MintFlow NetStack

MintFlow NetStack is an advanced VPN client, proxy client, and HTTP debugging toolkit engineered for Apple platforms.

When enabled, it captures system traffic and forwards it to a high-performance packet processing core, allowing you to fine-tune networking behavior, including:

• Route traffic to self-hosted or third-party VPNs and proxies
• Steer traffic with rules for VPN, proxy, direct, reject, or drop actions
• Customize system DNS servers, with an optional high-performance internal DNS server written in Rust for domain-based routing and advanced features
• Capture and rewrite HTTP/HTTPS traffic with MITM decryption

MintFlow NetStack is free for everyone, with optional in-app purchases to unlock Pro features.

FREE FEATURES

The free version includes a full-featured high-performance VPN and proxy engine.

SUPPORTED PROTOCOLS

• Unlimited simultaneous WireGuard VPN connections
• Unlimited simultaneous HTTP and SOCKS5 proxies
• Proxy traffic can be routed over WireGuard VPN connections
• Import WireGuard configurations via file or QR code

TRAFFIC STEERING

• CIDR and CIDR-set based split routing
• Direct, reject, drop, VPN, and proxy routing actions

PROFILE MANAGEMENT

• Plain-text profile format for easier configuration editing

NETWORK DEBUGGING

• Built-in trace and ping tools

VPN INTERFACE CUSTOMIZATION

• Override VPN DNS servers, with optional DNS routing through VPN or proxy
• Customize VPN interface MTU

SIRI SHORTCUTS INTEGRATION

• Automate VPN control with Siri Shortcuts

PRO FEATURES

Pro includes all free features, plus:

ADVANCED VPN AND PROXY PROTOCOLS

• AmneziaWG, with AWG 1.0, 1.5, and 2.0 fully supported
• Shadowsocks, AEAD only
• Shadowsocks 2022
• VMESS, WebSocket plus TLS only

ADVANCED TRAFFIC STEERING

• App Routing: domain-based split routing using two DNS server sets with DoH/DoT support
• Route selected domains to VPN or proxy
• Route selected domains directly to the local internet
• Define multiple domain sets to organize apps by associated domains
• DNS logs and real-time activity view

HTTPS CAPTURE AND REWRITE

• MITM-based HTTPS traffic capture, with App Routing enabled
• Built-in preview for CSS, JS, HTML, and JSON in captured requests and responses
• HTTPS rewrite rules

ADVANCED PROFILE MANAGEMENT

• Multiple profiles for work, homelab, travel, and other environments
• Activate different profiles as needed

ON-DEMAND VPN

• Automatically start VPN when specific criteria are met

TECHNOLOGY

MintFlow NetStack is powered by the enterprise-grade FD.io VPP networking stack, delivering high-performance packet processing on Apple platforms.

The HTTP engine is implemented in Rust, using memory safety and modern concurrency design for secure and efficient HTTPS inspection. It integrates directly with the VPP core to minimize overhead.

NOTES

1. MintFlow NetStack does NOT provide VPN or proxy services. You must configure your own or third-party servers as virtual interfaces and customize routing behavior to suit your needs.
2. HTTPS capture is a Pro feature and requires App Routing to be enabled.
3. WireGuard® is a registered trademark of Jason A. Donenfeld.
4. WireGuard import is designed for standard WireGuard configuration files and QR codes.
5. Starting with 1.9.0, MintFlow NetStack can run on macOS devices with Apple Silicon using the iPad version. A dedicated macOS version is planned for the future.

MintFlow NetStack is a highly customizable networking toolkit. For best results, please read the online manual:

http://galaxnet.cc/mintflow/manual

Privacy Policy: https://galaxnet.dev/mintflow/legal/privacy/ Terms of Service: https://galaxnet.dev/mintflow/legal/tos/