Kumo v1.12.2-beta.5

Kumo 1.12.2 beta 5 (test version)

This is a test version (pre-release). It is not offered as an update unless Include pre-releases is on in Settings.

What's new since beta 4

• Faster to connect. A connection no longer waits for any list to download. The lists there are used, and the ones missing are stood in for by lists that now come with the app (the countries of Direct countries, and the ad list that was already there). They are refreshed a few seconds after the connection is up, through it. Lists are read and merged in the background, so the screen does not stop, and the big ones are kept in sing-box's binary format, which the core reads several times faster and with less memory. Server names are looked up over Cloudflare and Google at once, and ahead of time while Kumo is open and not connected.
• Faster to disconnect. On Android a disconnect no longer waits for open connections to close or for tests in progress; on the desktop it is shown at once and the rest finishes in the background. On Windows the system proxy is set through the registry directly instead of a program for each value. The screen can no longer stay on Disconnecting.
• Find a clean IP, redesigned. A setup, a scan and a results view instead of one long form. Up to 10,000 addresses (was 500), picked with buttons together with the timeout, with a hint of how long it can take; a progress card during the scan; results you can sort by speed, loss or download speed, with the latency in color; an action bar to add the ticked addresses to configs or put one in place of a config's address; the copy options in the top menu.
• Ad blocking. A few more trackers that the test pages found (Samsung's and RudderStack's).
• Free connections. The VPN Gate card is laid out like the others; its text no longer runs down in a narrow column.

Everything else is as in beta 1 to beta 4. Most of it was checked by tests, not on every kind of device, so please tell us what you see.

Downloads

System	Download
Android
Windows
macOS
Linux

Kumo v1.12.2-beta.4

Kumo 1.12.2 beta 4 (test version)

This is a test version (pre-release). It is not offered as an update unless Include pre-releases is on in Settings.

What's new since beta 3

• A stronger ad blocker (Settings > Network > Block ads and trackers). A third level, Maximum, merges the biggest public lists (HaGeZi Ultimate, OISD Big, the AdGuard DNS filter, PersianBlocker, and HaGeZi's lists of pop-up ads and of the trackers of phone and TV makers) into one; it uses more memory, and now and then a site needs an exception. The lists are downloaded again once after the update and then every day, from more mirrors. A list of about 100,000 names is built into the app, so ads are blocked from the first connection even when the lists cannot be downloaded. Settings shows how many lists and names are in use and when they were updated, with Update now.
• Never block. A list of the sites and apps that ad blocking should leave alone, for when one stops working. Names that apps need are never blocked, even when a list has them: the Facebook and Instagram API, YouTube, the players of video sites, app links, newsletter links, support chat.
• Cookie banners and affiliate links. Two optional switches under ad blocking: one hides most cookie-consent banners, the other blocks the redirects of affiliate links (a "buy at ..." link that goes through one does not open).
• No way around the blocker through encrypted DNS. At the strong and maximum levels, apps can no longer reach a public encrypted DNS server (Google, Cloudflare, Quad9, AdGuard and others) by its address, so their lookups go through the blocker.
• Find a clean IP is now also in the Home menu, has more options, and you can tick the addresses you want and add them to one or more of your configs, as copies in a group of their own (Clean IPs).

Ad blocking works by names. Ads that come from the same server as the content (YouTube's own video ads, Instagram's sponsored posts) cannot be blocked this way. With an OpenVPN server on Android the ad blocker does not apply.

Everything else is as in beta 1, beta 2 and beta 3. Most of it was checked by tests, not on every kind of device, so please tell us what you see.

Downloads

System	Download
Android
Windows
macOS
Linux

Kumo v1.12.2-beta.3

Kumo 1.12.2 beta 3 (test version)

This is a test version (pre-release). It is not offered as an update unless Include pre-releases is on in Settings.

What's new since beta 2

• A clearer icon in the status bar (Android). The notification icon is the app icon's cloud again, with its facets shown as shades. If your phone draws it as a plain white cloud, tell us which phone it is.

