All VPN, AmneziaWG, Anti-GFW & Rocket Nodes Active

prx.114.29.237.16 Connection Center

Complete anti-censorship hub supporting AmneziaWG (obfuscated WireGuard), Shadowrocket, VLESS Reality, Trojan, VMess, Shadowsocks, ShadowsocksR, and Surfshark for unrestricted access to ChatGPT, Google, and Meta worldwide.

⚡ Recommendation for China: Use AmneziaWG (Obfuscated WireGuard) or VLESS-Reality. Both feature advanced anti-DPI packet junk and masquerade, making them completely immune to GFW blocking.

1. AmneziaWG (Anti-DPI) WireGuard Stealth ★★★★★

Next-gen obfuscated WireGuard with custom junk packets (Jc/Jmin/Jmax) and packet header scrambling (S1/S2/H1-H4). Completely bypasses GFW WireGuard blocking.

Scan with official Amnezia VPN or AmneziaWG App

📥 Download amneziawg-client.conf

2. VLESS Reality GFW Resistant ★★★★★

Direct TLS masquerade mimicking Apple iCloud CDN on port 8443. Undetectable by GFW active probing.

Scan with Shadowrocket / Sing-Box / v2rayN / Nekobox

vless://827cd1e1-753a-4031-b1c5-3b43f0ef96c4@114.29.237.16:8443?security=reality&encryption=none&pbk=UWzqDPRLGen8DZvHCIWP41QbPbxttuNAX88lQZb1pUo&headerType=none&type=tcp&flow=xtls-rprx-vision&sni=gateway.icloud.com&sid=23cf5b4684fb054d#PRX-VLESS-Reality

3. Trojan WS + TLS Shadowrocket Native

Authentic TLS over HTTPS port 443 with valid SSL. Standard Trojan protocol supported by all iOS/Android proxy tools.

Scan with Shadowrocket / Loon / Quantumult X / Clash

trojan://sK7p3vR8mY2qL9xW4tB1nC0dF6jH8kP2@114.29.237.16:443?security=tls&type=ws&path=%2Ftrojan-ws&sni=prx.114.29.237.16&allowInsecure=1#PRX-Trojan-WS

📦 Master Subscriptions & Ready Profiles Auto-Import All Protocols

1. AmneziaWG Direct Config URL (.conf):

http://prx.114.29.237.16:80/downloads/amneziawg-client.conf

2. Shadowrocket & Base64 Universal Subscription:

http://prx.114.29.237.16:80/sub/rocket.txt

3. Clash Verge / Clash Meta Ready Configuration (.yaml):

http://prx.114.29.237.16:80/configs/clash.yaml

4. Sing-Box Full Client Configuration (.json):

http://prx.114.29.237.16:80/configs/singbox-client.json

🐧 Dedicated Linux CLI Setup (Ubuntu / Debian / Linux Mint / Pop!_OS / Arch / Fedora):

Copy and run the commands line-by-line below. Each step has its own individual Copy button so you can paste directly into your Linux terminal without syntax errors.

⚡ Ready Configurations for Linux Direct CLI Links

Sing-Box Full Client Config:

http://prx.114.29.237.16:80/configs/singbox-client.json

AmneziaWG Client Config:

http://prx.114.29.237.16:80/downloads/amneziawg-client.conf

Clash Meta YAML Config:

http://prx.114.29.237.16:80/configs/clash.yaml

Method 1: Sing-Box Systemd Service (Full System TUN VPN) Recommended ★★★★★

Creates a native tun0 network adapter that automatically routes all system, browser, Git, Docker, and terminal traffic through anti-GFW VLESS Reality.

Step 1: Add Sing-Box official repository GPG key

sudo curl -fsSL https://sing-box.app/deb/gpg.key -o /etc/apt/keyrings/sagernet.asc

Step 2: Add Sing-Box APT repository

echo "deb [signed-by=/etc/apt/keyrings/sagernet.asc] https://sing-box.app/deb /" | sudo tee /etc/apt/sources.list.d/sagernet.list

Step 3: Update package lists and install Sing-Box

sudo apt update && sudo apt install sing-box -y

Step 4: Download ready-to-use client configuration

sudo curl -fsSL http://prx.114.29.237.16:80/configs/singbox-client.json -o /etc/sing-box/config.json

Step 5: Enable and start Sing-Box system service

sudo systemctl enable --now sing-box

Step 6: Verify connection to ChatGPT & Google

curl -I https://chatgpt.com

💡 Management tip: To stop the VPN anytime, run sudo systemctl stop sing-box. To check logs, run sudo journalctl -u sing-box -f.

