A lightweight, high-performance proxy server for bypassing network restrictions using VLESS over WebSocket with TLS.

• VLESS Protocol Support: Full VLESS over WebSocket with TLS encryption
• Client Compatible: Works with v2rayN, v2rayA, Clash, ShadowRocket, and more
• Lightweight: Minimal resource footprint with core logic in ~200 lines
• Production Ready: Includes traffic metering, health checks, and graceful shutdown
• Flexible Deployment: Standalone or integrated with admin servers
• Memory Efficient: Optimized goroutine management and resource cleanup
• High Performance: Concurrent connections optimized for Go 1.23

• Go 1.23+ or Docker
• Basic proxy/VPN knowledge

git clone https://github.com/unchainese/unchain.git
cd unchain
go mod download
cp config.example.standalone.toml config.toml
# Edit config.toml
go run main.go

docker build -t unchain .
docker run -p 80:80 \
  -e SUB_ADDRESSES="your-domain.com:443" \
  -e ALLOW_USERS="your-uuid" \
  unchain

Unchain uses TOML config or environment variables.

SubAddresses = 'domain.com:443'
AppPort = '80'
AllowUsers = 'uuid1,uuid2'
LogFile = ''
DebugLevel = 'info'
EnableDataUsageMetering = 'true'

APP_PORT=80
SUB_ADDRESSES=domain.com:443
ALLOW_USERS=uuid1,uuid2

• /wsv/{uid} - VLESS WebSocket endpoint
• /sub/{uid} - Subscription URL generator
• / - Health check

curl http://localhost:80/sub/your-uuid

Import the generated VLESS URL into your client (v2rayN, Clash, etc.).

Client --VLESS/WS/TLS--> Reverse Proxy --WS--> Unchain --TCP/UDP--> Target

Unchain runs behind a reverse proxy (Nginx/Cloudflare) handling TLS and WebSocket upgrades.

├── main.go                 # Entry point
├── server/                 # Core server
│   ├── app.go             # HTTP server
│   ├── app_ws_vless.go    # VLESS handler
│   ├── app_ping.go        # Health check
│   └── app_sub.go         # Subscription
├── global/                 # Utilities
│   ├── config.go          # Config management
│   └── logger.go          # Logging
├── schema/                 # Protocols
│   ├── vless.go           # VLESS parser
│   └── trojan.go          # Trojan support
├── client/                 # Client utilities
│   ├── client.go          # SOCKS5 proxy
│   ├── websocket.go       # WS client
│   ├── proxy.go           # Coordination
│   ├── relay_*.go         # Relays
│   ├── socks5_*.go        # SOCKS5
│   └── geo.go             # GeoIP
├── config.example.standalone.toml
└── Dockerfile

• Go 1.23
• gorilla/websocket v1.5.3
• BurntSushi/toml v1.4.0
• google/uuid v1.6.0
• oschwald/geoip2-golang v1.11.0
• sirupsen/logrus v1.9.3

1. Connection Failed

   • Check server status: curl http://localhost:80/
   • Verify firewall and DNS
   • Ensure reverse proxy is configured

2. WebSocket Errors

   • Confirm proxy supports WS upgrades
   • Check TLS certificates

3. Auth Failed

   • Verify UUID in AllowUsers
   • Check admin server if used

4. High Memory

   • Monitor goroutines via /
   • Restart if >1000 goroutines

Set DebugLevel = 'debug' and check logs.

• v2rayN (Windows)
• v2rayA (Cross-platform)
• Clash (Cross-platform)
• v2rayNG (Android)
• ShadowRocket (iOS)

Integrate with admin server for user management, traffic metering, and billing.

See UnchainAdmin for example.

• RAM: 512MB min, 1GB+ recommended
• CPU: 1 core min, 2+ for production
• Connections: Thousands concurrent
• Memory: ~20MB base + ~1-2MB/100 connections

1. Fork the repo
2. Create feature branch
3. Commit changes
4. Push and open PR

git clone https://github.com/yourusername/unchain.git
cd unchain
go mod download
go test ./...
go build

Apache License 2.0 - see LICENSE

⭐ Star if useful! Issues