zapret-ksu

KernelSU / KernelSU-Next module that runs zapret (nfqws and nfqws2) for DPI bypass on Android, including TG WS Proxy, DNSCrypt, Blockcheck, a separate companion app and Wi-Fi/Mobile profiles.

Features Two engines. nfqws2 (zapret 2, presets, recommended) and nfqws1 (zapret 1, strategies with game filter and ipset). Smart Mode. Spots sites that reset or stall and adds them to the host list on its own. Blockcheck. Tests every preset against your blocked hosts and ranks the results. Whitelist check. Shows whether you are on a whitelist network and whether zapret is helping. Per-app routing. Include or exclude individual apps from the bypass. Host lists. Toggle services (YouTube, Discord, Instagram, X and more), add custom domains, and edit, import or export any list. Encrypted DNS. A local DoH proxy (dnscrypt-proxy) with redirects for system DNS. TG WS Proxy. A local Telegram MTProto proxy, optionally shared on your Wi-Fi. Auto network profile. Separate engine, preset and interface for Wi-Fi and mobile data. Quick Settings tiles for zapret, DNS and TG proxy. Backup and restore of settings, lists and presets. Logs with level and text filters. App autoupdate. On launch, checks GitHub for new releases and pre-releases, downloads the new APK through the module and opens the Android installer. Turn it off or check manually in Settings → Download. Two looks. Material 3 with wallpaper colors, or Liquid Glass. Install Flash zapret-ksu-module.zip in the KernelSU manager and reboot. Install the app and grant it root. Open Tools → Updates and tap Update everything. In Settings → Engine, pick an engine and a preset or strategy. On Home, tap the orb to start. Requirements KernelSU or KernelSU-Next with root granted to the app. Internet access for the first download. curl on the device (recommended). Without it, HTTPS certificates are not checked.

License

GPL-3.0