Method 2: AmneziaWG Native CLI (Obfuscated WireGuard) Anti-DPI WireGuard

Native WireGuard tunnel with randomized packet sizes and scrambled headers to bypass DPI blocking.

Step 1: Install kernel headers & build tools (Prerequisite for DKMS)

sudo apt update && sudo apt install -y linux-headers-$(uname -r) dkms build-essential

Step 2: Add AmneziaWG PPA repository & install DKMS module

sudo add-apt-repository ppa:amnezia/ppa -y && sudo apt update && sudo apt install -y amneziawg-dkms amneziawg-tools

Step 3: Load the kernel module

sudo modprobe amneziawg && lsmod | grep amneziawg

Step 4: Download client configuration

sudo mkdir -p /etc/amnezia/amneziawg && sudo curl -fsSL http://prx.114.29.237.16:80/downloads/amneziawg-client.conf -o /etc/amnezia/amneziawg/awg0.conf && sudo chmod 600 /etc/amnezia/amneziawg/awg0.conf

Step 5: Start AmneziaWG interface (awg0)

sudo awg-quick up awg0

Step 6: Check interface handshake and status

sudo awg show

⚠️ Got "Error: Unknown device type / Protocol not supported"?
Run sudo modprobe amneziawg. If using Secure Boot, install user-space fallback: sudo apt install -y amneziawg-go.

💡 Disconnect tip: To turn off AmneziaWG, run sudo awg-quick down awg0.

Method 3: Mihomo (Clash Meta) CLI Daemon Rule Routing & Local Proxy

Runs a background proxy engine with SOCKS5 (127.0.0.1:7891) and HTTP (127.0.0.1:7893) with automatic domestic CN bypass.

Step 1: Create config directory

mkdir -p ~/.config/mihomo

Step 2: Download ready Clash configuration

curl -fsSL http://prx.114.29.237.16:80/configs/clash.yaml -o ~/.config/mihomo/config.yaml

Step 3: Download & install Mihomo binary

curl -fsSL https://github.com/MetaCubeX/mihomo/releases/download/v1.19.2/mihomo-linux-amd64-v1.19.2.gz | gzip -d | sudo tee /usr/local/bin/mihomo >/dev/null && sudo chmod +x /usr/local/bin/mihomo

Step 4: Run Mihomo in the background

nohup mihomo -d ~/.config/mihomo > ~/.config/mihomo/mihomo.log 2>&1 &

Step 5: Export proxy variables to current terminal shell

export http_proxy="http://127.0.0.1:7893" && export https_proxy="http://127.0.0.1:7893"

Step 6: Verify proxy routing via terminal curl

curl -I https://chatgpt.com

Method 4: Flatpak GUI Apps (Flathub) Flatpak / Flathub

For users on Fedora, SteamOS (Steam Deck), Ubuntu, Debian, Arch, or openSUSE who prefer sandboxed GUI desktop applications installed via Flatpak:

App A: eOVPN (OpenVPN Configuration Manager GUI) OpenVPN GUI

A clean native GTK client designed specifically for importing and managing OpenVPN .ovpn profiles on Linux desktop with a one-click tray toggle.

Install eOVPN via Flatpak:

flatpak install flathub com.github.jkotra.eovpn -y

Run eOVPN:

flatpak run com.github.jkotra.eovpn

📁 Usage: Download phone.ovpn, laptop.ovpn, or any Surfshark .ovpn profile and import it directly into eOVPN.

App B: Surfshark Official Linux Desktop App Official Flatpak

Official graphical application for Surfshark VPN with WireGuard, OpenVPN, CleanWeb ad-blocking, and NoBorders mode for restricted regions.

