AI summary
Unofficial open-source GUI client for Cloudflare WARP using the MASQUE protocol. Provides full-device VPN, SOCKS5/HTTP proxy, encrypted DNS (DoH/DoT), network quality diagnostics, and per-app routing. v0.2.4 adds Network Quality monitoring, encrypted direct DNS with strict TLS, improved HTTP/3 path migration, and more resilient Android lifecycle handling.
Generated by AI. May contain inaccuracies.
Screenshots
About this app
☁️ Usque is an unofficial, open-source GUI client for Cloudflare WARP, designed to provide a modern interface for WARP connections using the MASQUE protocol.
Built with a Flutter interface and a native Rust networking engine, Usque combines VPN, proxy, DNS, routing, connection diagnostics, and network-quality tools in a single application.
🚀 Main Features
• Cloudflare WARP client — connect to consumer WARP using WARP registration, License Keys, or an exported WARP Secret.
• MASQUE & CONNECT-IP — uses Cloudflare's modern MASQUE transport with CONNECT-IP for the tunnel.
• HTTP/3 & HTTP/2 — uses HTTP/3 over QUIC when available and can fall back to HTTP/2 over TLS.
• IPv4 & IPv6 — supports IPv4 and IPv6 network paths with Happy Eyeballs for connection establishment.
• Full-device VPN — route device traffic through an Android VPN tunnel using the configured WARP connection.
• SOCKS5 & HTTP Proxy — provides local SOCKS5 and HTTP proxy listeners for applications that support manual proxy configuration.
• Windows System Proxy — on Windows, Usque can integrate with the system proxy in addition to VPN and local proxy modes.
• Kill Switch — helps prevent traffic from leaving through the normal network path while the protected VPN state is active.
• LAN Access & CIDR Rules — allow local network access and configure custom CIDR bypass rules.
🌐 Advanced DNS
Usque provides several DNS options, including:
System DNS • DNS-over-HTTPS (DoH) • DNS-over-TLS (DoT)
Encrypted DNS connections use strict TLS validation and do not silently fall back to plaintext when an encrypted resolver fails.
Optional country-based direct routing can also use GeoIP and GeoSite information to determine how selected destinations are handled.
📊 Network Quality
The built-in Network Quality page provides useful connection information such as:
• Round-trip time (RTT) • Packet loss • Queue information • MTU / PMTU information • Path migration status • Direct DNS information • Short-term network trends
Usque also provides local diagnostic tools for troubleshooting connection and network-state issues.
📱 Android Features
The Android version includes several platform-specific features:
• Android VpnService integration • Per-app proxy selection • Quick Settings tile • Launcher shortcuts • Boot recovery • Android TV support
With per-app proxy enabled, you can choose which installed applications use the VPN tunnel.
🔄 Profiles
Usque supports multiple profiles, with one active profile at a time.
Each profile can maintain its own WARP identity and connection settings, making it easier to manage different configurations without mixing their credentials.
🛡️ Privacy & Diagnostics
Usque states that it does not use analytics or automatically upload diagnostics.
Diagnostic information is handled locally and sensitive information is redacted. Network-quality history is kept in memory rather than permanently stored.
💻 Supported Platforms
Android / Android TV 📱 Requires Android 8.0 (API 26) or newer.
Windows 💻 Supports Windows 10 22H2 (build 19045) or newer on supported x64 and ARM64 systems.
The project also contains macOS source code, but macOS is not currently included as a production release target.
🔓 Open Source
Usque is released under the MIT License and its source code is publicly available on GitHub.
Usque is an independent third-party project and is not affiliated with, sponsored by, or endorsed by Cloudflare. Cloudflare and WARP are trademarks of Cloudflare, Inc.
What's new
- ✨ Highlights:
- Usque v0.2.4 is a feature and reliability release that adds Network Quality, encrypted direct DNS, and more resilient transport and platform lifecycle handling.
- Network Quality provides a local, non-persistent 60-second view of RTT, loss availability, queue pressure, PMTU, migration, and direct DNS. Network Doctor keeps Standard checks read-only and requires explicit authorization for Deep checks.
- HTTP/3 can now migrate across same-family physical paths and automatically discover the outer-path PMTU. Tuned HTTP/2 flow control, owned packet-buffer reuse, and bounded Android/Linux UDP batching improve resilience and throughput without unbounded queues.
- Direct-country DNS now supports explicit System, DoH, and DoT resolvers with numeric bootstrap and strict TLS. Encrypted resolver failures never silently downgrade to plaintext.
- Windows and Android now bind recovery and direct egress to exact network generations, clean up more consistently across shutdown and detach paths, and recover orphaned VPN state without starting a new tunnel on an unsafe or stale platform state.
- 🌐 DNS privacy
- GeoSite-matched direct-country queries use the selected direct DNS mode. System (the default) exposes them to the physical DNS provider; DoH or DoT exposes them to the configured encrypted resolver using numeric bootstrap and strict TLS, with no plaintext fallback. Other queries continue through WARP DNS. Apps that use their own encrypted DNS hide the domain from Usque, so those connections fall back to GeoIP routing.
About this version
- Version
- 0.2.4 (2018)
- Size
- 29.45 MB
- Requires Android
- 8.0
- Target SDK
- 26
- Architecture
- arm64-v8a
- Downloads
- 12
- Updated
- Sep 7, 2026
- Package
- io.github.georgexie2333.usque
Similar apps
Ratings & reviews
- 51
- 40
- 30
- 20
- 10
Write a review
Recent reviews
Showing 1 of 1- Николай 3d ago