Releases: iPmartNetwork/iPShadowT
Release list
v2.2.3
Anti-DPI Multi-Transport Tunnel Engine
Production Hardening · Direct Mode · REALITY Fix
Overview
v2.2.3 is the recommended release. It includes everything from v2.2.2 plus a direct pool shutdown fix (CI -race clean).
| Version | v2.2.3 |
| Type | Patch (bug fix) |
| Date | 2026-06-01 |
| Previous | v2.2.2 |
Note: Do not use v2.2.2 — its CI tests failed. Always install v2.2.3.
Highlights (v2.2.2 + v2.2.3)
| Area | Change |
|---|---|
| Direct mode | Server mux.enabled = false — one TCP per flow, matches client upload path |
| REALITY | Working auth (ClientHello token + REALITYOK) |
| Shutdown | Graceful SIGTERM/SIGINT → Stop() |
| v2.2.3 fix | Direct pool data race on shutdown fixed |
| Performance | sync.Pool relay buffers, quality-aware mux selection |
| CLI | -validate, -doctor |
| Multi-path | [[paths]] wired in client |
| Tests | E2E byte relay through tunnel |
Upgrade
Update both client (Iran) and server (abroad):
sudo bash ipshadowt-manager.sh # option: Update
# or
wget https://github.com/iPmartNetwork/iPShadowT/releases/download/v2.2.3/ipshadowt-linux-amd64
chmod +x ipshadowt-linux-amd64
sudo mv ipshadowt-linux-amd64 /usr/local/bin/ipshadowtVerify:
ipshadowt -v # v2.2.3
ipshadowt -validate -c /etc/ipshadowt/config.toml
ipshadowt -doctor -c /etc/ipshadowt/config.tomlRequired config (upload path)
Client & server should both use direct mode:
[mux]
enabled = false
[pool]
size = 16
[performance]
buffer_profile = "upload_boost"
kernel_tuning = trueBreaking note
If you intentionally run smux mode (mux.enabled = true on client), server must also use mux.enabled = true. Default upload_boost uses direct mode on both sides.
Full changelog
v2.2.2
Anti-DPI Multi-Transport Tunnel Engine
Production Hardening · Direct Mode · REALITY Fix
Overview
Release v2.2.2 completes the upload path (client direct mode ↔ server direct mode), fixes REALITY, and adds production tooling (-validate, -doctor, JSON logs, configurable metrics).
| Version | v2.2.2 |
| Type | Patch (bug fix + hardening) |
| Date | 2026-06-01 |
| Previous | v2.2.1 |
Highlights
| Area | Change |
|---|---|
| Direct mode | Server mux.enabled = false — one TCP per flow, matches client upload path |
| REALITY | Working auth (ClientHello token + REALITYOK) |
| Shutdown | Graceful SIGTERM/SIGINT → Stop() |
| Performance | sync.Pool relay buffers, quality-aware mux selection |
| CLI | -validate, -doctor |
| Multi-path | [[paths]] wired in client |
| Tests | E2E byte relay through tunnel |
Upgrade
Update both client (Iran) and server (abroad):
sudo bash ipshadowt-manager.sh # option: Update
# or
wget https://github.com/iPmartNetwork/iPShadowT/releases/download/v2.2.2/ipshadowt-linux-amd64Verify:
ipshadowt -v
ipshadowt -validate -c /etc/ipshadowt/config.toml
ipshadowt -doctor -c /etc/ipshadowt/config.tomlRequired config (upload path)
Client & server should both use direct mode:
[mux]
enabled = false
[pool]
size = 16
[performance]
buffer_profile = "upload_boost"
kernel_tuning = trueBreaking note
If you intentionally run smux mode (mux.enabled = true on client), server must also use mux.enabled = true. Default upload_boost now uses direct mode on both sides.
Full changelog
See CHANGELOG.md.
Full Changelog: v2.2.1...v2.2.2
iPShadowT v2.2.1 — Bug Fix Release
Anti-DPI Multi-Transport Tunnel Engine
Overview
This patch release fixes asymmetric upload performance on tcpmux tunnels — the common Iran client → foreign server setup where download was fine but upload stayed low.
