AsenaPlug

AsenaPlug — HTTPS-disguised tunnel for selective DPI/DNS-censorship bypass, with a system-tray app

DPI / DNS censorship‑bypass over Cloudflare MASQUE (usque) — a system‑tray app for Windows and Linux plus a native Android app, with per‑domain (blacklist) and full‑tunnel modes.

Traffic looks like ordinary HTTPS (MASQUE over HTTP/2 or HTTP/3), so it survives Turkish ISP DPI/throttling where WireGuard gets shaped. Physical internet stays the default — only the domains you list are tunneled, unless you pick full‑tunnel.

What you get A clickable system‑tray indicator (PySide6, no theme dependency): green dot when connected, gray when off, live status while switching. Two independent axes, both chosen from the tray: Transport — HTTP/2 (default, DPI‑resistant) or HTTP/3 (QUIC, lower latency) Routing — Blacklist only (default) or Everything (full tunnel) Blacklist submenu — add a domain or edit the list; changes apply live, without reconnecting (hot DNS reload). 5‑language UI — English, Deutsch, Español, Français, Türkçe; picks your OS language on first run (falls back to English), switchable from Language ›. Windows only: self‑updating (GitHub Releases), Start on boot toggle, one‑time auto‑setup (no installer), single‑instance, always‑elevated tray. Linux only: per‑app / per‑interface routing (Force Asena submenu), Hyprland autostart. AsenaPlug is a real tunnel, not just an SNI trick — it opens IP‑blocked sites too, and hides the traffic. In Turkey a clean, un‑poisoned DNS answer needs the query to travel through the tunnel; AsenaPlug does exactly that.