v2.4.1

v2.4.1

New Features

• Pin profiles — Pin your favorite configs to the top of the profile list. Tap the 3-dot menu on any profile and select "Pin to top". Pinned profiles show a pin icon next to their name.
• Ping Servers — New lightweight "Ping Servers" option in the top bar menu. Does a simple TCP ping to check server reachability without establishing a tunnel. Works with all profile types including DOH and
  DNS-tunneled profiles (pings the resolver).
• Profile overflow menu — Edit, Share, Export, QR Code, and Pin actions are now consolidated into a clean 3-dot menu per profile.

NoizDNS

• Revert back changes

Android

• Add 5-second grace period to ignore spurious network changes after connection
• Remove stealth mode query size override from UI
• Update Snowflake to v2.12.1

CLI

• Remove --query-padding flag

Full Changelog: v2.4...v2.4.1

v2.4

SlipNet v2.4 — Changelog (since v2.3.2)

Prism Scanner

• Nonce-encoded response size — desired response size is now embedded in the probe nonce, bypassing resolver EDNS0 rewriting that silently broke sub-1232 sizes
• E2E tunnel testing — Prism mode now supports E2E tests on verified resolvers, same as Advanced mode
• Early exit on pass threshold — probes stop as soon as the threshold is reached instead of sending all remaining
• Default probes reduced from 20 to 10 (threshold 5) for faster scanning with early exit
• Response size default changed to 0 (server default) instead of hardcoded 1232
• Prism settings UI — split into two rows for better readability
• Note: Prism scan requires a server running https://github.com/anonvector/slipgate — it uses HMAC-authenticated probes that only SlipGate recognizes and responds to

DNS Scanner

• "All working" toggle added to Advanced and Prism results to filter between E2E-passed and all working resolvers
• "Load Last Scan IPs" fix — previously reloaded the full 58K default list instead of the saved IPs
• Button overlap fix — "Load Last Scan IPs" hidden when IR DNS/Country/Custom panels are open
• Empty resolver scanning — users can now open the scanner without filling in the DNS resolver field first
• E2E timeout default fixed from 7s to 15s
• E2E sort order — E2E tests now run in the order the results list is sorted (speed, prism score, etc.)

Hidden Resolvers

• Persistent defaults — original hidden resolvers are preserved in a separate DB field so users can switch back after setting custom resolvers
• DNS query size — now saved during profile export and configurable even on locked profiles

VPN & Connectivity

• Proxy chain support — chain multiple VPN profiles together (e.g., DNSTT → SSH → SOCKS5) for layered tunneling
• SOCKS5 proxy tunnel type — connect through external SOCKS5 proxies
• SOCKS5 auth injection fixed for SSH tunnel types
• DNS tunneling fix for Chinese OEM phones (Xiaomi, Poco, Huawei)

CLI

• Interactive menu — new TUI for managing profiles, scanning, and connecting without memorizing flags
• Add --query-size and --query-padding flags for DNS query size control
• SSH tunnel and SOCKS5 support added
• E2E tunnel testing with configurable concurrency and timeout
• Embedded resolver list for standalone scanning
• UPX compression for Linux/macOS binaries

Android

• Fix DNS tunneling on Chinese OEM phones (Xiaomi, Poco, Huawei)
• x86_64 architecture support added
• Quick Settings tile — long-press now opens the app (Android 13+)
• Scan foreground service for reliable background scanning

Full Changelog: v2.3.2...v2.4

Full Changelog: v2.3.2...v2.4

v2.3.2

Full Changelog: v2.3.1...v2.3.2
v2.3.2

Bug Fixes

• DoH custom URL test: Fixed an issue where the "Custom" test button silently skipped URLs that matched a preset DoH server. Custom tests now scan all user-entered URLs regardless of whether they appear in the presets list.
• Updated NoizDNS

Full Changelog: v2.3.1...v2.3.2

v2.3.1

v2.3.1

Stealth Improvements

• Improved encoding to enhance DPI resistance
  (server-side binary files must be updated)
• Added toggle to display the working DNS resolver in Simple Scanning Mode
• Added support for scanning DNS servers on ports other than 53
• Added ability to use a domain name as a DNS resolver

CLI

• SlipNet CLI now supports NoizDNS profiles
• Switched to the noizdns library

Fixes

• Fixed E2E scan crash
• Fixed HTTP proxy reliability issues
• Improved connection warning detection (faster + clearer message)
• Improved traffic statistics accuracy

Pull Requests

• Fix HTTP proxy reliability issues by @anonvector
  #61

---

Full Changelog
v2.3...v2.3.1

What's Changed

• v2.3.1: Fix HTTP proxy reliability issues by @anonvector in #61

Full Changelog: v2.3...v2.3.1

v2.3

What's Changed

• Parallel E2E scanning — end-to-end tunnel tests now run concurrently for faster resolver evaluation for DNSTT/NoizDNS
• Hidden DNS resolvers — profile creators can now hide resolver addresses from users, preventing exposure of DNS server
  infrastructure
• Add cross-platform CLI client for macOS, Linux, and Windows by @mirzaaghazadeh in #52
• Fix Android boot, widget, and reconnect flows by @yappologistic in #48
• Fix E2E test SSH variant detection for NoizDNS_SSH profiles by @anonvector in #49
• DNS payload size, scanner overhaul, bridge and resolver updates by @anonvector in #55
• Faster broken connection detection — SOCKS profiles (SSH/Naive) now detect failures in ~30s instead of ~120s
• Scanner UI overhaul — sortable E2E results, collapsible search, background scanning, neighbor toggle

New Contributors

• @yappologistic made their first contribution in #48
• @mirzaaghazadeh made their first contribution in #52

Full Changelog: v2.2.3...v2.3

v2.2.3

v2.2.3:

VPN

• Removed gstatic data probing — the periodic end-to-end probe (HTTP request to
  www.gstatic.com/generate_204 through the tunnel) has been removed.