All improvements are port-agnostic: they apply whether you run on 443, 8443, or any custom port. No per-user port mapping required.
| Version | v2.2.1 |
| Type | Bug fix (semver patch) |
| Date | 2026-06-01 |
| Previous | v2.2.0 |
| Repository | iPmartNetwork/iPShadowT |
Highlights
| Area | Before (v2.2.0) | After (v2.2.1) |
|---|---|---|
| TCP send/recv buffers | Config ignored on tcpmux |
Applied on every connection via SO_SNDBUF / SO_RCVBUF |
| Relay copy buffer | 32 KB (io.Copy default) |
256 KB on mux + server relay |
kernel_tuning = true |
Defined, never executed | Runs at client/server startup (Linux) |
upload_boost profile |
Missing in sysctl layer | BBR + 16 MB windows + tcp_notsent_lowat |
| Default buffers | 4 MB mux / unset TCP | 16 MB TCP + 8 MB smux when unset |
| Manager script | balanced + fragment on |
upload_boost default, fragment/padding off for speed |
| Auto-updater | Wrong GitHub org | iPmartNetwork/iPShadowT |
What Was Fixed
Core engine
internal/utils/tcpopt.go— Central TCP tuning (TLS unwrap, listener wrapper, large relay buffers)tcpmux— Socket buffers on dial and accept- Client / Server —
kernel_tuningwired; upload buffer logging at startup - Config — Upload-friendly defaults + full
upload_boostprofile support - Mux relay — 256 KB bidirectional copy for upload and download paths
Install & ops
ipshadowt-manager.sh— Client wizard defaults toupload_boost,kernel_tuning = true- Multi-tunnel & export — Generated configs include upload tuning
- Sysctl (install) —
tcp_window_scaling,tcp_notsent_lowatadded to base tuning
Misc
- CLI default version corrected (
v2.2.1) - Docker
ARG VERSION=2.2.1 - Systemd / updater URLs point to
iPmartNetwork/iPShadowT
Traffic path (upload)
App → SOCKS5 (Iran client)
→ smux stream (8 MB buffer)
→ TCP tunnel (SO_SNDBUF 16 MB)
→ Foreign server (SO_RCVBUF 16 MB)
→ Internet
Upgrade
Update both sides — client (Iran) and server (abroad) — for best results.
Option A — Manager script (recommended)
curl -fsSL https://raw.githubusercontent.com/iPmartNetwork/iPShadowT/master/deploy/ipshadowt-manager.sh -o ipshadowt-manager.sh
sudo bash ipshadowt-manager.sh
# Menu → Update binary → Restart serviceOption B — Binary only
Linux AMD64
wget https://github.com/iPmartNetwork/iPShadowT/releases/download/v2.2.1/ipshadowt-linux-amd64
chmod +x ipshadowt-linux-amd64
sudo install -m 755 ipshadowt-linux-amd64 /usr/local/bin/ipshadowt
sudo systemctl restart ipshadowtLinux ARM64
wget https://github.com/iPmartNetwork/iPShadowT/releases/download/v2.2.1/ipshadowt-linux-arm64
chmod +x ipshadowt-linux-arm64
sudo install -m 755 ipshadowt-linux-arm64 /usr/local/bin/ipshadowt
sudo systemctl restart ipshadowtOption C — Docker
docker pull ghcr.io/ipmartnetwork/ipshadowt:2.2.1Recommended configuration
Minimal snippet — works with any port:
[performance]
nodelay = true
buffer_profile = "upload_boost" # balanced | high_throughput | low_cpu
kernel_tuning = true # Linux + root: BBR & TCP windowsFor maximum upload on tcpmux, keep anti-DPI overhead off:
[anti_dpi]
enabled = false
# fragment = false
# padding = false
# traffic_shape = falseFull examples: configs/client-upload-boost.toml
Verify after upgrade
-
ipshadowt -vshows v2.2.1 - Log contains:
Upload tuning: send_buf=16777216 recv_buf=16777216 ... - On Linux with root:
sysctl net.ipv4.tcp_congestion_control→bbr - Upload test improved vs v2.2.0 on same port
Assets
| Platform | Binary |
|---|---|
| Linux AMD64 | ipshadowt-linux-amd64 |
| Linux ARM64 | ipshadowt-linux-arm64 |
| Linux ARMv7 | ipshadowt-linux-armv7 |
| Windows AMD64 | ipshadowt-windows-amd64.exe |
| macOS Intel | ipshadowt-darwin-amd64 |
| macOS Apple Silicon | ipshadowt-darwin-arm64 |
| Docker | ghcr.io/ipmartnetwork/ipshadowt:2.2.1 |
Checksums: SHA256SUMS.txt · MD5SUMS.txt in release assets.
Full changelog
See CHANGELOG.md for complete commit-level details.
