L×Box: VPN & Proxy Client

L×Box is a high-performance proxy client with no compromises.

You choose the servers. You set the rules. You control the traffic. L×Box does exactly what you told it to.

12+ protocols, your Tailscale network, advanced routing, full DNS control, detour chains, per-app split tunneling and built-in diagnostics. No account, no ads, no analytics.

THE CORE IS OURS

L×Box runs on sing-box-lx, our own fork of sing-box, developed together with the app. On top of stock sing-box the core adds:

• AmneziaWG 3.1 — obfuscated WireGuard;
• XHTTP — Xray transport, including stream-one;
• VLESS + ML-KEM-768 — post-quantum protection;
• MASQUE — Cloudflare WARP as a full node and a chain link.

And it is tuned for real life on a phone:

• DNS groups — several resolvers with failover;
• smart urltest — pools, sticky selection, lazy health checks;
• load balancing — connections spread across the pool;
• self-healing of stuck connections;
• idle tunnel sleep — less memory, less battery;
• observability — DNS, connections and chains visible from the app.

12+ PROTOCOLS

VLESS, VMess, Trojan, Shadowsocks, Hysteria2, TUIC v5, NaiveProxy, AnyTLS, SSH, SOCKS, WireGuard, Tailscale, AmneziaWG 3.1, MASQUE over QUIC/HTTP-3.

Cloudflare WARP in one tap: simple registration right in the app, the private key is generated on your device and never leaves it — Cloudflare receives only the public half. WireGuard or MASQUE, optional AmneziaWG obfuscation.

Import any familiar format: subscriptions and links, Base64, Xray arrays, WireGuard URI/INI, Amnezia vpn://, sing-box JSON configs, local files, plain text.

TAILSCALE WITHOUT A SECOND APP

Android runs one VPN at a time, so a Tailscale app and a proxy client cannot run together. In L×Box the Tailscale node runs inside the core: the phone joins your tailnet, and the rest of the traffic follows your rules.

• devices answer by name through MagicDNS;
• exit to the internet through an exit node of your tailnet;
• sign-in, device list and ping with the path in the app;
• your own control server is supported.

SUBSCRIPTIONS WITHOUT MANUAL WORK

Add a subscription — L×Box parses it and creates nodes with no duplicates. Unwanted nodes can be switched off and stay off through every update, even if the provider renames them.

Processing rules with regex and capture groups rename, rewrite or disable nodes on every refresh — and show in advance which nodes a rule will hit.

Coming from another sing-box client? Import the whole config — with auto-select groups and detour chains.

ROUTING YOU ACTUALLY CONTROL

Shape your internet exit around your life. One device can host several environments at once: work, travel, safe browsing and acceleration, the open internet. Each with its own rules and its own route.

Conditions: domain, IP and CIDR, port, protocol, app, network type.

DNS UNDER YOUR CONTROL

Several resolvers at once. A separate DNS per rule. FakeIP.

FULL DIAGNOSTICS ON BOARD

Ping and speed-test a node, a folder or the whole subscription — with the tunnel up or down. One-way connections get flagged. Full log right in the app. In real time the built-in tools show: which app opened a connection, where to, how much it transferred, which DNS it used, which route it took. Speed and traffic per app and per connection.

AUTOMATION

Works with automation tools (such as Tasker or MacroDroid): start, stop, switch node, query state. Your phone reshapes the setup to your scenarios — at home, on the road, when Wi-Fi changes.

WE SEND YOUR DATA NOWHERE

No account. No ads, no analytics, no advertising ID, no crash reporters. L×Box connects only to the servers and update endpoints you configured. Full backup and restore moves your setup to a new device.

A CLIENT, NOT A VPN SERVICE

L×Box provides no servers and sells no access to anyone's network — you choose your servers and subscriptions.

OPEN SOURCE

Free software under GPLv3. English and Russian UI, light and dark themes.
GitHub: github.com/Leadaxe/LxBox