Install Surfshark via Flatpak:

flatpak install flathub com.surfshark.Surfshark -y

Run Surfshark:

flatpak run com.surfshark.Surfshark

App C: FlClash / Clash Verge Rev (VLESS Reality & Rule Routing GUI) Anti-GFW GUI

Cross-platform Clash Meta client for VLESS Reality, Trojan, and VMess with smart Chinese domestic bypass and TUN mode.

Install FlClash or download Flatpak bundle:

curl -fsSL https://github.com/chen08209/FlClash/releases/latest/download/FlClash-linux-x86_64.flatpak -o /tmp/FlClash.flatpak && flatpak install --user /tmp/FlClash.flatpak -y

🌐 Usage: In FlClash, add URL: http://prx.114.29.237.16:80/configs/clash.yaml to import all anti-censorship nodes.

🛡️ What is AmneziaWG & Why is it Superior for China?

Standard WireGuard has fixed, recognizable packet headers that the Great Firewall (GFW) automatically identifies and throttles within seconds. AmneziaWG modifies WireGuard's handshake headers (H1-H4), packet message types, and injects random junk packets (Jc, Jmin, Jmax) with custom init packet sizes (S1, S2). To GFW Deep Packet Inspection, it appears as random, unclassifiable UDP traffic that cannot be filtered.

📱 AmneziaWG Configuration Port 51820 UDP

Scan with AmneziaWG Android / iOS App

[Interface]
Address = 10.66.66.2/32
PrivateKey = CBDxHvs26SzqQNcfXyUeljBA4HNC5Uy9s9OhiVFTkW4=
DNS = 1.1.1.1, 8.8.8.8
Jc = 4
Jmin = 50
Jmax = 1000
S1 = 64
S2 = 128
H1 = 1
H2 = 2
H3 = 3
H4 = 4

[Peer]
PublicKey = oEgSJx6Hfm8eU47YkKfH1i+6T4aQKcu4WSAC3dztB2k=
PresharedKey = UU562CvTEkYGo1KvAHCHNWpo1uJJCKScNCsXqzzhl+g=
Endpoint = 114.29.237.16:51820
AllowedIPs = 0.0.0.0/0, ::/0
PersistentKeepalive = 25

📥 Download amneziawg-client.conf

🚀 How to Connect with AmneziaWG

Official Apps:

Android: Install AmneziaWG from GitHub Releases or Google Play. Tap + -> Scan QR code or Import from file -> select amneziawg-client.conf.
iOS (iPhone/iPad): Install AmneziaWG from the Apple App Store. Tap + and scan the QR code above.
Windows: Download the official client from AmneziaWG Windows Releases (or official Amnezia VPN). Click Add Tunnel -> select amneziawg-client.conf -> click Activate.
Ubuntu / Debian / Linux CLI:
Requires kernel headers and DKMS module so the Linux kernel recognizes the amneziawg interface type:

# 1. Install kernel headers & build tools sudo apt update && sudo apt install -y linux-headers-$(uname -r) dkms build-essential # 2. Add Amnezia PPA and install tools + kernel module sudo add-apt-repository -y ppa:amnezia/ppa sudo apt update && sudo apt install -y amneziawg-dkms amneziawg-tools # 3. Load kernel module sudo modprobe amneziawg # 4. Copy config and connect sudo mkdir -p /etc/amnezia/amneziawg sudo cp amneziawg-client.conf /etc/amnezia/amneziawg/awg0.conf sudo chmod 600 /etc/amnezia/amneziawg/awg0.conf sudo awg-quick up awg0

⚠️ Troubleshooting: If you get Error: Unknown device type / Protocol not supported, your kernel module isn't loaded: run sudo modprobe amneziawg. If using Secure Boot, install user-space fallback: sudo apt install -y amneziawg-go.
macOS: Download AmneziaWG for macOS. Import the downloaded .conf file and toggle connect.

💻 Multi-Device & Multi-App Setup Guide:

Choose your operating system below to see step-by-step instructions for multiple client applications. Every client supports TUN mode (full system-level VPN) or rule-based smart routing.

