OpenRung

Reach the open internet, from your phone.

The OpenRung cross-platform mobile client: a React Native control shell on top of a production-equivalent native VPN path — Android and iOS, both driving the sing-box/libbox engine.

OpenRung is a nonprofit relay network with relays operated by its Foundation and community volunteers. It helps people living behind internet censorship reach blocked websites and apps.

Highlights:

🗺️ Full-screen exit-node map — the MapLibre map is the home screen: crisp in the center, dissolving into the dark backdrop toward the edges, and pannable/pinch-zoomable throughout. Tap a country marker to connect through a relay there.

🪟 Floating connect card — a glass panel with a live status row (pulsing indicator + relay location) and the primary CONNECT/DISCONNECT action.

🧭 Translucent tab bar — Home / Settings / About us, floating over the map.

🌃 Terminal cyberpunk theme — the production green-on-black palette (#65F58A on #030604), all-monospace type, neon glows and HUD accents.

🌍 10 locales — persisted per-app language selection.

📦 Offline Android sharing — send the installed, signed APK through the system sharesheet to Quick Share or any compatible nearby-transfer app; no network or storage permission is required.

🕳️ Direct volunteer-run CGNAT relays on Android — NAT punching establishes a client↔relay QUIC path and keeps RelayHub out of the data plane whenever both NATs permit it, with certificate-pinned coordination, end-to-end health monitoring, and automatic hub fallback otherwise.

🌐 Signed per-relay WSS/CDN fallback — a remote direct-path failure can use a short-lived front-bound ticket and the pinned wsscore transport, including SNI-less native CloudFront access, while Reality remains end-to-end and local failures stay local.

🔀 Preset split tunneling — on by default, bypassing the local network plus Iranian and Chinese sites & apps (bundled sing-box rule sets). On Android, users can also bypass individual apps. Changes apply live via a quick reconnect, and a bad config or missing rule set degrades to full tunnel — it never breaks connect.

🧪 Demoable without a native build — a scripted mock engine drives the UI through the full connect lifecycle so you can develop and demo with no device.