DPI Bypass Tool for Android
Netrix bypasses Deep Packet Inspection (DPI) systems by fragmenting and manipulating TCP packets to circumvent SNI-based filtering.
Netrix implements packet manipulation techniques targeting the TLS ClientHello SNI field. By fragmenting packets at specific positions, DPI systems fail to reconstruct and analyze the Server Name Indication.
| Method | Description |
|---|---|
| Split | Fragments TLS ClientHello at configurable byte position (default: 2 bytes). SNI field spans multiple TCP segments. |
| Split Reverse | Sends fragments in reverse order—second fragment first, then first. Based on GoodbyeDPI's --reverse-frag. |
| Disorder | Breaks packet into N chunks (configurable). Each chunk sent with optional inter-packet delay. |
| Disorder Reverse | Sends N chunks in reverse order (last to first). |
| Fake | Sends decoy HTTP packet before real data, then applies Split. Confuses stateful DPI. |
TLS ClientHello
┌────────────────────────────────────────────────┐
│ [Header] [SNI: blocked.com] [Extensions...] │
└────────────────────────────────────────────────┘
│
▼
┌─────────────────┐
│ DPI Bypass │
│ • Parse SNI │
│ • Check WL │
│ • Fragment │
└─────────────────┘
│
┌───────────────┼───────────────┐
▼ ▼ ▼
┌─────────┐ ┌─────────┐ ┌─────────┐
│ Split │ │Disorder │ │ Fake │
│ [A][B] │ │[1]..[N] │ │[F]+[A,B]│
└─────────┘ └─────────┘ └─────────┘
| Parameter | Default | Description |
|---|---|---|
firstPacketSize | 2 | Split position in bytes |
splitCount | 4 | Number of fragments for Disorder |
splitDelay | 50ms | Inter-fragment delay |
fakeHex | GET / HTTP/1.0\r\n\r\n | Fake packet payload |
- VPN Mode — VpnService-based interception (no root)
- Root Mode — NFQUEUE kernel-level packet handling
- HTTP/HTTPS Desync — Independent toggle for each protocol
- Custom DNS — AdGuard, Cloudflare, Control D support
- QUIC Blocking — Forces TCP for services like YouTube
- TCP NoDelay — Disables Nagle's algorithm
- Domain Whitelist — Configurable bypass exceptions
- Real-time Logs — Connection and bypass activity
- Quick Settings Tile — One-tap toggle
- 6 Themes — System, AMOLED, Ocean, Forest, Sunset, Lavender
- Localization — English, Turkish
| Component | Technology |
|---|---|
| Language | Kotlin 2.0 |
| UI | Jetpack Compose |
| Design | Material Design 3 |
| Native | C (NFQUEUE daemon) |
| Build | Gradle 8.x + CMake 3.22 |
| NDK | 28.2 |
| Min SDK | 24 (Android 7.0) |
| Target SDK | 35 (Android 15) |
app/src/main/
├── kotlin/com/enki/netrix/
│ ├── vpn/
│ │ ├── BypassVpnService.kt # VpnService implementation
│ │ ├── TcpConnection.kt # TCP session management
│ │ ├── UdpConnection.kt # UDP/DNS handling
│ │ ├── DpiBypass.kt # Bypass algorithms
│ │ ├── Packet.kt # IP/TCP packet parser
│ │ └── PacketBuilder.kt # Packet construction
│ ├── native/
│ │ ├── NfqueueService.kt # Root mode service
│ │ ├── DaemonController.kt # Daemon IPC
│ │ └── RootHelper.kt # su command wrapper
│ ├── data/
│ │ ├── DpiSettings.kt # Configuration model
│ │ └── SettingsRepository.kt # SharedPreferences
│ └── ui/screens/ # Compose screens
└── cpp/
├── nfqueue_handler.c # libnetfilter_queue
├── dpi_bypass.c # Native bypass impl
└── CMakeLists.txt
┌─────────┐ ┌───────────┐ ┌─────────────┐
│ App │───▶│ TUN i/f │───▶│ Netrix │
└─────────┘ └───────────┘ └─────────────┘
│
┌─────────────────┴─────────────────┐
▼ ▼
┌────────────┐ ┌────────────┐
│ TCP │ │ UDP │
│ DpiBypass │ │ DNS Proxy │
│ SNI Parse │ │ QUIC Block │
└────────────┘ └────────────┘
│ │
└─────────────┬─────────────────────┘
▼
┌──────────────────────┐
│ Real Server │
│ (example.com:443) │
└──────────────────────┘
- Android 7.0+ (API 24)
- VPN permission
- Root (optional, for NFQUEUE mode)
See Releases for APK downloads.
| Setting | Recommended Value | Description |
|---|---|---|
| Bypass Method | Split | Best balance of speed and effectiveness |
| Split Position | 2 bytes | Works for most DPI systems |
| Delay | 50ms | Increase if bypass fails |
| QUIC Block | Enabled | Improves YouTube performance |
| Custom DNS | Enabled (AdGuard) | Ad blocking + privacy |
NFQUEUE mode provides kernel-level packet manipulation:
- Lower latency than VPN mode
- System-wide coverage
- Requires: Magisk + permissive SELinux or custom policy
git clone https://github.com/user/netrix.git
cd netrix
# Debug build
./gradlew assembleDebug
# Release build
./gradlew assembleRelease
# Native only
./gradlew externalNativeBuildDebugThis project is licensed under the GNU General Public License v3.0 — see LICENSE for details.