release history

Changelog

What changed in each version of VibePN.

v0.3.0

October 2026featurestabilitysecurity
— App tunnels — every app through its own server (macOS)
A new “Tunnels” page: named tunnels with their own servers plus the main one, all raised by a single Connect. Bind any application to a tunnel, “Direct”, or “Block” — Chrome can exit in Germany while Telegram goes through the Netherlands and poker stays on its own server. Bound apps switch servers live, without dropping other apps’ connections. macOS first; Linux and Windows keep working exactly as before. Full guide (RU): docs/guides/app-tunnels.md in the app repository.
— One engine, live server switch everywhere
The whole engine config is now generated per-connect with a per-tunnel selector, so switching a server is a live API call on every platform — no more full reconnect where a switch used to rebuild everything. The control API is authenticated with a one-time secret that is regenerated on every connect and scrubbed on disconnect.
— Russian Direct preset: .рф fixed, RU services on foreign domains
The “.рф” rule was stored in Unicode while the network speaks punycode — it never matched; now it does (.xn--p1ai). Added “RU services on foreign TLDs → Direct” (habr.com, vk.com, yandex.com, …): RU hostings behind QRATORY throttle foreign VPN IPs, which made these sites hang for 5–10 s or fail. Live-verified: habr.com 89 ms direct vs 483 ms tunneled before the fix. Details (RU): docs/guides/russian-direct-preset.md.
— Linux: stale WebKit helper cleanup
If a previous run crashed, its orphaned WebKit helper processes no longer poison the new session — they are reaped at startup.
Rollout note. Windows and Linux installers are live now; the macOS .dmg for 0.3.0 follows separately (field checks in progress on all three platforms). Windows and macOS field verification is still in progress — report anything odd via the diagnostics report.

v0.2.0

August 7, 2026macOSstabilitysecurity
— Native macOS builds
VibePN now ships for macOS — native .dmg for Apple Silicon and Intel, GPG-signed like every other installer. (0.1.0 listed macOS as “coming soon” — here it is.)
— Honest server ping
Latency is now measured with a direct connection that bypasses the tunnel, so you see the real ping (40–150 ms) instead of a misleading ~1 ms. Servers that aren’t reachable from your network right now are honestly marked unavailable (“—”), not “lightning fast.” Works on Windows, macOS, and Linux.
— “Server unreachable” banner
If your selected server stops responding, a red banner tells you immediately — no more sitting on a dead connection without knowing.
— Tunnel survives network changes (macOS/Linux)
Switching Wi-Fi or roaming no longer drops the tunnel — DNS is correctly re-established on the new network. Built for flaky connections.
— Smart port selection
If the port VibePN needs is already taken by another app or VPN, the client automatically picks a free one — no conflicts. Now on every platform.
— Polish
Right-click context menu (paste/copy/cut) in input fields — handy for pasting subscription links. Clicking a server card no longer connects by accident (only the button does). The About tab now shows the current version and build date.
— Under the hood
Ping uses a direct TCP connect bound to the physical interface — SO_BINDTODEVICE (Linux), IP_BOUND_IF (macOS), IP_UNICAST_IF (Windows) — with its own DNS resolution that bypasses hijack. Every bundled binary (sing-box, tun2proxy, wintun) is SHA256-verified at startup. Reworked connect flow, a tun2proxy watchdog, and no more orphaned sing-box processes on exit. Every release artifact is GPG-signed (a detached .asc next to each file), macOS .dmg included.
macOS heads-up. Builds are signed with an Apple Developer ID but not yet notarized — Gatekeeper may warn on first launch. Right-click the app and choose Open to run it.

v0.1.1

May 31, 2026stabilitysecurity
— Kill-switch: stay connected on dead upstream
If the active server stops responding (3 failed outbound connections within 30 s), the tunnel stays up and the app shows a banner prompting you to switch servers. The tunnel does not drop automatically — an auto-drop would expose your real IP while you pick a new server. Recovery is automatic once the server comes back (5 successful outbounds within the window).
— GPG-signed installers
Every .deb, .rpm, and .exe published at vibepn.app/downloads now ships with a detached .asc signature you can verify against our public key. See vibepn.app/verify for step-by-step instructions. Public key: vibepn.app/pubkey.asc · fingerprint: DFB9 854D … 778A 7AF5
Heads-up. Windows Authenticode signing and macOS Apple Developer ID are still pending (paperwork in progress). SmartScreen warnings on Windows are expected on first run. GPG covers file integrity for now; OS-level publisher trust will follow.

v0.1.0

May 5, 2026initial release
— Desktop client on Tauri 2
Native installers for Windows, macOS (coming soon), and Linux. Thin Rust backend, sing-box 1.13 core, React UI. ~30 MB installer.
— 6 protocols via sing-box
VLESS (+Reality), VMess, Trojan, Shadowsocks (AEAD-2022), Hysteria 2, TUIC. One-click subscription import (Base64, sing-box JSON, SIP008).
— Rule-based routing + 4 presets
Russian Direct, China Direct, Block Ads, Bypass LAN — out of the box. Custom rules by domain, IP, port, or geosite.
— TUN mode on Windows (tun2proxy + wintun)
Full traffic capture at L3 — all apps go through the tunnel including those that explicitly bind to a local interface.
— Hot-reload, kill-switch, DoH
Config changes apply in under 10 ms without reconnecting. Kill-switch and DNS-over-HTTPS on by default.
— Localizations + tray
24 language localizations, system tray with quick-connect, desktop notifications.