App 1: Clash Verge Rev (Recommended Desktop Client) Modern UI & TUN Mode

Features an elegant interface, automated rule-based proxy switching, and a virtual TUN network adapter that tunnels all Windows system traffic (including games and terminal tools).

Download & install from GitHub: Clash Verge Rev Releases (choose x64-setup.exe).
In Clash Verge, click on the Profiles tab on the left.
Paste the URL: http://prx.114.29.237.16:80/configs/clash.yaml into the profile box and click Import.
Right-click the imported profile and select Use.
Go to Settings and toggle Tun Mode (or System Proxy) to ON.
Done! All OpenAI/ChatGPT, Google, and Meta domains route automatically via the fastest proxy.

App 2: v2rayN (Lightweight & Power-User Client) Xray & Sing-Box Core

The standard Windows tool for VLESS Reality, VMess, and Shadowsocks.

Download: v2rayN Releases (choose v2rayN-with-dependencies.zip).
Click Subscription Group -> Subscription Group Setting -> Add.
Set Remarks to Saasal PRX and Url to http://prx.114.29.237.16:80/sub/rocket.txt. Click Confirm.
Click Subscription Group -> Update subscription without proxy. All 7 nodes will appear.
Select PRX-Saasal-VLESS-Reality and press Enter (Active server).
At the bottom taskbar, set System Proxy to Set System Proxy and Routing to Bypass mainland China.

App 3: AmneziaWG Client for Windows Kernel-Level UDP Stealth

Download AmneziaWG Windows installer.
Download amneziawg-client.conf.
Click Add Tunnel -> select the .conf file -> click Activate. Full system traffic is instantly protected.

🐧 Linux CLI Setup (Ubuntu / Debian / Linux Mint / Pop!_OS / Arch / Fedora):

Copy and run the commands line-by-line below. Each step has its own individual Copy button so you can paste directly into your Linux terminal without syntax errors.

Method 1: Sing-Box Systemd Service (Full System TUN VPN) Recommended ★★★★★

Creates a native tun0 network adapter that automatically routes all system, browser, Git, Docker, and terminal traffic through anti-GFW VLESS Reality.

Step 1: Add Sing-Box official repository GPG key

sudo curl -fsSL https://sing-box.app/deb/gpg.key -o /etc/apt/keyrings/sagernet.asc

Step 2: Add Sing-Box APT repository

echo "deb [signed-by=/etc/apt/keyrings/sagernet.asc] https://sing-box.app/deb /" | sudo tee /etc/apt/sources.list.d/sagernet.list

Step 3: Update package lists and install Sing-Box

sudo apt update && sudo apt install sing-box -y

Step 4: Download ready-to-use client configuration

sudo curl -fsSL http://prx.114.29.237.16:80/configs/singbox-client.json -o /etc/sing-box/config.json

Step 5: Enable and start Sing-Box system service

sudo systemctl enable --now sing-box

Step 6: Verify connection to ChatGPT & Google

curl -I https://chatgpt.com

💡 Management tip: To stop the VPN anytime, run sudo systemctl stop sing-box. To check logs, run sudo journalctl -u sing-box -f.

Method 2: AmneziaWG Native CLI (Obfuscated WireGuard) Anti-DPI WireGuard

Native WireGuard tunnel with randomized packet sizes and scrambled headers to bypass DPI blocking.

Step 1: Install Kernel Headers & Build Prerequisites (Crucial for Ubuntu / Debian)

sudo apt update && sudo apt install -y linux-headers-$(uname -r) dkms build-essential

Step 2: Add AmneziaWG PPA Repository & Install DKMS Module

sudo add-apt-repository ppa:amnezia/ppa -y && sudo apt update && sudo apt install -y amneziawg-dkms amneziawg-tools

Step 3: Load the AmneziaWG Kernel Module

sudo modprobe amneziawg && lsmod | grep amneziawg

Step 4: Create directory & download client configuration

sudo mkdir -p /etc/amnezia/amneziawg && sudo curl -fsSL http://prx.114.29.237.16:80/downloads/amneziawg-client.conf -o /etc/amnezia/amneziawg/awg0.conf && sudo chmod 600 /etc/amnezia/amneziawg/awg0.conf

Step 5: Start AmneziaWG interface (awg0)

sudo awg-quick up awg0

Step 6: Check interface handshake and status

sudo awg show

⚠️ Got "Error: Unknown device type / Protocol not supported"?
This happens on Ubuntu if the kernel module wasn't loaded or headers were missing:

Run: sudo modprobe amneziawg
If Secure Boot blocks DKMS kernel modules, install the userspace driver: sudo apt install -y amneziawg-go

💡 Disconnect tip: To turn off AmneziaWG, run sudo awg-quick down awg0.