Made with ❤️ by iPmart Network
iPShadowT v2.2.1
Bug Fix Release · Upload Throughput · Port-Independent
Overview
This patch release fixes asymmetric upload performance on tcpmux tunnels — the common Iran client → foreign server setup where download was fine but upload stayed low.
All improvements are port-agnostic: they apply whether you run on 443, 8443, or any custom port. No per-user port mapping required.
| Version | v2.2.1 |
| Type | Bug fix (semver patch) |
| Date | 2026-06-01 |
| Previous | v2.2.0 |
| Repository | iPmartNetwork/iPShadowT |
Highlights
| Area | Before (v2.2.0) | After (v2.2.1) |
|---|---|---|
| TCP send/recv buffers | Config ignored on tcpmux |
Applied on every connection via SO_SNDBUF / SO_RCVBUF |
| Relay copy buffer | 32 KB (io.Copy default) |
256 KB on mux + server relay |
kernel_tuning = true |
Defined, never executed | Runs at client/server startup (Linux) |
upload_boost profile |
Missing in sysctl layer | BBR + 16 MB windows + tcp_notsent_lowat |
| Default buffers | 4 MB mux / unset TCP | 16 MB TCP + 8 MB smux when unset |
| Manager script | balanced + fragment on |
upload_boost default, fragment/padding off for speed |
| Auto-updater | Wrong GitHub org | iPmartNetwork/iPShadowT |
What Was Fixed
Core engine
internal/utils/tcpopt.go— Central TCP tuning (TLS unwrap, listener wrapper, large relay buffers)tcpmux— Socket buffers on dial and accept- Client / Server —
kernel_tuningwired; upload buffer logging at startup - Config — Upload-friendly defaults + full
upload_boostprofile support - Mux relay — 256 KB bidirectional copy for upload and download paths
Install & ops
ipshadowt-manager.sh— Client wizard defaults toupload_boost,kernel_tuning = true- Multi-tunnel & export — Generated configs include upload tuning
- Sysctl (install) —
tcp_window_scaling,tcp_notsent_lowatadded to base tuning
Misc
- CLI default version corrected (
v2.2.1) - Docker
ARG VERSION=2.2.1 - Systemd / updater URLs point to
iPmartNetwork/iPShadowT
Traffic path (upload)
App → SOCKS5 (Iran client)
→ smux stream (8 MB buffer)
→ TCP tunnel (SO_SNDBUF 16 MB)
→ Foreign server (SO_RCVBUF 16 MB)
→ Internet
Upgrade
Update both sides — client (Iran) and server (abroad) — for best results.
Option A — Manager script (recommended)
curl -fsSL https://raw.githubusercontent.com/iPmartNetwork/iPShadowT/master/deploy/ipshadowt-manager.sh -o ipshadowt-manager.sh
sudo bash ipshadowt-manager.sh
# Menu → Update binary → Restart serviceOption B — Binary only
Linux AMD64
wget https://github.com/iPmartNetwork/iPShadowT/releases/download/v2.2.1/ipshadowt-linux-amd64
chmod +x ipshadowt-linux-amd64
sudo install -m 755 ipshadowt-linux-amd64 /usr/local/bin/ipshadowt
sudo systemctl restart ipshadowtLinux ARM64
wget https://github.com/iPmartNetwork/iPShadowT/releases/download/v2.2.1/ipshadowt-linux-arm64
chmod +x ipshadowt-linux-arm64
sudo install -m 755 ipshadowt-linux-arm64 /usr/local/bin/ipshadowt
sudo systemctl restart ipshadowtOption C — Docker
docker pull ghcr.io/ipmartnetwork/ipshadowt:2.2.1Recommended configuration
Minimal snippet — works with any port:
[performance]
nodelay = true
buffer_profile = "upload_boost" # balanced | high_throughput | low_cpu
kernel_tuning = true # Linux + root: BBR & TCP windowsFor maximum upload on tcpmux, keep anti-DPI overhead off:
[anti_dpi]
enabled = false
# fragment = false
# padding = false
# traffic_shape = falseFull examples: configs/client-upload-boost.toml
Verify after upgrade
-
ipshadowt -vshows v2.2.1 - Log contains:
Upload tuning: send_buf=16777216 recv_buf=16777216 ... - On Linux with root:
sysctl net.ipv4.tcp_congestion_control→bbr - Upload test improved vs v2.2.0 on same port
Assets
| Platform | Binary |
|----------|...
v2.2.0
Anti-DPI Multi-Transport Tunnel Engine
10 Transports • 18 Stealth Techniques • Stability Engine • WireGuard Integration
⚡ Highlights
This release focuses on deeper stealth, connection stability, and WireGuard integration.
