Repository navigation
Digest
Deploy your own VPN on Yandex Cloud from one private project: AmneziaWG 3.1
and VLESS Reality on the same server, with device profiles and native
AmneziaVPN QR codes. Manage deployment, status, recovery and removal through
the installed F-Layer CLI. Your cloud account, server and keys remain yours.
Try it
Install F-Layer 2.0.0 from PyPI
in an activated virtual environment with Python 3.11+:
python -m pip install "f-layer[vpn]==2.0.0"
python -m pip show f-layer
flayer --help
flayer check --format jsonCheck that the installed version is 2.0.0. The local check should report
"status": "ok" and exit with code 0; it checks the installation.
Follow a guide below to deploy and verify real VPN traffic on Linux/WSL:
What's Changed
Added
- Private
project.tomlworkflow with configurable server resources, device
identities, access rules and full or split IPv4 routing. flayer project initandflayer vpn prepare,deploy,status,recover
anddestroy, with explicit ownership and consent for cloud changes.- Offline
flayer vpn export --qrfor both protocols: export existing device
files and native AmneziaVPN profiles without changing keys or the server. - Versioned extension loading, consumer-neutral integration evidence and a
bounded static-site deployment profile. - English, Russian and Chinese VPN Quick Start and AI operator guides.
Fixed
- Installed-package deployment and recovery, SSH server identity checks and
guest readiness reporting. - AmneziaVPN profile framing and QR import compatibility.
Changed
- Use the same CLI for preparation, deployment and device-profile export.
- Keep one-off investigations and operational logs out of published documentation.
Validation
Reproducible, audited wheel and source distributions are accompanied by
build-evidence.json. Automated gates cover the CLI, deployment contracts,
failure handling, isolated distribution installation and three-language documentation.
The owner accepted a scoped live smoke test: Android Internet, regular YouTube
and Speedtest worked through both protocols; both native QR codes scanned and
imported into AmneziaVPN. Deployment and export were tested on separate identified
candidates, rather than as a complete acceptance run of one final build.
Breaking Changes
None for existing CLI commands or runtime APIs. VPN commands are additive.
Try it from source
git clone --branch v2.0.0 https://github.com/Fuzzy-Technologies/F-Layer.git
cd F-Layer
python -m pip install ".[vpn]"
flayer --help
flayer check --format jsonPython 3.11+ is required. VPN deployment requires Linux/WSL, OpenSSH and an
authenticated Yandex Cloud CLI. Git is needed only for a source checkout;
the release wheel can be installed directly.
Notes
- IPv4 routing is supported. Disable IPv6 on the client to prevent bypass.
- Shorts failed in the live test on both protocols. Telegram performance has
not been established. DNS leaks, exit-IP equality, IPv6 bypass, complete
recovery/reboot acceptance and live cleanup remain unverified. - Further hardening and broader live acceptance are deferred to later versions.
- Install from PyPI with
python -m pip install "f-layer[vpn]==2.0.0".
Published wheel and source-distribution SHA-256 hashes match the attached build evidence. - Documentation
- Detailed changelog
- Release milestone
