راهنمای فارسی · English Guide · راهنمای کامل فارسی

Telegram: https://t.me/CluvexStudio

Aether is a censorship circumvention client designed for heavily restricted networks. It automatically discovers reachable routes, establishes an encrypted tunnel, and exposes a local SOCKS5 proxy for your applications.

Unlike traditional VPN clients, Aether is built for environments where Deep Packet Inspection (DPI), protocol fingerprinting, UDP throttling, and endpoint blocking are common.

• Automatic endpoint discovery, with end-to-end data-plane validation so a gateway is only trusted once it actually passes traffic, not just once it answers the handshake
• MASQUE (HTTP/3 & HTTP/2), with optional TLS ClientHello fragmentation on HTTP/2
• WireGuard support
• Nested WireGuard mode (gool)
• Traffic obfuscation
• Automatic reconnection, and quick-reconnect to your last known-good gateway to skip rescanning
• Local SOCKS5 proxy
• Command-line flags, environment variables, or interactive prompts — your choice
• Linux, Windows, macOS and Android (Termux)

Prebuilt binaries are available on the Releases page for:

• Linux
• Windows
• macOS
• Android (Termux)

curl -fsSL https://raw.githubusercontent.com/CluvexStudio/aether/main/aether.sh -o aether.sh && chmod +x aether.sh && ./aether.sh install

This detects your device architecture, downloads the matching release, verifies its checksum, and installs aether into $PREFIX/bin. Run it afterwards with:

aether

To update later, run ./aether.sh update. To remove it, run ./aether.sh uninstall.

• Rust (latest stable)
• C/C++ compiler
• CMake

The quiche repository must be placed alongside aether:

<repo>/
  aether/
  quiche/

Build:

cargo build --release

Binary:

target/release/aether

You can run Aether in an isolated environment using Docker. The official image is available on GitHub Container Registry (GHCR).

Pull and run the pre-built image (interactive mode is required for initial setup):

docker run -it -p 1819:1819 ghcr.io/cluvexstudio/aether:latest

You can also bypass prompts by providing environment variables:

docker run -it -p 1819:1819 \
  -e AETHER_PROTOCOL=masque \
  -e AETHER_SCAN=balanced \
  ghcr.io/cluvexstudio/aether:latest

If you prefer to build the image manually from source:

docker build -t aether .
docker run -it -p 1819:1819 aether

Run with no arguments and answer the prompts:

./target/release/aether

Or skip the prompts with flags:

./target/release/aether --masque -4 --scan turbo --noize firewall

On Windows, double-click run-aether.bat (included in the release zip) instead — it opens a terminal, runs aether.exe, and keeps the window open afterwards so you can read any errors.

Every prompt has a flag and an environment variable equivalent. Run ./target/release/aether --help for the full list, or see the guides linked below.

After startup, a SOCKS5 proxy will be available at:

127.0.0.1:1819

Example:

curl -x socks5h://127.0.0.1:1819 https://www.cloudflare.com/cdn-cgi/trace

Encapsulates traffic over HTTP/3 (QUIC) or HTTP/2 (TLS), making it resemble ordinary HTTPS traffic.

Fast and lightweight transport for networks with less aggressive inspection.

A WireGuard tunnel running inside another WireGuard tunnel, providing an additional encryption layer.

Detailed documentation is available in:

• Docs/GUIDE.en.md — English guide
• Docs/GUIDE.fa.md — راهنمای فارسی

Developed by CluvexStudio. :))

MASQUE support is built on top of Cloudflare's Quiche library.

Experienced network developers and protocol engineers are welcome to contribute.

Please keep the codebase clean, maintainable, and well-engineered. Low-quality or vibe-coded contributions will not be accepted.

If Aether has been useful to you, consider supporting its development:

• TRX (Tron): TRxVSHcoADZnBfztFmFb2TQopusAwWYEVR
• BTC: bc1qnjnvzsa5avgj7n0uy383cv5zdxfjnvvp257egm
• TON: UQAH75bXaaRUhZMwiF0ZujOXFDDmvLSPASKoOsWF0HNasiaM

See the LICENSE file for licensing information.