🕵️ New Anti-DPI Techniques
| Feature | Description |
|---|---|
| SNI Spoofing | Packet-level SNI manipulation — DPI sees google.com, traffic goes to your server |
| Domain Fronting | Client-side CDN fronting — no server changes needed (Google, Cloudflare, Fastly) |
| FakeTCP Transport | Wraps UDP inside fake TCP — bypasses UDP-blocking firewalls |
| Pipeline | Chain transports: faketcp → h2mux for maximum stealth |
SNI Spoof Methods:
split— Splits ClientHello so SNI is in a separate TCP segmentreplace— Replaces SNI with whitelisted domaindouble— Sends fake ClientHello first, then real one
🛡️ WireGuard Integration
| Feature | Description |
|---|---|
| WireGuard Forward | Use WireGuard client (phone/laptop) through iPShadowT tunnel |
| Auto Key Generation | Real Curve25519 keys — matching server + client configs generated together |
| Script Auto-Setup | One menu option installs WireGuard + generates configs + starts interface |
[Phone] → WG Client → [Iran: iPShadowT :51820] → Tunnel → [Foreign: WG Server] → Internet
Config example:
[[forwards]]
name = "socks5"
type = "socks5"
listen = "0.0.0.0:1080"
[[forwards]]
name = "wireguard"
type = "wireguard"
listen = "0.0.0.0:51820"
remote = "10.66.66.1:51820"💓 Stability Engine
| Module | What it does |
|---|---|
| Heartbeat | Ping/pong every 5s, measures RTT, declares dead after 3 misses |
| Reconnector | Exponential backoff (100ms→30s), auto-switches transport after 5 failures |
| Quality Monitor | Scores each session 0-100 (latency + jitter + loss) |
| DPI Detector | Classifies failure patterns → recommends best transport |
| Buffer Tuner | Auto-adjusts buffers based on BDP (Bandwidth × RTT) |
| Warmup Pool | Pre-connects sessions for instant failover |
| Quality LB | Routes new streams to highest-scoring session |
📈 Upload Boost
New performance profile for maximum upload speed:
[performance]
buffer_profile = "upload_boost"
[mux]
concurrency = 8
frame_size = 65536Profiles: balanced • upload_boost • high_throughput • low_cpu
🔧 Script Improvements
- 10 transports in all menus (added
faketcp) - SNI Spoofing option during client setup
- Performance profile selection (4 profiles)
- WireGuard forward option in setup + multi-tunnel
- WireGuard auto-setup (menu option 7 in Configure)
- Port range support:
443,8443,2000-2010 - Port conflict detection with suggestions
📦 Downloads
| File | Platform |
|---|---|
ipshadowt-linux-amd64 |
Linux x86_64 |
ipshadowt-linux-arm64 |
Linux ARM64 |
ipshadowt-linux-armv7 |
Linux ARMv7 |
ipshadowt-windows-amd64.exe |
Windows x64 |
ipshadowt-darwin-amd64 |
macOS Intel |
ipshadowt-darwin-arm64 |
macOS Apple Silicon |
ipshadowt-freebsd-amd64 |
FreeBSD |
ipshadowt-manager.sh |
Deploy script |
⚡ Quick Install
bash <(curl -fsSL https://raw.githubusercontent.com/iPmartNetwork/iPShadowT/master/deploy/ipshadowt-manager.sh)📋 Upgrade
# Via script:
bash ipshadowt-manager.sh → 7) Update → 1) Update binary
# Manual:
systemctl stop ipshadowt
curl -fSL -o /usr/local/bin/ipshadowt https://github.com/iPmartNetwork/iPShadowT/releases/download/v2.2.0/ipshadowt-linux-amd64
chmod +x /usr/local/bin/ipshadowt
systemctl start ipshadowtConfig files are backward compatible. New features activate when you add their config sections.
🆕 New Config Options
[anti_dpi]
sni_spoof = true
sni_spoof_domain = "www.google.com"
sni_spoof_method = "split"
[kcp]
mode = "fast3"
snd_wnd = 2048
rcv_wnd = 2048
[[forwards]]
name = "wireguard"
type = "wireguard"
listen = "0.0.0.0:51820"
remote = "10.66.66.1:51820"📊 Stats
- 18 files changed, 2,011 insertions
- 6 new modules added
- 10 transports supported
- 4 performance profiles
- 0 breaking changes
Full Changelog: v2.0.1...v2.2.0
© 2026 iPmart Network (Ali Hassanzadeh)
Made with ❤️ for the community
v2.0.1
v2.0.0
Anti-DPI Multi-Transport Tunnel Engine
9 Transports • 15 Stealth Techniques • 18 New Modules • Full QUIC • Auto-Failover
🚀 What's New in v2.0.0
This is a major release with 18 new modules fully integrated into the engine. Every feature from the v1.0 roadmap has been delivered.
