Skip to content

v1.0.0

Choose a tag to compare

@github-actions github-actions released this 24 Sep 20:24
· 19 commits to main since this release

First public release of Zarp: one-click Cloudflare WARP for networks that block it.

Zarp finds a zapret2 strategy that gets the WARP handshake through DPI, remembers it and connects. No config files, no command line.

Download

Zarp.exe (1.7 MB). A single file, no installer. zapret2 v1.0.5.2 is embedded.

Highlights

  • One button. The first click finds the fastest working strategy, later clicks connect instantly.
  • Strategies built for WARP. 17 profiles aimed at the WARP handshake: MASQUE over QUIC, WireGuard and the MASQUE HTTP/2 fallback. The fakes are real QUIC/TLS/STUN packets of services that are not blocked.
  • Honest testing. Each test hits a fresh WARP endpoint and every candidate is checked twice, so a strategy can't pass on the back of a previous connection.
  • Self-healing. If the saved strategy stops working, Zarp tries the other verified ones before searching again.
  • Auto-updates zapret2 in the background. If WARP is connected, the update applies without dropping the tunnel. If the new version fails to start, Zarp rolls back.
  • Low overhead. Only WARP addresses and handshake packets are intercepted. Your other traffic and the tunnel itself never go through zapret.
  • Tray mode, autostart with Windows, custom strategies via strategies.txt.

Requirements

  • Windows 10 or 11, x64
  • Cloudflare WARP installed (winget install Cloudflare.Warp)
  • Administrator rights (required by the WinDivert driver)

Getting started

  1. Run Zarp.exe and accept the UAC prompt.
  2. Press the power button. The first search takes a minute or two.
  3. That's it. The next time you open Zarp, one click connects.

Good to know

  • Turn off other VPNs (Happ, v2rayN, Clash, AmneziaVPN, ...) before searching. WARP traffic would go through their tunnel and no strategy would be found. Zarp warns you if it detects one.
  • Windows Defender may flag WinDivert as a hacktool. This is a known false positive for every zapret build. If it happens, Zarp offers to add its folder to Defender exclusions.
  • Zarp keeps its settings, log and zapret2 files in %LOCALAPPDATA%\Zarp.
  • Zarp changes the WARP tunnel protocol and, during the search, the endpoint. The endpoint goes back to automatic once the search is done.

Credits

zapret2 by bol-van, WinDivert, Cloudflare WARP.