TG WS Proxy

Native on-device MTProto proxy for Telegram. The app listens on 127.0.0.1:1443, authenticates clients with a generated MTProto secret, and relays traffic to Telegram data centers over TLS WebSocket connections. If the direct WebSocket route is unavailable, it can use a Cloudflare proxy domain or fall back to direct TCP.

Telegram is configured through a standard tg://proxy link. The app does not require root, an external proxy server, an account, analytics, or ads.

Features

- Native Kotlin proxy engine with MTProto AES-CTR re-encryption - Direct WebSocket transport with per-DC connection pools - Validated Cloudflare domain pool with per-DC sticky balancing - Configurable Cloudflare-first or TCP-first fallback order - Optional Cloudflare-first routing for every Telegram DC - Automatic per-network route selection with lightweight direct/Cloudflare/TCP probes - Route-aware direct WebSocket pooling and automatic reset after network changes - Foreground service, wake lock, notification restart/stop actions, and Quick Settings tile - Abridged, intermediate, and padded-intermediate MTProto framing - English and Russian UI - Optional detailed connection, traffic, route, error, and pool statistics - In-memory live connection log and explicit five-minute diagnostic report export - System, Light, Dark, and Android 12+ Material You appearance - Built-in English and Russian help for routing and diagnostics - Daily update notification with a static repository manifest fallback - Strict configuration validation and persistent DataStore settings

Usage

1. Install the APK and open TG WS Proxy. 2. Start the proxy from the app or the Quick Settings tile. 3. Tap Open in Telegram, or copy the generated tg://proxy link. 4. Confirm the MTProto proxy in Telegram.

The default listener is local-only. Binding to 0.0.0.0 exposes the proxy to the local network; clients still need the generated secret.

License

MIT