Method 3: Mihomo (Clash Meta) CLI Daemon Rule Routing & Local Proxy

Runs a background proxy engine with SOCKS5 (127.0.0.1:7891) and HTTP (127.0.0.1:7893) with automatic domestic CN bypass.

Step 1: Create config directory

mkdir -p ~/.config/mihomo

Step 2: Download ready Clash configuration

curl -fsSL http://prx.114.29.237.16:80/configs/clash.yaml -o ~/.config/mihomo/config.yaml

Step 3: Download & install Mihomo binary

curl -fsSL https://github.com/MetaCubeX/mihomo/releases/download/v1.19.2/mihomo-linux-amd64-v1.19.2.gz | gzip -d | sudo tee /usr/local/bin/mihomo >/dev/null && sudo chmod +x /usr/local/bin/mihomo

Step 4: Run Mihomo in the background

nohup mihomo -d ~/.config/mihomo > ~/.config/mihomo/mihomo.log 2>&1 &

Step 5: Export proxy variables to current terminal shell

export http_proxy="http://127.0.0.1:7893" && export https_proxy="http://127.0.0.1:7893"

Step 6: Verify proxy routing via terminal curl

curl -I https://chatgpt.com

Method 4: Flatpak GUI Apps (Flathub Desktop) Flatpak / Flathub

For users on Fedora, SteamOS (Steam Deck), Ubuntu, Debian, Arch, or openSUSE who prefer sandboxed GUI desktop applications installed via Flatpak:

App A: eOVPN (OpenVPN Configuration Manager GUI) OpenVPN GUI

A clean native GTK client designed specifically for importing and managing OpenVPN .ovpn profiles on Linux desktop with a one-click tray toggle.

Install eOVPN via Flatpak:

flatpak install flathub com.github.jkotra.eovpn -y

Run eOVPN:

flatpak run com.github.jkotra.eovpn

📁 Usage: Download phone.ovpn, laptop.ovpn, or any Surfshark .ovpn profile and import it directly into eOVPN.

App B: Surfshark Official Linux Desktop App Official Flatpak

Official graphical application for Surfshark VPN with WireGuard, OpenVPN, CleanWeb ad-blocking, and NoBorders mode for restricted regions.

Install Surfshark via Flatpak:

flatpak install flathub com.surfshark.Surfshark -y

Run Surfshark:

flatpak run com.surfshark.Surfshark

App C: FlClash / Clash Verge Rev (VLESS Reality & Rule Routing GUI) Anti-GFW GUI

Cross-platform Clash Meta client for VLESS Reality, Trojan, and VMess with smart Chinese domestic bypass and TUN mode.

Install FlClash Flatpak bundle:

curl -fsSL https://github.com/chen08209/FlClash/releases/latest/download/FlClash-linux-x86_64.flatpak -o /tmp/FlClash.flatpak && flatpak install --user /tmp/FlClash.flatpak -y

🌐 Usage: In FlClash, add URL: http://prx.114.29.237.16:80/configs/clash.yaml to import all anti-censorship nodes.

App 1: AmneziaWG Android (Anti-DPI WireGuard) Fastest & Lightest

Download: AmneziaWG Android APK or Google Play.
Tap + -> Scan QR code and scan the AmneziaWG QR code in Tab 2.
Toggle the switch to Connect. Done!

App 2: v2rayNG (VLESS Reality & Trojan) Full GFW Bypass

Download APK: v2rayNG GitHub Releases.
Tap + -> Scan QR code (Scan VLESS Reality).
Tap connect button at bottom right.