Everything else is as in beta 1 and beta 2: crash reports, opening links and files with Kumo (also on macOS), a User-Agent and headers for a subscription, Find the best settings for my network, the WARP scans and Warp-in-Warp, encrypted lookup of server names, the Android kill switch and Always-on VPN, Find a clean IP, and the request for a star. Most of it was checked by tests, not on every kind of device, so please tell us what you see.

Downloads

System	Download
Android
Windows
macOS
Linux

Kumo v1.12.2-beta.2

Kumo 1.12.2 beta 2 (test version)

This is a test version (pre-release). It is not offered as an update unless Include pre-releases is on in Settings.

What's new since beta 1

• Fix: strange letters in the server list. Beta 1 showed "·" between the delay, the protocol and the address of each server. It is the dot "·" again.

Everything else is as in beta 1: crash reports, opening links and files with Kumo (also on macOS), a User-Agent and headers for a subscription, Find the best settings for my network, the WARP scans and Warp-in-Warp, encrypted lookup of server names, the Android kill switch and Always-on VPN, Find a clean IP, and the request for a star. Most of it was checked by tests, not on every kind of device, so please tell us what you see.

Downloads

System	Download
Android
Windows
macOS
Linux

Kumo v1.12.2-beta.1

Kumo 1.12.2 beta 1 (test version)

This is a test version (pre-release). It is not offered as an update unless Include pre-releases is on in Settings.

What's new

• Crash reports. If something breaks, Kumo can send a report with the same switch as the anonymous usage count (Settings > App settings; off means nothing is queued or sent). It holds the error and where it happened in the code, the Kumo and system version, the device maker and model, the page you were on, whether the VPN was connected and the last lines of Kumo's own log. Links, IP addresses, e-mail addresses, ids, tokens, passwords, the names of your servers and subscriptions, and your user name in folder paths are removed before it is saved or sent. At most 10 a day. The details are in the privacy policy.
• Open links and files with Kumo. vless://, vmess://, trojan://, ss://, hysteria2:// and the other server links, subscription links (clash://, sing-box://, hiddify://), shared text and .json, .yaml and .ovpn files can be opened with Kumo from a browser or a chat (on Android also from the Share menu). Kumo always asks before it adds anything. On Windows the installer has a task for it (on by default), on Linux the packages list the links, and a copy of Kumo that is already running takes the link. On macOS the system hands them over through the app itself.
• User-Agent and headers for a subscription. Edit subscription > Advanced: some providers answer only one kind of client or want a key in a header. Headers go only to the subscription's own address and are also used by the background update on Android.
• Find the best settings for my network (Home menu > Troubleshoot). Kumo tries a few options (splitting the TLS hello, a browser fingerprint, multiplexing) on up to three of your VLESS, VMess or Trojan servers and shows which work best on your network. It applies a better one only when you tap Use it, and you can undo it. It runs on your device only and sends nothing. Name lookups (DNS) are not part of it.
• WARP: find the best way to connect, and Warp-in-Warp. On the WARP page, Find the best way tries every method, address and port of the profile and switches to the fastest one that answers. Warp-in-Warp (experimental) carries one WARP tunnel inside a second WARP account's tunnel. Scan more addresses also tries addresses from Cloudflare's WARP ranges that are not in the profile.
• Server names are looked up over encrypted DNS first. Before it connects, Kumo looks up the name of the server over encrypted DNS (Cloudflare, then Google), so your network's resolver cannot see which server you look for or hand out a wrong address. If those two are blocked, it asks the system's own resolver as before. It is on by default and can be turned off in Settings > Network; Strict DNS is unchanged. Cloudflare and Google see the server's name.
• Android kill switch. With the kill switch on, the internet now stays blocked when the sing-box core stops by itself, or when a reconnect of a connection that was up fails (before, only when Xray stopped).
• Android Always-on VPN. When the system starts Kumo itself (Always-on VPN in Android's VPN settings), Kumo now connects again with the last connection instead of ignoring the request.
• Find a clean IP (Edit config > Find a clean IP, for VLESS, VMess and Trojan servers behind a CDN). Kumo tries addresses of Cloudflare, Fastly or ranges you type, with the server's own settings, and shows the fastest ones. It runs on your device only.
• Usage count. The maker and model of the device are now sent from every system (before, only Android), and on Linux the desktop. No serial number or computer name is read.
• A request for a star. After a week of use Kumo asks once, and at most a second time a month later, whether you would star the project on GitHub. Don't ask again ends it.

