MarbleNG

MarbleNG is a modern Android network client built around Xray-core, Android VpnService, and hev-socks5-tunnel. It provides fast one-tap VPN connections, real proxy verification, intelligent routing, and a clean Compose interface. It supports VLESS, VMess, Trojan, Shadowsocks, Hysteria2, SSH, SOCKS, HTTP, and WireGuard-style configurations.

Key Features

- Always remembers the last successfully connected node – one-tap reconnect after app restart. - Full-device Android TUN mode or local SOCKS proxy mode. - Real tunnel verification (not just TCP port checks) for reliable connection testing. - Smart ranking for the whole Library or one selected source. - Supports import via HTTPS subscription URLs, clipboard, config files, and manual profiles. - Search nodes by name, protocol, host, transport, or security; sort by ping, name, protocol, or source. - Live ping, jitter, and quality metrics while connected. - Iran Mode / regional protection with automatic domestic-direct routing, ISP classification, confidence-based detection, and filtering-technique observations. - Per-app split tunneling (all apps, selected apps only, or bypass selected apps). - Expert DNS controls (TCP/UDP, DoH, adaptive ordering, IPv4/IPv6 preferences, resolver presets). - Advanced routing: Proxy all, Private direct, Geo direct, Custom. Includes GeoIP/GeoSite tags, private-network bypass, domain strategy, and ad blocking. - TLS fragmentation (ClientHello, fragment length, interval) and Mux (TCP/XUDP concurrency, UDP/443 policy, adaptive). - Chain proxy – optional two-hop route using a second selected profile as the next hop. - Marble Intelligence: network-scoped route history, persistent health evidence, connection race, smart fallback, network-change recovery, adaptive MTU, adaptive DNS ordering, IPv4/IPv6 adaptation, adaptive throughput testing, UDP/QUIC health evidence, thermal-aware testing, adaptive tunnel buffers, workload profiles, continuous route optimization. - Marble Turbo: compares measured transport strategies on the selected route and remembers the better method. - Built-in diagnostics (Bug Finder) with exportable runtime logs, Xray runtime, TUN/HEV state, connection history, and routing assets. - In-app update checks via GitHub Releases with native update dialog. - Built-in VPN foreground service notification with live telemetry (RTT, jitter, quality, download/upload rate, physical-network info).

Supported Inputs

- URI/subscription links: VLESS, VMess, Trojan, Shadowsocks, Hysteria2, SOCKS, HTTP/HTTPS, SSH. - Base64 subscription payloads and plain link lists. - Xray JSON, manual profiles, and WireGuard-style configs. - Xray transports: TCP, WebSocket, gRPC, HTTP/2, HTTPUpgrade, XHTTP/SplitHTTP, mKCP. - Security: TLS/REALITY with SNI, ALPN, fingerprints, and custom Xray JSON.

How to Use

1. Open the app and go to the Library tab. 2. Add a subscription URL, paste configs from clipboard, or create a manual profile. 3. The app will fetch and parse nodes. 4. Go to Home, select a node, and tap Connect. 5. The app will test and verify the tunnel (real Xray verification), then establish the VPN connection. 6. One-tap reconnect is available after app restart – the app remembers your last successful connection.

Connection Modes

- Full TUN mode: routes all device traffic through the VPN tunnel (Android VpnService + hev-socks5-tunnel + Xray). - Local proxy mode: exposes a local SOCKS/HTTP proxy without routing the whole device.

Security and Privacy

- Full-device TUN supports fail-closed behavior and kill-switch state. - DNS interception and encrypted DNS (DoH) support. - Identity Guard and split-tunnel visibility. - Privacy audit through the active proxy – observe exit IP and DNS. - For stronger OS-level protection, enable Android's "Always-on VPN" and "Block connections without VPN". - Never commit subscription credentials or signing keys – treat imported proxy URLs as secrets.

Limitations and Requirements

- Requires Android device with VPN permission. - SSH supports TCP only; UDP is fail-closed. - Some expert features (Iran Mode, deep probing, advanced routing) require specific configurations. - Native cores (Xray-core and hev-socks5-tunnel) are pinned in core-lock.json for reproducibility.

Settings Overview

- Appearance: White, Dark, System themes. - Connection: TUN/proxy mode, kill-switch, last-route persistence. - Testing & ping: TCP reachability, real Xray tunnel verification. - Split tunneling: per-app routing. - Notifications: connection events, recovery, privacy warnings, live telemetry. - Subscriptions: refresh cadence, manual refresh, safe deletion. - Regional protection / Iran Mode: Auto, Always on, Off. - Marble Intelligence: adaptive features (on/off). - DNS: primary/secondary TUN DNS, DoH, adaptive ordering, resolver presets. - Routing: GeoIP/GeoSite, direct/blocked domains/IPs, ad blocking. - Fragmentation & Mux: TLS fragmentation, Mux concurrency, adaptive options. - Chain proxy: two-hop routing. - Bug Finder: diagnostics and runtime logs.

License

This project is not open source.

In the absence of an explicit license, GitHub's default rule is that all rights are reserved.