TUTORIAL: for anyone wondering how to have multiple instance

[moeinrahimi1]

if you installed with atuomatic mode and wondering how to run multiple psiphon with different configs this is the way :)

sudo /etc/psiphon/psiphon-tunnel-core-x86_64 -config fr.config
sudo /etc/psiphon/psiphon-tunnel-core-x86_64 -config de.config
and so on

[moeinrahimi1]

the thing is on automatic installation config path is hardcoded to /etc/psiphon/config.json

[pubswork-mobi]

#!/bin/bash

Exit on error and show commands

set -e
set -x

Check if running as root

if [ "$EUID" -ne 0 ]; then
echo "Please run as root using sudo"
exit 1
fi

Update system and install prerequisites

apt-get update
apt-get install -y wget jq iptables

Create necessary directories

mkdir -p /etc/psiphon/instance{0,A,B,C,D,E}
mkdir -p /usr/share/psiphon/
mkdir -p /var/log/psiphon/

Download necessary files

echo "Starting downloads"
wget -O /usr/share/psiphon/psiphon-tunnel-core-x86_64
https://raw.githubusercontent.com/Psiphon-Labs/psiphon-tunnel-core-binaries/master/linux/psiphon-tunnel-core-x86_64
wget -O /tmp/psiphon.config.base
https://raw.githubusercontent.com/SpherionOS/PsiphonLinux/main/psiphon.config
echo "Core files downloaded"

Function to create config files with guaranteed 0.0.0.0 binding

create_config() {
local instance=$1
local http_port=$2
local socks_port=$3

cp /tmp/psiphon.config.base /etc/psiphon/$instance/psiphon.config

# Use jq for reliable JSON manipulation
jq --argjson http_port "$http_port" \
   --argjson socks_port "$socks_port" \
   '.LocalHttpProxyPort = $http_port | 
    .LocalSocksProxyPort = $socks_port | 
    .BindInterface = "0.0.0.0" | 
    .AllowNoAuthorization = true' \
    /etc/psiphon/$instance/psiphon.config > /tmp/temp_config.json
    
mv /tmp/temp_config.json /etc/psiphon/$instance/psiphon.config

}

Create configs for all instances

create_config "instance0" 8080 1080
create_config "instanceA" 3169 4169
create_config "instanceB" 5169 6169
create_config "instanceC" 7169 8169
create_config "instanceD" 9169 10169
create_config "instanceE" 11169 12169

Create launcher scripts

for instance in instance0 instanceA instanceB instanceC instanceD instanceE; do
# For instance0, the command is just 'psiphon'
if [ "$instance" = "instance0" ]; then
command_name="psiphon"
else
# Remove the word 'instance' to get A, B, etc.
suffix="${instance#instance}"
command_name="psiphon$suffix"
fi

cat > /usr/bin/$command_name <<EOF

#!/bin/bash
cd /etc/psiphon/$instance
exec /usr/share/psiphon/psiphon-tunnel-core-x86_64 -config psiphon.config
EOF
chmod +x /usr/bin/$command_name
done

Make core binary executable

chmod +x /usr/share/psiphon/psiphon-tunnel-core-x86_64

Configure firewall

ports=(8080 1080 3169 4169 5169 6169 7169 8169 9169 10169 11169 12169)
for port in "${ports[@]}"; do
iptables -A INPUT -p tcp --dport $port -j ACCEPT
echo "Allowed ALL to port $port"
done

Save firewall rules

mkdir -p /etc/iptables
iptables-save > /etc/iptables/rules.v4

Create supervisor script

cat > /usr/local/bin/psiphon-supervisor <<'EOF'
#!/bin/bash
trap 'kill $(jobs -p); exit 0' SIGTERM SIGINT

for instance in instance0 instanceA instanceB instanceC instanceD instanceE; do
cd "/etc/psiphon/$instance"
/usr/share/psiphon/psiphon-tunnel-core-x86_64 -config psiphon.config &
done

Wait indefinitely

while true; do
sleep 3600 &
wait $!
done
EOF
chmod +x /usr/local/bin/psiphon-supervisor

Create systemd service

cat > /etc/systemd/system/psiphon-multi.service <<'EOF'
[Unit]
Description=Psiphon Multi-Instance VPN Service
After=network.target

[Service]
Type=simple
ExecStart=/usr/local/bin/psiphon-supervisor
Restart=always
RestartSec=5s
StandardOutput=syslog
StandardError=syslog
SyslogIdentifier=psiphon-multi