⚡ Transport
| Feature | Description |
|---|---|
| 🌐 Full QUIC | Real QUIC via quic-go — 0-RTT, connection migration, UDP multiplexing |
| 🔀 Auto-Failover | Multi-path with priority/round-robin/latency strategies + auto-recovery |
| 🏗️ Adaptive Pool | Connection pool that auto-scales based on load (warmup, min/max) |
| ☁️ CDN Mode | Full CDN integration — Cloudflare, Gcore, Arvan (IP completely hidden) |
🕵️ Anti-DPI & Stealth
| Feature | Description |
|---|---|
| 🎭 Traffic Obfuscation | 4 modes: HTTPS mimic, Video streaming, Random burst, Constant rate |
| 🔒 DNS Leak Protection | Automatic DNS-over-HTTPS (DoH) — prevents DNS poisoning |
| 🛡️ TLS for tcpmux | Optional TLS encryption layer for tcpmux transport |
🌍 Networking
| Feature | Description |
|---|---|
| 🗺️ Split Tunneling | Rule-based routing with Iran IP bypass (200+ CIDRs) |
| 🌐 Cluster Mode | Multi-server with geographic routing, health checks, state sync |
| 🔄 Config Sync | Encrypted config push/pull between servers (AES-GCM) |
🔐 Security & Management
| Feature | Description |
|---|---|
| 🧩 Plugin System | Transport, Auth, and Filter plugins with hook system |
| ⚖️ Rate Limiter | Per-user/IP bandwidth control (token bucket) |
| 🚫 Security Manager | IP blacklist/whitelist, brute-force protection, audit log |
| 📜 ACME/Auto-Cert | Automatic TLS certificate management with auto-renewal |
📊 Monitoring & Operations
| Feature | Description |
|---|---|
| 📈 Real-time Dashboard | WebSocket-based with live traffic charts & user management |
| 📡 Prometheus + Grafana | Docker Compose monitoring stack with pre-built alert rules |
| 🐕 Watchdog | Systemd WatchdogSec + HTTP health endpoint |
| ♻️ Graceful Upgrade | Zero-downtime binary upgrades (no connection drops) |
| 🧠 Smart Detection | TCP/UDP/TLS/H2 probing with intelligent transport recommendation |
🔌 Integration Architecture
┌─────────────────────────────────────────────────────────┐
│ iPShadowT Engine │
├─────────────────────────────────────────────────────────┤
│ │
│ CLIENT SIDE: │
│ ┌─────────┐ ┌───────────┐ ┌──────────────────────┐ │
│ │ DNS DoH │→ │ Transport │→ │ Obfuscation Wrapper │ │
│ └─────────┘ └───────────┘ └──────────────────────┘ │
│ ↓ ↓ │
│ ┌─────────────────────────────────────────────────┐ │
│ │ Failover Manager (Multi-Path) │ │
│ └─────────────────────────────────────────────────┘ │
│ │
│ SERVER SIDE: │
│ ┌──────────┐ ┌───────────┐ ┌────────────────────┐ │
│ │ Security │→ │ Rate Limit│→ │ Plugin Filters │ │
│ └──────────┘ └───────────┘ └────────────────────┘ │
│ ↓ ↓ │
│ ┌─────────────────────────────────────────────────┐ │
│ │ Metrics + Health + Prometheus + Dashboard │ │
│ └─────────────────────────────────────────────────┘ │
│ │
└─────────────────────────────────────────────────────────┘
📦 Downloads
| File | Platform | Architecture |
|---|---|---|
ipshadowt-linux-amd64 |
Linux | x86_64 |
ipshadowt-linux-arm64 |
Linux | ARM64 (Raspberry Pi 4+) |
ipshadowt-linux-armv7 |
Linux | ARMv7 (Raspberry Pi 3) |
ipshadowt-linux-mips-softfloat |
Linux | MIPS (OpenWrt routers) |
ipshadowt-linux-mipsle-softfloat |
Linux | MIPS LE (OpenWrt) |
ipshadowt-windows-amd64.exe |
Windows | x64 |
ipshadowt-windows-arm64.exe |
Windows | ARM64 |
ipshadowt-darwin-amd64 |
