Repository navigation
v1.4.0
What's new
Your own server instead of WARP. Paste one VLESS, Trojan or Hysteria2 link in Settings → Server and endpoints and Zarp connects through it with TCP and UDP, no WARP client needed. Supported: TCP, WebSocket, gRPC, HTTPUpgrade, TLS, Reality, Vision and uTLS for VLESS, Salamander for Hysteria2. One link only: no subscriptions, XHTTP or port hopping. The mode is new, so reports are welcome: attach zarp.log (it shows your server address, remove it first).
Routing and programs. With your own server you can also choose where traffic goes. Presets for local networks, Russia, Iran and China; edit them or add your own, with Direct, Proxy and Block groups (IP ranges, domains, full:, keyword:, regexp:, geoip:, geosite:). Block wins over Proxy, Proxy over Direct, and local networks stay direct unless a rule says otherwise. A wrong rule is reported with its line number, and a missing database or an unknown category stops the connection instead of being skipped. You can also send only the programs you pick through the server; an empty selection never falls back to all programs.
GeoIP and GeoSite. Download or update V2Ray/Xray .dat databases from an address you can change (the default is Loyalsoldier/v2ray-rules-dat). A failed update keeps the previous database. Ranges of Russia, Iran and China are built in until you download your own GeoIP.
Strategies by country. A new filter for Russia, Iran and China (one or several) covers the list, both scans, auto-connect, rechecks and saved results. Your own strategies in strategies.txt can add a fourth column such as ru,ir,cn; old three-column lines keep working.
New strategies (19). Added TLS split at the host, sld and endhost points and a QUIC fake google x12.
Your own WARP endpoints. List IP:port or [IPv6]:port addresses, one per line, in Settings → Server and endpoints. Searches and rechecks rotate through them, and the connection uses the address that passed the check. An empty list brings the defaults back. The addresses must be real WARP endpoints.
Hardening. sing-box starts only if the file is byte for byte the one embedded in Zarp.exe. The configuration with your password is deleted right after start. Your server is checked before any network adapter exists, and sing-box is stopped at once if the adapter passes no traffic.
Bigger file. Zarp.exe is now about 18 MB because sing-box 1.13.14 is embedded. It is unpacked only when you use your own server, and it brings the Wintun network driver, which Windows installs the first time an adapter is created. Licenses are in the third-party notices.
This release is unsigned. Windows SmartScreen may show an unknown-publisher warning.
Zarp.exe SHA-256: 32d527b8dec6d556fa727701764279c89a0c7b2327434530b819fdee894a4cc0
Check that the file was built by GitHub Actions from this repository:
gh attestation verify Zarp.exe --repo feg55/Zarp
Full Changelog: v1.3.0...v1.4.0