsmacOSLinuxAndroidDockerRust
Key features
6 features of BibaVPN
- TLS + WebSocket transport — Encapsulates SOCKS5 and HTTP CONNECT traffic in encrypted WebSocket streams.
- Encrypted invitations — Import a biba:// URI with a passphrase to connect without manual config.
- Multi-platform clients — Desktop apps for Windows, macOS, Linux and an Android app.
- Multiplexed sessions — Reuses connections across 1-4 WebSocket streams, with separate UDP relay session.
- Configurable traffic shaping — Adjust padding, jitter, decoy traffic and TLS profiles to alter wire appearance.
- Open-source Rust core — MIT-licensed client and server code that can be inspected or extended.
Use cases
- Secure personal VPN on a single VPS
- Bypass DPI filters with custom traffic shaping
- Provide a SOCKS5 proxy for browsers and tools
- Relay UDP traffic for games or VoIP
BibaVPN FAQ
Is BibaVPN audited for security?+
No third-party audit has been performed; security depends on configuration and network.
Will it guarantee undetectability?+
DPI resistance depends on your network and settings and is not guaranteed.
What platforms are supported?+
Clients exist for Windows, macOS (Apple Silicon), Linux, and Android; iOS is unfinished.
How do I connect to a server?+
Import an encrypted biba:// invitation URI and enter its passphrase in the client.
Do I need to run my own server?+
Yes, you host the server on a VPS you control; the app does not include a hosted service.
Can I use Docker for quick testing?+
Yes, pre-built Docker images let you run a local tunnel without building Rust binaries.
Summarized by DevHunt from github.com · Oct 31, 2026. Details may change; check the official site.










