Dobby VPN

Verified safeOpen sourceExclusive
—
No reviews reviews
27
downloads
8.0
android

AI summary

VPN client for Outline and Cloak connections, using HTTPS YAML subscriptions or dynamic keys. The latest update fixes DNS tunnel bypasses, socket protection, and HTTP/3 trailer handling; support starts with Android 15.

Generated by AI. May contain inaccuracies.

About this app

Yet another VPN client. Currently wraps around OutlineSDK & cloak. XRay & AWG are in progress.

DeepWiki: https://deepwiki.com/DobbyVPN/DobbyVPN

Consume 'subscription' / 'dynamic keys' - YAML via HTTPS in one of the following formats:

Clean ShadowSocks (best performance)

[Outline] # Implementation library Description = "My fast SS" # description - whatever you like Server = "1.1.1.1" # IP or DNS name for the server Port = 443 # ShadowSocks port Password = "Qwerty123" # user's 'secret' from the Outline's config - NOT the part in 'ss://' config DisguisePrefix = "POST " # one - for TCP & UDP for now; for options - see ref. # 1 below

[ExcludeIPs] IPs = [ "200.200.200.200/32" # IP adress or subnet that we want to exlude from vpn-routing ]

ShadowSocks via WebSocket (caddy -> outline-ss-server)

[Outline] # Implementation library Description = "My beautiful SS in WS" # description - whatever you like WebSocket = true # flag to enable WebSocket Server = "www.myserver.com" # DNS name of the server Password = "Qwerty123" # user's 'secret' from the Outline's config WebSocketPath = "/WS_Ooth5OoCoo7reDah5oich1gai0che2ugh8pho" # listeners.path (one for both TCP & UDP for now) DisguisePrefix = "POST " # for options see ref. # 1 below

[ExcludeIPs] IPs = [ "200.200.200.200/32" # IP adress or subnet that we want to exlude from vpn-routing ]

ShadowSocks over cloak (caddy -> cloak -> outline-ss-server)

[Outline] # Implementation library Description = "My sneaky SS in Cloak" # description - whatever you like Cloak = true # enables cloak (what is cloak? see ref # 2 below) Server = "www.myserver.com" Password = "Qwerty123" # user's 'secret' from the Outline's config BrowserSig = "chrome" # or "firefox" EncryptionMethod = "plain" # plain / aes-256-gcm aka aes-gcm / aes-128-gcm / chacha20-poly1305; ShadowSocks provides it's own encryption # the following three lines are coming from the quick-cloak-server setup script (ref # 3 below); or could be picked up from .env and cloak-server.conf files. UID = "hi8WIXyln+amtgfQeT11zQ==" PublicKey = "9x3F9q3piIG9yZamqnbl+e6Tr9ZZZrjhfrsqHkG3+Yo=" CDNWsUrlPath = "/JmJWXlmVXByXicD7DGrdMWV1btwHv0ARK0Yjoaig"

[ExcludeIPs] IPs = [ "200.200.200.200/32" # IP adress or subnet that we want to exlude from vpn-routing ]

VLESS + Reality over xray-core (more details: https://xtls.github.io/en/config/outbounds/vless.html)

[Xray] # Implementation library log = { loglevel = "info" } # Providing DobbyVPN and xray's log level # Warning: Inbound field will be modified due to custom tunneling settings outbounds = [ { tag = "proxy", protocol = "vless", settings = { vnext = [{address = "www.myserver.com", port = 443, users = [{id = "hi8WIXyln+amtgfQeT11zQ==", flow = "xtls-rprx-vision", encryption = "none"}]}]}, streamSettings = {network = "tcp",security = "reality", realitySettings = {show= false, fingerprint = "randomized", serverName = "secretSNI.com", publicKey = "9x3F9q3piIG9yZamqnbl+e6Tr9ZZZrjhfrsqHkG3+Yo=", shortId = "a1b2c3d4", spiderX = "/"}}}, {tag = "direct", protocol = "freedom"}]

References:

- 1. Connection Prefix Disguises: https://developers.google.com/outline/docs/guides/service-providers/prefixing - 2. Cloak: https://github.com/cbeuw/Cloak - 3. quick-cloak-server

License

Apache 2.0

What's new

v1.5.8Oct 26, 2026

Prevent conventional Windows DNS queries (TCP/UDP port 53) from bypassing the connected tunnel. Session-owned DNS filters preserve backend endpoint resolution and are removed during cleanup. Fixes #133, reported by @alexander-potemkin. Correct platform protection of external IPv4 and IPv6 TCP/UDP sockets, including TrustTunnel sockets. Invalid or unsupported descriptors now fail explicitly, with socket-family diagnostics in ordinary logs. Bound decoded HTTP/3 trailer fields in both QUIC implementations, addressing CVE-2026-40898 / GHSA-vvgj-x9jq-8cj9. This includes the separate Apernet path used by optional Xray HTTP/3. Update selected networking and build dependencies, and enable weekly Dependabot checks for Python tooling requirements. Clarify Android compatibility: installation is permitted from Android 8 (API 26); support starts at Android 15 (API 35). Android 8–14 remain unsupported.

About this version

Version
1.5.8 (1005008)
Size
42.71 MB
Requires Android
8.0
Target SDK
26
Architecture
x86, x86_64, arm64-v8a, armeabi-v7a
Downloads
27
Updated
Oct 26, 2026
Package
com.dobby.vpn
Languages1
English

Similar apps

Ratings & reviews

—
0 ratings
  • 5
    0
  • 4
    0
  • 3
    0
  • 2
    0
  • 1
    0

Write a review

Tap a star to rate this app