Anti-DPI Multi-Transport Tunnel Engine
9 Transports • 15 Stealth Techniques • 18 New Modules • Full QUIC • Auto-Failover
🚀 What's New in v2.0.0
This is a major release with 18 new modules fully integrated into the engine. Every feature from the v1.0 roadmap has been delivered.
⚡ Transport
| Feature |
Description |
| 🌐 Full QUIC |
Real QUIC via quic-go — 0-RTT, connection migration, UDP multiplexing |
| 🔀 Auto-Failover |
Multi-path with priority/round-robin/latency strategies + auto-recovery |
| 🏗️ Adaptive Pool |
Connection pool that auto-scales based on load (warmup, min/max) |
| ☁️ CDN Mode |
Full CDN integration — Cloudflare, Gcore, Arvan (IP completely hidden) |
🕵️ Anti-DPI & Stealth
| Feature |
Description |
| 🎭 Traffic Obfuscation |
4 modes: HTTPS mimic, Video streaming, Random burst, Constant rate |
| 🔒 DNS Leak Protection |
Automatic DNS-over-HTTPS (DoH) — prevents DNS poisoning |
| 🛡️ TLS for tcpmux |
Optional TLS encryption layer for tcpmux transport |
🌍 Networking
| Feature |
Description |
| 🗺️ Split Tunneling |
Rule-based routing with Iran IP bypass (200+ CIDRs) |
| 🌐 Cluster Mode |
Multi-server with geographic routing, health checks, state sync |
| 🔄 Config Sync |
Encrypted config push/pull between servers (AES-GCM) |
🔐 Security & Management
| Feature |
Description |
| 🧩 Plugin System |
Transport, Auth, and Filter plugins with hook system |
| ⚖️ Rate Limiter |
Per-user/IP bandwidth control (token bucket) |
| 🚫 Security Manager |
IP blacklist/whitelist, brute-force protection, audit log |
| 📜 ACME/Auto-Cert |
Automatic TLS certificate management with auto-renewal |
📊 Monitoring & Operations
| Feature |
Description |
| 📈 Real-time Dashboard |
WebSocket-based with live traffic charts & user management |
| 📡 Prometheus + Grafana |
Docker Compose monitoring stack with pre-built alert rules |
| 🐕 Watchdog |
Systemd WatchdogSec + HTTP health endpoint |
| ♻️ Graceful Upgrade |
Zero-downtime binary upgrades (no connection drops) |
| 🧠 Smart Detection |
TCP/UDP/TLS/H2 probing with intelligent transport recommendation |
🔌 Integration Architecture
┌─────────────────────────────────────────────────────────┐
│ iPShadowT Engine │
├─────────────────────────────────────────────────────────┤
│ │
│ CLIENT SIDE: │
│ ┌─────────┐ ┌───────────┐ ┌──────────────────────┐ │
│ │ DNS DoH │→ │ Transport │→ │ Obfuscation Wrapper │ │
│ └─────────┘ └───────────┘ └──────────────────────┘ │
│ ↓ ↓ │
│ ┌─────────────────────────────────────────────────┐ │
│ │ Failover Manager (Multi-Path) │ │
│ └─────────────────────────────────────────────────┘ │
│ │
│ SERVER SIDE: │
│ ┌──────────┐ ┌───────────┐ ┌────────────────────┐ │
│ │ Security │→ │ Rate Limit│→ │ Plugin Filters │ │
│ └──────────┘ └───────────┘ └────────────────────┘ │
│ ↓ ↓ │
│ ┌─────────────────────────────────────────────────┐ │
│ │ Metrics + Health + Prometheus + Dashboard │ │
│ └─────────────────────────────────────────────────┘ │
│ │
└─────────────────────────────────────────────────────────┘
📦 Downloads
| File |
Platform |
Architecture |
ipshadowt-linux-amd64 |
Linux |
x86_64 |
ipshadowt-linux-arm64 |
Linux |
ARM64 (Raspberry Pi 4+) |
ipshadowt-linux-armv7 |
Linux |
ARMv7 (Raspberry Pi 3) |
ipshadowt-linux-mips-softfloat |
Linux |
MIPS (OpenWrt routers) |
ipshadowt-linux-mipsle-softfloat |
Linux |
MIPS LE (OpenWrt) |
ipshadowt-windows-amd64.exe |
Windows |
x64 |
ipshadowt-windows-arm64.exe |
Windows |
ARM64 |
ipshadowt-darwin-amd64 |
macOS |
Intel |
ipshadowt-darwin-arm64 |
macOS |
Apple Silicon (M1/M2/M3) |
ipshadowt-freebsd-amd64 |
FreeBSD |
x86_64 |
ipshadowt-manager.sh |
— |
Deploy & management script |
configs-examples.tar.gz |
— |
Example configurations |
monitoring-stack.tar.gz |
— |
Prometheus + Grafana + Alerts |
SHA256SUMS.txt |
— |
Checksums for verification |
🐳 Docker
docker pull ghcr.io/ipmartnetwork/ipshadowt:2.0.0
docker run -v ./config.toml:/etc/ipshadowt/config.toml ghcr.io/ipmartnetwork/ipshadowt:2.0.0
⚡ Quick Install (Linux)
sudo bash <(curl -fsSL https://raw.githubusercontent.com/iPmartNetwork/iPShadowT/master/deploy/ipshadowt-manager.sh)
📋 Upgrade from v1.0.0
# Option 1: Manager script (recommended)
sudo bash ipshadowt-manager.sh
# Choose: 8) Update → 1) Update binary
# Option 2: Manual
systemctl stop ipshadowt
curl -fSL -o /usr/local/bin/ipshadowt https://github.com/iPmartNetwork/iPShadowT/releases/download/v2.0.0/ipshadowt-linux-amd64
chmod +x /usr/local/bin/ipshadowt
systemctl start ipshadowt
⚠️ Config files are backward compatible — no changes needed. New features activate when you add their config sections.
🆕 New Config Sections (Optional)
# Health/Watchdog endpoint
[health]
enabled = true
listen = "127.0.0.1:9090"
# CDN mode (Cloudflare)
[cdn]
enabled = true
provider = "cloudflare"
domain = "your-domain.com"
path = "/tunnel"
tls = true
# Multi-path failover
[[paths]]
name = "direct"
remote_addr = "server-ip:443"
transport = "reality"
priority = 1
[[paths]]
name = "cdn-fallback"
remote_addr = "your-domain.com:443"
transport = "wsmux"
priority = 2
🗺️ Roadmap (v3.0)
📊 Stats
- 30 files changed, 4,975 insertions(+), 203 deletions(-)
- 18 new modules added
- 10 platforms supported
- 0 breaking changes from v1.0.0
© 2026 iPmart Network (Ali Hassanzadeh)
Made with ❤️ for the community