Please try and tell us

Most of this was checked by tests, not on every kind of device. We would like to hear how these work for you, especially: opening links and files (Android, macOS, Linux), the Android kill switch and Always-on VPN, the WARP scans and Warp-in-Warp, Find a clean IP, and the encrypted name lookup on your network. The log page shows what happened.

Downloads

System	Download
Android
Windows
macOS
Linux

Kumo v1.12.1

Kumo 1.12.1

What's new

• A new app icon. The default is now a faceted cloud in the app's teal. Twelve icons are in Settings; pick the one you like. On Android each icon is its own launcher entry; on Windows the window, taskbar button, tray and the Start menu, desktop and pinned shortcuts take the picked icon. The icons are sharper at every screen scale, and the home page header shows the same cloud.
• Kumo ID in Settings. Settings > App settings now shows the ID that the anonymous usage count sends instead of your device id, so you can see exactly what is sent. Tap it to copy.

Fixes

• Android: no launcher entry after an update. An update could leave no icon enabled, so the app had no "Open" and could not be started. Kumo now enables the saved icon's entry at every start and right after each update.
• Windows: old icon on the taskbar. After an update, a pinned taskbar button and shortcuts kept the icon Windows had cached for kumo.exe. The shortcuts now point at the icon file itself and are checked at each start.

Downloads

System	Download
Android
Windows
macOS
Linux

Kumo v1.12.0

Kumo 1.12.0

What's new

• OpenVPN (Windows and Android). Add an .ovpn file (from the + menu: Add from file or Add from clipboard), or take servers from Free connections > VPN Gate servers, and connect like any other server.
  • A file is never run as it is. Kumo reads the lines it knows and writes its own configuration; lines that run programs, open a control port, write files or load other files are left out.
  • On Windows Kumo runs the official OpenVPN (signed by OpenVPN Inc.) with the TAP-Windows driver that comes with it; Windows may ask you to confirm the driver once. On Android the official OpenVPN program (2.6.14, with OpenSSL, LZO and LZ4) runs as a service of its own.
  • A login the server asks for is asked in a window; a login the file does not mention can be given there too.
  • TCP ping and Real delay work for OpenVPN servers on Windows; on Android only the TCP/UDP ping works.
  • On Android sing-box's routing options (bypass lists, ad blocking) do not apply while OpenVPN runs. Per-app routing, the kill switch and the notification with speed work. The tile, the widget and the device-startup receiver open the app instead of connecting an OpenVPN server. Keep the proxy running and the automatic mode do not use OpenVPN servers. Old ciphers such as BF-CBC are not supported.
• VPN Gate servers in Free connections (Windows and Android). The public OpenVPN servers of VPN Gate. vpngate.net cannot be opened from Iran, so the list is copied every 3 hours to a GitHub repository (AbolDev/vpngate-mirror) and Kumo takes it from GitHub and its mirrors. Nothing in the list is filtered, so some servers will not connect. VPN Gate's servers are run by volunteers and may keep logs: do not use them for anything private.
• Locked .npvs files open in under a second, and a server's settings are no longer lost: the text "false" was read as true, and the final mask, the socket options and the gRPC timings were dropped. Newer exports whose lines hold a name and a v2rayJson are read too, and each server gets its name.
• The kept proxy is never closed (desktop). With Keep the proxy running on, Kumo itself listens on the proxy port and passes each connection to the core that runs at that moment, so connecting, disconnecting and changing the server do not close the port. Connections that are going through a core when it stops are still cut.
• Anonymous usage count. Once a day (and again when the version changes) Kumo sends a random-looking code made from your device id, plus your system and Kumo version, the app's language and your device's language and country setting, your time zone, your processor, the name of the release file that was installed (for example kumo-android-universal.apk), and on Android the phone's maker, model and interface. It never sends servers, links, browsing or traffic, and no IP address is stored. It is on by default and can be turned off in Settings > App settings; turning it off sends one last message and then nothing. It is sent in the background and never delays starting or connecting. The details are in the privacy policy.
• Update check. Test versions of one release are told apart by their suffix (beta.10 is newer than beta.9), and the stable release is newer than its test versions.
• Fixes. Disconnect on Windows no longer reconnects at once, and "Disconnecting" can no longer stay for good. The connect button works while OpenVPN is starting. A server that asks for a login its file does not mention now gets the login window. The password window and the number windows in Settings are clearer. The notice on the home screen is no longer stuck to the status above it.

