Skip to content

Zarp for macOS 0.1.0

Choose a tag to compare

@feg55 feg55 released this 08 Oct 18:29
· 19 commits to main since this release

Zarp for macOS 0.1.0

The first public release. Zarp is a native Apple Silicon app that finds a DPI-evasion strategy for Cloudflare WARP on your network, remembers it and connects with one click.

Highlights

  • Its own WARP client. Zarp registers an anonymous WARP account (after you accept Cloudflare's terms) and speaks MASQUE over HTTP/3 or HTTP/2 itself: no official WARP app, no warp-cli.
  • Whole-Mac tunnel for IPv4, IPv6 and DNS that fails open: the routes disappear with the tunnel, and anything that could outlive a crash is journaled and undone at the next start.
  • 11 working strategies (QUIC decoy packets, TLS split and disorder, two direct controls) plus your own in strategies.txt. Each test uses a fresh endpoint, and a strategy needs a second independent pass for the double check mark.
  • Self-healing: falls back to other verified strategies and reconnects by itself when the connection drops.
  • Verified on a real network with scripts/test-integration.sh: full tunnel, DNS restore, kill -9 and SIGTERM recovery (56 of 56 checks, macOS 15, Wi-Fi).
  • Eight languages: English, Русский, Español, Português, 中文, हिन्दी, Français, Deutsch. No telemetry.

Install

Download Zarp-0.1.0-arm64.dmg, drag Zarp to Applications and follow the first-launch steps in the README.
Requires an Apple Silicon Mac and macOS 14 or later (developed and tested on macOS 15).

This release is not notarized by Apple (there is no paid Apple Developer membership behind the project), so macOS blocks the first launch: open System Settings > Privacy & Security and click Open Anyway. Details.

Verify

SHA-256 of Zarp-0.1.0-arm64.dmg:

86198374faaa4c71a539a8df65f44b6c50524f9d6139da6a5e12073f33afdee0

Known limitations

  • WireGuard and the raw-socket strategies (badsum, tcp_md5, seqovl, hostfakesplit) are not available on macOS and are listed as such.
  • Tested on macOS 15 over Wi-Fi only; macOS 14 and other network types are not yet tested.
  • After sleep or a network change traffic can stall for up to about 30 seconds before the tunnel is re-established.
  • Translations other than English and Russian have not been reviewed by native speakers.

Full list of changes: CHANGELOG.md.