Scanner

• Background scanning — scan continues when the app is backgrounded (wake lock keeps CPU alive)
• Collapsible search bar — hidden by default, toggle via search icon in the toolbar to save screen space
• Neighboring IP toggle — new "Scan neighboring IPs" setting to enable/disable /24 subnet expansion
• System back stops scan — pressing back gesture/button now properly stops the scan (previously only the
  toolbar arrow did)
• E2E timeout increased — default raised from 7s to 9s for better results on slower networks
• Performance — cached working IPs list to avoid redundant filtering on every recomposition

UI

• Profile name overflow fix — long profile names no longer push "Selected"/"Connected" badges off-screen
• Scan button prominence — "Scan for Working Resolvers" in edit profile is now a filled button
• Server setup guides relocated — moved to bottom of edit profile form with clearer styling and
  tunnel-specific labels

Build

• Lite flavor multi-ABI — lite now produces arm64, armeabi-v7a, and universal APKs (was arm64-only)

v2.2.1

v2.2.1

New: NoizDNS Protocol

• New tunnel type: NoizDNS — a DPI-evasion layer on top of DNSTT
• Optional stealth mode for environments with aggressive DPI (slower speed, harder to detect)
• Works with both standalone and SSH tunnel modes

Build Variants

• Full: All tunnel types including Tor (Snowflake/obfs4/Meek) and NaiveProxy. Supports arm64 and
  armeabi-v7a.
• Lite: All tunnel types except Tor and NaiveProxy. arm64-only for smaller APK size (10mb only).
• Both variants include DNSTT, NoizDNS, Slipstream, SSH, and DoH.

DNS Scanner Improvements

• Focus range: when a working resolver is found during country/range scans, automatically scans the /24
  subnet to discover nearby resolvers
• EDNS payload size probing — tests 512, 900, and 1232 byte support individually
• NXDOMAIN hijacking detection — identifies resolvers that return fake answers
• Scanner score now 6-point (was 5): added EDNS size and NXDOMAIN tests
• E2E test on DNSTT configs now verifies actual server reachability
• E2E progress: currently-tested IP is highlighted in the results list with phase indicator
• E2E results shown as colored chips (green/red) with latency on each resolver
• Export and copy found DNS IPs directly from the scan results screen
• Memory optimization: only working results kept in memory, enabling larger scans without crashes
• Easier export of found DNS IPs directly from the scan results screen
• Country-based IP range scanning — select specific IP ranges per country for targeted DNS discovery
• Removed 90 duplicate IPs from built-in resolver list
• Added score filter options up to 5+

Profile Sharing & Locking

• Set expiration date on shared configs — access automatically revoked after the date
• Bind configs to a specific device ID — prevents use on other devices
• Control whether recipients can re-share the config

Build & Performance

• Lite build is now arm64-only — smaller APK size
• Full build still supports both arm64 and armeabi-v7a
• Improved CI caching for faster builds

Other

• Debug log screen improvements
• Various stability and tunnel reliability fixes

v2.1.1

Full Changelog: v2.1.0...v2.1.1

• Show all resolvers that respond (not just 4/4), with color-coded score
  indicator
• Add score filter chips (All, 3+, 4/4) and Score sort option
• Collapsible sort/filter bar with persisted state
• Horizontal scroll on sort/filter rows for small screens
• Default E2E timeout changed to 7000ms

v2.1.0

Full Changelog: v2.0.1...v2.1.0

What's New in v2.1.0

Encrypted Config Export

• Locked profiles now export as slipnet-enc:// links using AES-256-GCM encryption
• Ensures server credentials stay protected when sharing configs

End-to-End Tunnel Testing

• DNS scanner now supports E2E testing: verify resolvers work through actual DNSTT/Slipstream tunnels
• Transparent proxy detection to identify resolvers that interfere with tunnel traffic
• Default E2E timeout set to 7000ms

Faster TCP Fallback

• All non-DNS UDP is now rejected with ICMP Port Unreachable at the native level
• Apps like WhatsApp and browsers fall back to TCP instantly instead of waiting for timeouts

Battery Optimization

• New prompt on first connect to disable battery optimization for reliable background VPN
• Battery optimization setting added to Settings screen with current status

Locked Profile Privacy

• Locked profiles show "Locked" instead of the server domain in the profile list
• Tunnel type always visible below locked profiles
• DNS scanner uses google.com instead of the real domain for locked profiles

Other Changes

• Added Telegram channel link (t.me/SlipNet_app) to About and Welcome dialogs
• Shared About dialog content between Settings and Welcome screens
• Locked DNSTT/Slipstream profiles can now edit DNS transport and resolvers
• Updated Tor to 0.4.9.5
• Dropped x86/x86_64 ABI support (ARM only)

v2.0.1

Full Changelog: v2.0...v2.0.1

• Fix NaiveProxy crash "Not a numeric address" when server hostname resolves to an IPv6 (AAAA)
  address. DNS resolution now prefers IPv4, and IPv6 addresses are properly bracketed for
  Chromium's host-resolver-rules parser.