V1.0.6 · WINDOWS · ANDROID · LINUX · MACOS

One client instead of a whole zoo

Everything you kept in separate apps — in one, with one set of routing rules. On Windows, Android, Linux (beta) and macOS (beta).

An AmneziaWG client
A Hysteria2 client
A VLESS · REALITY client
+ Trojan, TUIC, WireGuard, SS, VMess
Neon Tunnelyour protocols · one set of rules
Through your servereverything else
Directlocal sites and home
Blockedads and trackers

SHARING TO YOUR HOME NETWORK · PROXY

PS5
Nintendo Switch
TV

store, downloads, browser — through the same tunnel and the same rules

AmneziaWGHysteria2VLESS+5 protocolsNeon Tunnelone rule setVia serverDirectBlockedSHARING TO YOUR HOME NETWORK · PROXYPS5SwitchTV

01 · PROTOCOLS

All your servers in one list

VLESS from one provider, AmneziaWG from another, Hysteria2 on your own server — Neon Tunnel connects to all of them and runs them through one routing engine.

  • AmneziaWG 1.0–3.1 with every parameter
  • VLESS with REALITY and XHTTP alongside QUIC protocols
  • One set of rules for every server
PROTOCOLS

TLS · REALITY

VLESSREALITY · XHTTP · gRPC · WS · Vision
TrojanTLS · WS · gRPC
VMessWS · gRPC · H2
Shadowsocks2022

QUIC

Hysteria2Salamander · port hopping
TUIC v5QUIC

WIREGUARD

AmneziaWG1.0 · 1.5 · 2.0 · 3.0 · 3.1
WireGuard.conf · QR · wg://
↓ one routing enginerules → proxy / direct / block
PROXY

CONNECTED · 1

VLESS · REALITY · NL38ms · live

AVAILABLE · 4

3x-ui subscription12 servers ·45d left12.4 GiB / 50.0 GiB
AmneziaWG · NL-2awg.example.net:518202h ago
Hysteria2 · DEclash · hy2-de, tuic-de5h ago
WireGuard · FIwg.example.org:518209h ago

02 · SUBSCRIPTIONS & IMPORT

Paste it as is — no YAML, no converters

A subscription URL, a single link, a .conf file, a vpn:// key or a QR code — the client works out what it is and shows what will be imported.

  • Subscriptions: link lists, Xray JSON, sing-box JSON
  • Traffic left and expiry at a glance
  • Happ routing profiles move over with one link
IMPORT TUNNEL

Pick a source — we'll preview what's about to be imported.

Import
File.conf · YAML · .txt · drag & drop
PasteWG body · clash YAML · protocol URL
QRWG · subscription · protocol URL

https://sub.example.net/
a7f3c9e1d2…

Subscription

Servers

12

Protocols

6 vless · 4 hysteria2 · 2 tuic

Quota

12.3 GiB / 100.0 GiB
https://…vless://hysteria2://tuic://ss://.confvpn://happ://routing

Add a tunnel

How are you bringing it in?

Scan QR codeWG, subscription or protocol URL
Paste configAuto-detects WG, clash, or URL
Pick a file.conf · YAML · .txt — up to 1 MB
Detected vless URL in clipboardPaste

03 · COMPATIBILITY

Works with the servers you already run

Checked against the panels and servers people actually deploy — on our own test bench, protocol by protocol, version by version.

  • Device-limited subscriptions — only with your consent
  • Keys from the Amnezia app import as they are
COMPATIBILITY

TESTED WITH

  • 3x-uipanel · up to v3.10
  • Xray-core26.x · REALITY · XHTTP · PQ
  • Hysteria2official server · 2.13
  • AmneziaWGserver · 1.0 – 3.1
  • Remnawave3.4 · device limit (HWID)
  • Amnezia VPNvpn:// keys
  • WireGuardwg-quick · .conf

UNDERSTANDS FORMATS

base64Xray JSONsing-box JSONClash YAML · 1 proxyhapp://routing

04 · ROUTING

You decide what goes through your server and what goes direct

Rules by domain, geosite/geoip, IP ranges and lists decide for every address: through your server, direct, or blocked. Local sites and your home network can go direct, the services you need through the server, and ads get cut off. Ready-made rule sets install in one tap, and “Check an address” tells you which rule will fire.

  • Starter packs: AI services, streaming, social networks, ad blocking
  • Reorder rules by dragging
  • On Android, pick which apps use the VPN
ROUTING

ACTIVE PRESET

AI Services

1 block · 8 direct · 11 proxy

Check

↪ Through the proxy: rule geosite:openai

GEO·SITEgeosite:category-ads-allBlock
IP/CIDR192.168.0.0/16Direct
GEO·SITEgeosite:openaiProxy
DOMAINclaude.aiProxy

Everything else: direct

Routing
Routing rulesProxy for apps

ACTIVE PRESET

AI Services

1 block 8 direct 11 proxy

ALL PRESETS3

AI Services
1 block 8 direct 11 proxy Updated never
Streaming Bundle
1 block 8 direct 11 proxy Updated never
Work
1 block 4 direct 6 proxy Updated 9h ago

05 · KILL SWITCH · WINDOWS

If the VPN drops, nothing leaks around it

While the tunnel is on, the PC reaches the internet only through it. Your printer, router and NAS stay reachable — in Auto mode the client tells your home network from a café.