[Install]
WantedBy=multi-user.target
EOF

Create uninstaller

cat > pluninstaller_multi <<'EOF'
#!/bin/bash

Stop and disable service

systemctl stop psiphon-multi
systemctl disable psiphon-multi

Remove files

rm -rf /etc/psiphon
rm -f /usr/bin/psiphon
rm -f /usr/bin/psiphon{A,B,C,D,E}
rm -rf /usr/share/psiphon
rm -f /usr/local/bin/psiphon-supervisor
rm -f /etc/systemd/system/psiphon-multi.service

Reset firewall rules

ports=(8080 1080 3169 4169 5169 6169 7169 8169 9169 10169 11169 12169)
for port in "${ports[@]}"; do
iptables -D INPUT -p tcp --dport $port -j ACCEPT 2>/dev/null
done

Save firewall rules

iptables-save > /etc/iptables/rules.v4

echo "Psiphon multi-instance uninstalled"
EOF
chmod +x pluninstaller_multi

Enable and start service

systemctl daemon-reload
systemctl enable --now psiphon-multi

Final verification

echo "Waiting for instances to start (30 seconds)..."
sleep 30

echo ""
echo "Verifying port bindings:"
echo "=============================================================="
for port in "${ports[@]}"; do
if ss -tulpn | grep ":$port" | grep -q "0.0.0.0"; then
echo "Port $port: SUCCESS (listening on 0.0.0.0)"
else
echo "Port $port: FAILED (not listening correctly)"
fi
done
echo "=============================================================="

echo ""
echo "Installation completed! All instances should be accessible from your LAN."
echo "Use 'systemctl status psiphon-multi' to check service status"
echo "Uninstall with: sudo ./pluninstaller_multi"

[pubswork-mobi]

//to remove the above!
#!/bin/bash

Stop and disable service

systemctl stop psiphon-multi
systemctl disable psiphon-multi

Remove files

rm -rf /etc/psiphon
rm -f /usr/bin/psiphon
rm -f /usr/bin/psiphon{A,B,C,D,E}
rm -rf /usr/share/psiphon
rm -f /usr/local/bin/psiphon-supervisor
rm -f /etc/systemd/system/psiphon-multi.service

Reset firewall rules

ports=(8080 1080 3169 4169 5169 6169 7169 8169 9169 10169 11169 12169)
for port in "${ports[@]}"; do
iptables -D INPUT -p tcp --dport $port -j ACCEPT 2>/dev/null
done

Save firewall rules

iptables-save > /etc/iptables/rules.v4

echo "Psiphon multi-instance uninstalled"

[gaaash]

دوست عزیز ببخشید اگه کامنت نامربوط با موضوع شما میزارم اما به شدت نیاز به یک روشی دارم تا بتونم کل ترافیک سیستمم رو به این پروژه بفرستم تا کل سیستمم از سایفون استفاده کنه (یک چیزی مثل پروکسیفایر ویندوز)
اگر امکانش هست میشه راهنمایی کنید چه کار میتونم انجام بدم ؟
اکثر چیزا مثل redsocks و چندتا روش استفاده از iptable ها رو امتحان کردم ولی نتیجه نداد. حالا یا به علت دانش کم من از لینوکسه یا مشکل از این برنامه ها نمیدونم ولی بشدت به همچین چیزی نیاز دارم
اگه کمک کنید ممنونتون میشم

[moeinrahimi1]

میتونی از wintun استفاده کنی
https://www.wintun.net/

[gaaash]

wintun برای ویندوز نیست؟
من منظورم رو لینوکس بود عزیز

[Mostbesep]

dear linux users, just use this gui and forget all problems
psiphon for linux with gui

[gaaash]

dear linux users, just use this gui and forget all problems psiphon for linux with gui

Is it possible to implement TUN on it?
or something like a VPN mode by any means

[Mostbesep]

dear linux users, just use this gui and forget all problems psiphon for linux with gui

Is it possible to implement TUN on it? or something like a VPN mode by any means

simple app that just runs the Psiphon core binary and shows the connection status.

If you'd like us to implement TUN support, please open an issue on GitHub. We would appreciate your help with testing, or even better, contributing to the code.

Our implementation plan would be to bundle a tun2socks binary and use it to create the tunnel. As you noted, the crucial part is to get the server's IP after connection to exclude it from the tunnel's routing and avoid a loop.