About OpenVPN

OpenVPN on Android was tried on an emulator against a local server (connecting, traffic through the tunnel, disconnecting, a refused login, a timeout). It has not been tried on a phone, on arm CPUs or with a public server. On Windows, one network in Iran cut OpenVPN at the secure handshake for every public server tried; a connection through a real server has not been seen in Kumo. Please report what you see (the log page shows the messages of OpenVPN).

Downloads

System	Download
Android
Windows
macOS
Linux

Kumo v1.12.0-beta.9

Kumo 1.12.0 beta 9 (test version)

This is a test version (pre-release). It is not offered as an update unless Include pre-releases is on in Settings.

What's new since beta 8

• Locked .npvs files open in under a second instead of taking several seconds: the password check was rewritten to be much faster (the result is the same).
• A server's settings are no longer lost when an NPV export is opened.
  • The text "false" was read as true: a TLS server was made insecure (its certificate was not checked) and a gRPC server was made multi. Now only true and 1 count.
  • The final mask (fragmenting of the TLS hello, noise) was dropped. It is kept now. A server that has one is carried by Xray when it is used on its own (in the automatic group it stays on sing-box without it).
  • The socket options and the timings of gRPC are kept too.
  • If a record of the file cannot be opened, a warning with their number is shown instead of leaving them out silently.
• The routing, DNS and local-port parts that NPV writes inside each server are not imported: Kumo uses its own.

Downloads

System	Download
Android
Windows
macOS
Linux

Kumo v1.12.0-beta.8

Kumo 1.12.0 beta 8 (test version)

This is a test version (pre-release). It is not offered as an update unless Include pre-releases is on in Settings.

What's new since beta 7

• OpenVPN servers can be tested (Windows). TCP ping connects to a TCP server, and asks a UDP server with the first packet of the protocol (a server that only listens to signed packets, tls-auth or tls-crypt, cannot be told this way and is skipped). Real delay runs the OpenVPN program against the server without an adapter and measures the time until the handshake is done, so it changes nothing on the computer. A server that needs a login is skipped.
• A better password window. Opening a locked file (.npvs and the like) now shows what the window is for and the file's name, has a show/hide button, and tells a wrong password under the field so it can be typed again, instead of closing with an error.
• Clearer number windows. The connect timeout, the proxy port, the shared-network port and the MTU now have a label, the range that is allowed and the error under the field. The password window in Settings looks the same, and the buttons that were fixed English letters are translated.
• The notice on the home screen (for example "OpenVPN works on Windows only for now") is no longer stuck to the status above it.

OpenVPN on Android is not done yet.

Downloads

System	Download
Android
Windows
macOS
Linux

Kumo v1.12.0-beta.7

Kumo 1.12.0 beta 7 (test version)

This is a test version (pre-release). It is not offered as an update unless Include pre-releases is on in Settings.

What's new since beta 6

• VPN Gate servers in Free connections (Windows). A new card, VPN Gate servers, gets the public OpenVPN servers of VPN Gate and adds them to the servers added by hand (a refresh replaces the earlier ones). vpngate.net cannot be opened from Iran, so the list is copied every 3 hours to a GitHub repository (AbolDev/vpngate-mirror) and Kumo takes it from GitHub and its mirrors. Nothing in the list is filtered, so some servers will not connect. VPN Gate's servers are run by volunteers and may keep logs: do not use them for anything private.

OpenVPN is as in beta 4 (a test feature, Windows only for now).

Downloads

System	Download
Android
Windows
macOS
Linux