Tags: RostamVPN/nooshdaroo
Tags
Nooshdaroo v3.0.0: Multi-QTYPE DNS tunnel with adaptive stealth - 8 record types: A, AAAA, CNAME, MX, NS, SRV, TXT, NULL - Auto-probe at startup: detects which types pass through censors - Aggressive fallback: cycles all types if probed type fails - KCP window 512 + 50ms poll for 4x throughput - Multi-resolver QueryRouter: 4 parallel DNS pipelines per tunnel - LB: multi-listen UDP load balancer with ClientID-sticky routing - OTA config: A-record fallback when TXT blocked - --qtype CLI flag (auto/A/AAAA/CNAME/MX/TXT/NS/SRV) Tested and deployed in Iran (Mar 2026) where TXT records are blocked. Server backward compatible — old clients still work. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
v2.5.0: ISP-targeted scanner — list ISPs, scan by name or ASN New CLI options: - --list-isps: display all Iran (8) and Russia (6) ISPs with ASN, range count, IP count - --scan-isp <name|ASN>: scan only a specific ISP's IP ranges (e.g. --scan-isp MCI, --scan-isp AS44244) - --scan-iran / --scan-russia now show ISP breakdown table before scanning ISP-targeted scanning reduces search space from ~10K to ~1-2K candidates, finishing in seconds instead of minutes. Accepts ISP name (case-insensitive), raw ASN number, or AS-prefixed format. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
v2.4.0: Honor martyrs of Iran's freedom movement + 101 Names of Ahura… … Mazda - Daily rotating tribute on connection: 30 verified martyrs spanning 2009-2026 - January 8-9, 2026 massacre (30,000+ killed) — too many to name individually - Includes Mahsa Amini, Nika Shakarami, Kian Pirfalak, Neda Agha-Soltan, Navid Afkari, Robina Aminian, Flight PS752, the Rasht massacre, and all unnamed heroes - 101 Names of Ahura Mazda (Hormazd Yasht) embedded in binary as silent spiritual presence - Banner: "Payandeh Iran" (پاینده ایران) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Complete IR+RU IP space: 1920+11256 CIDRs from RIPE, adaptive scanner - Embed complete Iran (9.6KB, 10.8M IPs) and Russia (55KB, 45M IPs) CIDR ranges from RIPE NCC delegation data as packed binary - O(log n) binary search for is_iran_ip() / is_russia_ip() - Dual-source lookup: RIPE data + ISP groups (catches blocks registered to other countries but routed domestically, e.g. MCI's 5.160.0.0/12 registered to UAE) - Iran NIN 10/8 private space support (routed across ISP backbone) - Blazing fast single-socket scanner: one UDP socket fires thousands of probes/sec, maps responses via DNS txid - Adaptive scanning: scatter-probe /24s first, expand hot subnets (2+ hits → scan adjacent /24s in the /16) - --scan-iran, --scan-russia, --scan-cidr CLI flags - 15 unit tests all passing Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
v2.0.0: Full OSS release — client + server, zero hardcoded secrets Complete rewrite of the open-source release: - Split into workspace: `client/` (SOCKS5 DNS tunnel client) and `server/` (wire-compatible dnstt authoritative server) - All configuration via CLI flags or JSON config files — no embedded keys, domains, or operational infrastructure - Server includes full protocol stack: DNS wire format, KCP ARQ, Noise_NK_25519_ChaChaPoly_BLAKE2s, smux v2, SOCKS5 proxy - Client includes Chrome DNS cover traffic, OTA config support, DNS Flux multi-domain selection, SRTT resolver priming - Wire-compatible with Go dnstt (github.com/refraction-networking/dnstt) - MIT license - Example configs with demo keypair for testing Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Nooshdaroo v1.0.0 — Censorship-resistant SOCKS5 proxy via DNS tunneling 982KB binary. No install. No admin rights. No VPN driver. Cross-platform: Windows, macOS (ARM64/Intel/Universal), Linux, Android (Termux). Manages the Go dnstt-client as a child process, providing: - 27 DNSTT tunnel domains with automatic rotation - 66 DNS resolvers including Cloudflare Spectrum anycast - Domain scanning (--scan) for blocked environments - Colored terminal UI with connection status - SushMode fallback (stub for v1.1) https://nooshdaroo.net | by RostamVPN