SNI Tunnel - V2ray Client

SNI Tunnel is a bring-your-own-server VPN client powered by upstream Xray-core. It lets you import, manage, test, and use compatible configs through a device-level VPN connection.

SNI Tunnel does not provide, sell, or assign VPN or proxy servers. You supply and control your own configs and must use only servers, networks, and services you are authorized to access.

Supported protocols

• VLESS
• VMess
• Trojan
• Shadowsocks classic AEAD and Shadowsocks 2022
• SOCKS5
• Hysteria 2 over QUIC

Features

• Import configs by pasting share links or scanning QR codes
• Create and edit configs manually
• HTTPS config subscription feeds supplied by the user
• Safe managed V2Ray/Xray JSON import
• TLS/SNI, Reality, VLESS Vision, ALPN, and uTLS fingerprint support
• TCP, WebSocket, gRPC, and HTTPUpgrade transports where applicable
• Hysteria 2 port hopping and Salamander obfuscation
• Test the selected config through its actual Xray proxy outbound
• Live upload, download, and connection statistics
• Favorite, sort, edit, share, and manage configs
• DNS, MTU, TUN stack, IPv6, routing, and advanced connection options
• Per-app routing options on Android
• Connect on Demand and Quick Connect features
• Local privacy-redacted diagnostic logs
• Encrypted and device-bound config support
• Cloud config sharing: a short link with a download limit, an expiry, and optional device restriction
• Protection that prevents sealed configs from being exported as plaintext

Android VpnService

VPN is the core functionality of SNI Tunnel. On Android, the app uses VpnService to create the device-level TUN interface, apply routing and DNS settings, and send traffic through the compatible server config selected by the user. VpnService is not used for advertising, analytics, tracking, monetization, or manipulation of advertising traffic.

Privacy

SNI Tunnel has no advertising SDK, analytics SDK, account system, or remote user database. Asnly LLC does not collect or share browsing history, DNS history, traffic content, config credentials, advertising identifiers, or VPN usage telemetry.

Configs, preferences, and privacy-redacted diagnostic logs remain locally on the device. Camera access is requested only when QR import is selected; QR frames are processed on-device and are not uploaded.

If you choose to share a config as a cloud config, it is encrypted on your device before upload and the decryption key stays inside the share link, so the distribution service cannot read it. The encrypted payload is deleted at its download limit, at expiry, when you revoke it, or after 30 days at the latest.

No Asnly account, paid subscription, in-app purchase, or payment is required. User-added HTTPS config subscription URLs are a local config-management feature and are not an Asnly subscription service.