App 3: Sing-Box / Clash Meta (CMFA) Rule Routing

Import http://prx.114.29.237.16:80/configs/clash.yaml or http://prx.114.29.237.16:80/configs/singbox-client.json.

⚠️ Notice for China Apple App Store (中国区 App Store) Users:

Due to local regulatory restrictions, ALL VPN, proxy, and network extension applications (including Sing-Box, Shadowrocket, Quantumult X, Loon, Stash, and AmneziaWG) are removed from the mainland China App Store. You cannot find them using a mainland China Apple ID. Below are the 3 reliable methods to install and connect on iPhone/iPad:

Method 1: Switch App Store to a US / HK / JP Apple ID (Recommended) Permanent & Official

You only need to switch your App Store account (your iCloud data, photos, and messages remain completely safe on your primary Apple ID).

Open the App Store -> tap your profile avatar (top right) -> scroll to the very bottom and tap Sign Out.
Sign in with an overseas Apple ID (US, Hong Kong, Taiwan, or Japan region).
💡 Tip: You can register a free US Apple ID in 3 minutes via appleid.apple.com without a foreign credit card (select payment method "None").
Once signed in, download any of these top-rated proxy tools:
- Sing-Box (Free in US / HK / JP App Store)
- Shadowrocket (Rocket VPN) ($2.99 USD in US App Store)
- AmneziaWG (Free in US App Store)
- Stash or Loon or Quantumult X
After downloading, you can immediately switch your App Store back to your regular China Apple ID. The apps will continue to update and work indefinitely!

Method 2: Apple TestFlight (Works Directly on China Apple IDs) No Foreign ID Needed

Apple's official beta testing app TestFlight IS available in the China App Store and allows installing overseas proxy betas without switching regions:

Install TestFlight directly from your China App Store.
Open Safari on your iPhone and join an active public beta program (e.g. search for public TestFlight slots for Sing-Box, FlClash, or NekoBox).
Tap Accept and Install. The app installs directly on your device.

Method 3: Sideload IPA via Computer (AltStore / Sideloadly / Scarlet) Direct IPA Install

Install the open-source client directly to your iPhone via USB from your PC or Mac:

Download the official IPA file from Sing-Box GitHub Releases (look for sing-box-*-ios.ipa) or AmneziaWG IPA.
Install Sideloadly or AltStore on your Windows PC or Mac.
Connect your iPhone with a USB cable, drag the IPA into Sideloadly, enter your Apple ID to sign it, and click Start.
On your iPhone, go to Settings -> General -> VPN & Device Management and trust your developer certificate. Done!

📲 Once Installed: Connect in 10 Seconds Universal Import

For Shadowrocket: Tap the top-left scanner icon and scan any QR code on this page (VLESS Reality, Trojan, VMess, or SSR). Or tap + -> Type: Subscribe -> URL: http://prx.114.29.237.16:80/sub/rocket.txt.
For Sing-Box iOS: Tap Profiles -> New Profile -> Import from URL: http://prx.114.29.237.16:80/configs/singbox-client.json.
For AmneziaWG iOS: Tap + -> scan the AmneziaWG QR code in Tab 2.

App 1: AmneziaWG for macOS WireGuard Stealth

Download from AmneziaWG macOS Releases. Import amneziawg-client.conf and activate.

App 2: Clash Verge Rev for macOS Apple Silicon & Intel

Download DMG from Clash Verge Rev. Import http://prx.114.29.237.16:80/configs/clash.yaml.

🚀 Shadowrocket (Rocket VPN) Configuration Suite:

Shadowrocket natively supports Trojan, VMess, Shadowsocks (SS), and ShadowsocksR (SSR). Every protocol below is active, listening on dedicated ports, and configured with anti-probing measures.

