A Magisk/KernelSU/APatch module that tunnels all device traffic through an SSH connection with optional OpenVPN chaining. Designed for Android arm64 devices with root access. Features SSH Tunnel Modes — Redirect (NAT, TCP), TPROXY (kernel transparent proxy, TCP+UDP), TUN/TUN+UDPGW Payload Injection — Custom HTTP payloads for carrier bypass (HTTP Injector / HTTP Custom compatible) SNI Spoofing — Direct SNI or SNI-over-HTTP-proxy transport modes DNS Through Tunnel — Local DNS forwarder (UDP 127.0.0.1:5353) that resolves all DNS queries as TCP through the SSH tunnel, fixing "no internet" in YouTube/Chrome VPN Chain — Route OpenVPN over the SSH tunnel (OpenVPN over SSH SOCKS5) Hotspot Sharing — Forward hotspot/tethering clients through the tunnel Transparent Reconnect — SSH reconnects without flapping iptables; apps stall briefly with no traffic leak (fail-closed) Latency Measurement — In-app TCP connect latency test (Google, Cloudflare) through the SOCKS proxy Channel Pool — Pre-warmed SSH channels for reduced per-connection latency TCP Buffer Tuning — Maximize socket buffers for high throughput QUIC Block — Force TCP fallback for apps that prefer QUIC IPv6 Control — Disable IPv6 system-wide while tunnel is active Module Status — Real-time status in KSU/Magisk module manager (running/reconnecting/stopped) WebUI — Local HTTP API on 127.0.0.1:9190 for status and control Companion App — Miuix-based Material You app with profiles, logs, settings, and VPN Chain management Requirements Root: Magisk, KernelSU, or APatch Architecture: arm64 only Android: 8.0+ (API 26+)