macOS | Intel |
ipshadowt-darwin-arm64 |
macOS | Apple Silicon (M1/M2/M3) |
ipshadowt-freebsd-amd64 |
FreeBSD | x86_64 |
ipshadowt-manager.sh |
— | Deploy & management script |
configs-examples.tar.gz |
— | Example configurations |
monitoring-stack.tar.gz |
— | Prometheus + Grafana + Alerts |
SHA256SUMS.txt |
— | Checksums for verification |
🐳 Docker
docker pull ghcr.io/ipmartnetwork/ipshadowt:2.0.0
docker run -v ./config.toml:/etc/ipshadowt/config.toml ghcr.io/ipmartnetwork/ipshadowt:2.0.0⚡ Quick Install (Linux)
sudo bash <(curl -fsSL https://raw.githubusercontent.com/iPmartNetwork/iPShadowT/master/deploy/ipshadowt-manager.sh)📋 Upgrade from v1.0.0
# Option 1: Manager script (recommended)
sudo bash ipshadowt-manager.sh
# Choose: 8) Update → 1) Update binary
# Option 2: Manual
systemctl stop ipshadowt
curl -fSL -o /usr/local/bin/ipshadowt https://github.com/iPmartNetwork/iPShadowT/releases/download/v2.0.0/ipshadowt-linux-amd64
chmod +x /usr/local/bin/ipshadowt
systemctl start ipshadowt
⚠️ Config files are backward compatible — no changes needed. New features activate when you add their config sections.
🆕 New Config Sections (Optional)
# Health/Watchdog endpoint
[health]
enabled = true
listen = "127.0.0.1:9090"
# CDN mode (Cloudflare)
[cdn]
enabled = true
provider = "cloudflare"
domain = "your-domain.com"
path = "/tunnel"
tls = true
# Multi-path failover
[[paths]]
name = "direct"
remote_addr = "server-ip:443"
transport = "reality"
priority = 1
[[paths]]
name = "cdn-fallback"
remote_addr = "your-domain.com:443"
transport = "wsmux"
priority = 2🗺️ Roadmap (v3.0)
- Android/iOS client (gomobile)
- Desktop GUI (Wails)
- Telegram Bot management
- WireGuard integration
- Full E2E test suite
📊 Stats
- 30 files changed, 4,975 insertions(+), 203 deletions(-)
- 18 new modules added
- 10 platforms supported
- 0 breaking changes from v1.0.0
© 2026 iPmart Network (Ali Hassanzadeh)
Made with ❤️ for the community
iPShadowT v1.0.0
Anti-DPI Multi-Transport Tunnel Engine
9 Transports • 15 Stealth Techniques • 10 Defense Layers • Zero Dependencies
✨ What's New
- 🛡️ 9 transport protocols: TCP, WebSocket, HTTP/2, gRPC, REALITY, ShadowTLS, QUIC, KCP, Reverse
- 🕵️ 15 anti-DPI/stealth techniques (uTLS, Fragment, ECH, Domain Fronting, DNS Tunnel, ...)
- 🧠 Smart auto-detection of best transport
- 🔀 Multi-tunnel support (one-to-many, many-to-one, one-to-one)
- 📊 Web panel + REST API + User management
- 🐕 Connection watchdog (auto-restart on failure)
- 💾 Backup/Restore with auto-backup
- 📡 Port forward manager (TCP, UDP, SOCKS5)
- 🔥 Auto firewall + BBR + Kernel tuning
- 📤 Export client config (copy-paste ready)
📦 Downloads
| File | Platform | Arch |
|---|---|---|
ipshadowt-linux-amd64 |
Linux | x86_64 |
ipshadowt-linux-arm64 |
Linux | ARM64 |
ipshadowt-windows-amd64.exe |
Windows | x64 |
⚡ Quick Install (Linux)
sudo bash <(curl -fsSL https://raw.githubusercontent.com/iPmartNetwork/iPShadowT/master/deploy/ipshadowt-manager.sh)🗺️ Roadmap (v2.0)
- Full QUIC implementation (quic-go)
- Android/iOS client (gomobile)
- Desktop GUI (Wails)
- Telegram Bot management
- CI/CD Pipeline (GitHub Actions)
- Cluster mode with shared state
© 2026 iPmart Network (Ali Hassanzadeh)
Made with ❤️ for the community