Trojan (WS + TLS) Port 443

trojan://sK7p3vR8mY2qL9xW4tB1nC0dF6jH8kP2@114.29.237.16:443?security=tls&type=ws&path=%2Ftrojan-ws&sni=prx.114.29.237.16&allowInsecure=1#PRX-Trojan-WS

Domain / Host	prx.114.29.237.16
Port	443 (HTTPS)
Password	sK7p3vR8mY2qL9xW4tB1nC0dF6jH8kP2
Transport	ws (/trojan-ws)
TLS / SNI	prx.114.29.237.16

VMess (WS + TLS) Port 443

vmess://eyJ2IjogIjIiLCAicHMiOiAiUFJYLVZNZXNzLVdTIiwgImFkZCI6ICIxMTQuMjkuMjM3LjE2IiwgInBvcnQiOiAiNDQzIiwgImlkIjogIjgyN2NkMWUxLTc1M2EtNDAzMS1iMWM1LTNiNDNmMGVmOTZjNCIsICJhaWQiOiAiMCIsICJuZXQiOiAid3MiLCAidHlwZSI6ICJub25lIiwgImhvc3QiOiAicHJ4LjExNC4yOS4yMzcuMTYiLCAicGF0aCI6ICIvdm1lc3Mtd3MiLCAidGxzIjogInRscyIsICJzbmkiOiAicHJ4LjExNC4yOS4yMzcuMTYifQ==

Domain / Host	prx.114.29.237.16
Port	443 (HTTPS)
UUID	827cd1e1-753a-4031-b1c5-3b43f0ef96c4
AlterId	0
Transport / Path	ws (/vmess-ws)

Shadowsocks (Standard) Port 8390

ss://YWVzLTI1Ni1nY206c0s3cDN2UjhtWTJxTDl4VzR0QjFuQzBkRjZqSDhrUDI=@114.29.237.16:8390#PRX-Shadowsocks-Standard

Server IP	114.29.237.16
Port	8390 (TCP)
Method	aes-256-gcm
Password	sK7p3vR8mY2qL9xW4tB1nC0dF6jH8kP2

ShadowsocksR (SSR) Port 8389

ssr://MTE0LjI5LjIzNy4xNjo4Mzg5OmF1dGhfYWVzMTI4X21kNTphZXMtMjU2LWNmYjp0bHMxLjJfdGlja2V0X2F1dGg6YzBzM2NETjJVamh0V1RKeFREbDRWelIwUWpGdVF6QmtSalpxU0RoclVESS8_cmVtYXJrcz1VRkpZTFZOVFVnJmdyb3VwPVVGSlk

Server IP	114.29.237.16
Port	8389
Protocol	auth_aes128_md5
Cipher / Method	aes-256-cfb
Obfuscation (obfs)	tls1.2_ticket_auth
Password	sK7p3vR8mY2qL9xW4tB1nC0dF6jH8kP2

⚠️ Crucial Advice for Users in Mainland China:

Traditional protocols like plain OpenVPN or WireGuard are often blocked or throttled by the Great Firewall (GFW) due to obvious protocol signatures. For uninterrupted access to ChatGPT (OpenAI), Google Workspace, YouTube, Instagram, and Facebook/Meta, follow these golden rules:

Rule 1: Use AmneziaWG or VLESS Reality

AmneziaWG disguises UDP packets using random sizes and scrambled headers, while VLESS + REALITY borrows Apple's legitimate TLS handshake. Both provide state-of-the-art protection against DPI and active probing.

Rule 2: Remote DNS Routing

GFW uses DNS pollution (DNS poisoning) against domains like chatgpt.com, openai.com, google.com, and meta.com. In your client app:

Enable Remote DNS (DoH / DoT via Cloudflare 1.1.1.1 or Google 8.8.8.8).
Select Routing Mode: "Bypass Mainland China" (or PAC/Rule Mode) so Chinese apps (WeChat, Taobao, Bilibili) remain high-speed direct, while all international sites route through this proxy.

Rule 3: Backup with Port 443 (Trojan/VMess)

Some hotels, airports, or university campuses in China restrict non-standard outbound ports (blocking port 8443 or UDP). If you ever encounter an internet drop, switch your client to Trojan WS or VMess WS on port 443 with standard HTTPS masquerade.

Access Checklist: OpenAI, Google, Meta

Service	Status via Saasal PRX	Tips
ChatGPT (chatgpt.com)	✔ Fully Functional	IPv4 routed directly outside China; no CAPTCHA loop.
Claude (claude.ai)	✔ Fully Functional	Direct routing through server IP 114.29.237.16.
Google / YouTube / Gemini	✔ Ultra Fast	Full 4K video streaming enabled.
Meta / Instagram / WhatsApp	✔ Instant Sync	Push notifications and media uploads work seamlessly.