  • Blocking at the Windows Filtering Platform level
  • Local network: Auto / Always / Never
  • On Android — the system Always-on VPN

Active while Neon Tunnel is running.

KILL SWITCH
PC VPN tunnel ✓ network ✕ outside the tunnel — no Printer · router · NAS ✓

Block all internet if VPN drops

Allow local network (LAN) Auto ▾

Currently detected: Private

✓ LAN allowed

06 · LAN SHARING

Your PlayStation and TV — through the same tunnel

Turn on the LAN proxy and enter this computer's address in the network settings of your console, TV or set-top box — they go through the same tunnel and the same rules. On Android it works over a hotspot too.

  • HTTP and SOCKS5 on one port
  • Optional password
  • Auto: only on home networks

Goes through the proxy: store, downloads, browser.

LAN PROXY
tunnel PC with Neon Tunnel 192.168.1.7:7890 PlayStation TV Laptop

Share the proxy

Shares the proxy with the local network: devices that set this PC as their proxy (port 7890) use the tunnel. Auto: only on networks Windows marks Private.

Auto ▾

Address: 192.168.1.7:7890

PlayStation → Settings → Network → Proxy server

address 192.168.1.7port 7890

Settings

General

LAN proxy

Share the proxy

Shares the proxy with the local network: devices that set this device as their proxy (port 7890) use the tunnel. Auto: only on Wi-Fi or Ethernet — to share a mobile hotspot, choose Always.

Always

Address: 192.168.43.1:7890

Require password

Anyone on the network can connect

Always on, no password: anyone on this network can use your tunnel.

Changes apply on the next connect.

07 · APPEARANCE

Three themes and eight neon accents

Light, dark or warm — or follow the system — with an accent to your taste. Try it right here: the page recolours.

  • Interface in Russian, English, German and French
  • Large fonts don't break the screens
APPEARANCE

Mode

Accent color

Settings

Appearance

Mode

Accent color

08 · ACTIVITY

See where every connection goes

The feed shows every connection — through your server, direct or blocked — and which rule decided. And if it says “connected, but no traffic”, the client hints at what's going on.

  • Live speed and traffic
  • Connection check: reachability, latency, download speed
  • Problem reports you see before they're sent
ACTIVITY

Activity Live · last 8 events

4 active
PROXY

github.com:443

PROXY · geosite:github

↑18 KB ↓2.4 MB3s
DIRECT

192.168.1.20:445

DIRECT · 192.168.0.0/16

↑4 KB ↓310 KB8s
BLOCK

ads.example-tracker.com:443

BLOCK · geosite:category-ads-all

—12s
DIRECT

store.steampowered.com:443

DIRECT · geosite:steam

↑9 KB ↓1.1 MB40s
PROXY

docs.python.org:443

PROXY · everything else

↑6 KB ↓870 KB1m

Throughput · Last 60 s

rx 1.2 MB/s · tx 84 KB/s

Clash
Connectednl-1 · handshake 38ms
🇳🇱 Netherlands
ThroughputLast 60 s
rx 1.2 MB/stx 84 KB/s
ActivityLive · last 8 events4 active
PROXY
github.com:443PROXY · geosite:github
↑18 KB ↓2.4 MB3s
BLOCK
ads.example-tracker.com:443BLOCK · geosite:category-ads-all
—8s
DIRECT
192.168.1.20:445DIRECT · 192.168.0.0/16
↑4 KB ↓310 KB12s
DIRECT
store.steampowered.com:443DIRECT · geosite:steam
↑9 KB ↓1.1 MB40s
PROXY
docs.python.org:443PROXY · everything else
↑6 KB ↓870 KB1m

09 · FEEDBACK

Found a bug or have an idea?

Write to us — we read everything. For a connection problem, the “Report a problem” button inside the app is better: it attaches logs with keys and addresses removed, and you see it before it's sent.

FEEDBACK
Type

Don't paste keys or subscription links here

Download Neon Tunnel

Installing a test build

  • Windows will warn that the publisher is unknown, because the test build's certificate is self-signed: choose “More info → Run anyway”.
  • On Android, allow installing apps from this source when the system asks.
  • On Ubuntu 24.04, open a terminal in the folder with the download and run sudo apt install ./neon-tunnel_1.0.6.2_amd64.deb
  • Drag the app from the .dmg to Applications. The test build is not notarized, so macOS may refuse the first launch: open it once, then System Settings → Privacy & Security → “Open Anyway”.

How to update

Neon Tunnel tells you itself when a new version is out. To update by hand:

  • Windows: download the installer above and run it. It closes Neon Tunnel, installs the new version over the old one and keeps your tunnels, subscriptions and settings.
  • Android: download the APK above and open it. If the browser asks, allow it to install apps. Android asks whether to update the app: tap Update. Tunnels and settings stay.
  • Linux: in the folder with the download, run sudo apt install ./neon-tunnel_1.0.6.2_amd64.deb. apt upgrades the installed version; tunnels and settings stay.
  • macOS: download the .dmg above, quit Neon Tunnel, open the .dmg and drag Neon Tunnel to Applications, replacing the old copy. The first launch of the new copy asks for confirmation again, as on the first install. Tunnels and settings stay.

Previous versions →

Download not working? The same builds are on the GitHub mirror →