🦈 Surfshark VPN OpenVPN & WireGuard Integration:

You can connect any device (router, OpenVPN client, Linux CLI, Windows, Mac, Android, iOS) using Surfshark's official OpenVPN server configs and credentials. Download ready-to-use profiles below or get the entire worldwide bundle.

📦 Complete Surfshark Bundle All 100+ Countries

Download all global Surfshark OpenVPN configurations (UDP and TCP) bundled in one ZIP archive.

📥 Download All Surfshark Configs (.zip)

Contains all regional endpoints across North America, Europe, Asia-Pacific, Middle East, and Africa.

⚡ Fast Regional Profiles OpenVPN (.ovpn)

Direct download of optimal nodes for bypassing restrictions and accessing streaming / AI services:

🇺🇸 United States (San Francisco - West Coast) UDP 📥 🇺🇸 United States (Ashburn - East Coast) UDP 📥 🇯🇵 Japan (Tokyo - Lowest Latency to Asia) UDP 📥 🇸🇬 Singapore (Southeast Asia Hub) UDP 📥 🇭🇰 Hong Kong TCP 📥 🇩🇪 Germany (Frankfurt - Central Europe) UDP 📥 🇬🇧 United Kingdom (London) UDP 📥

🔑 How to Setup & Authenticate with Surfshark

Get your Surfshark Manual Credentials:
Log in to your account at my.surfshark.com -> VPN -> Manual setup -> Credentials.

Note: Surfshark manual setup uses a dedicated Service Username and Service Password, which is different from your email and master account password.
Import the Profile into Your Client:
In OpenVPN Connect, Tunnelblick, Pritunl, or your WiFi router (DD-WRT, AsusWRT, OpenWRT), click Import / Upload Profile and choose the downloaded .ovpn file (e.g. us-sfo.prod.surfshark.com_udp.ovpn).
Authenticate:
When prompted, paste your Service Username and Service Password from step 1. Check "Save password" to connect automatically.
Surfshark in China (NoBorders Mode):
If you use the official Surfshark App inside China, navigate to Settings -> Advanced -> NoBorders Mode and toggle it ON. It will automatically filter and route via servers specifically optimized for Chinese firewalls.

🔒 Standard OpenVPN Profiles OpenVPN Protocol

For standard internet connections (Europe, Americas, general travel outside strict DPI zones), you can use the official OpenVPN Connect client.

Note for China travelers: Standard OpenVPN UDP traffic is actively targeted and blocked by the GFW. If you are inside China, please use AmneziaWG, VLESS Reality, Trojan, or VMess instead.

📥 Download phone.ovpn Profile 📥 Download laptop.ovpn Profile

Quick Setup Instructions:

Install the official OpenVPN Connect app on your device (Download here).
Download one of the profiles above.
Open OpenVPN Connect, tap Upload File, and select the downloaded .ovpn file.
Click Connect.

🌐 Secure Remote Cloud Browsers (Zero-Setup Web GUI):

Access fully isolated, secure Chromium instances directly from your browser. Ideal for lower latency/ping across Asia & global regions with zero local VPN configuration needed.

🌐 Primary Chrome Browser (Port 81) Google Chrome Instance

High-speed, sandboxed Google Chrome workstation at http://114.29.237.16:81/ with audio, clipboard synchronization, and full streaming support.

URL: http://114.29.237.16:81/

Host Portal: http://prx.114.29.237.16:80/

Access Mode: Direct Instant Launch

🚀 Launch Chrome Browser (http://114.29.237.16:81/) ↗

🇭🇰 Kong Browser (brw2) Low-Latency / Kong ★★★★★

Second dedicated Chromium browser instance routed through the Kong environment in Dockhand for lower ping and optimized network throughput.

URL: https://brw2.saasal.xyz

Username: madehost

Password: madehost

🚀 Launch brw2.saasal.xyz (Kong) ↗