<p>A user named GFW-knocker, well-known for their work on Fragment, believes that working collaboratively to bypass filtering feels like a recreational activity for them.</p>
<p>This user expressed surprise at the level of support for the Mahsa app (or MahsaNG), designed to provide less-privileged individuals with access to VPNs. They credited the initiative's success to people like Segaro and emphasized their own sincere intention to help the public.</p>
<p>In response to a question about how far they can go without financial support or ties to political parties and activists, they stated that while opposition slogans about fighting internet censorship or ensuring free internet access have been largely hollow so far, their outlook remains positive. They believe technology will always have the upper hand against censorship.</p>
<p>They added that the next step for the Mahsa project is launching a multi-platform app, which will advance with the contributions of various participants and continue with or without them, even if some individuals leave. They also expressed pride in being able to stand alongside those who have sacrificed so much in the Mahsa movement, both financially and personally.</p>


This user expressed surprise at the level of support for the Mahsa app (or MahsaNG), designed to provide less-privileged individuals with access to VPNs.

Technology will always have the upper hand against censorship

<p>The Xray-core project is a fork of the original Xray core, optimized and customized to adapt to the specific conditions in Iran. Developed as an open-source initiative by GFW-knocker, this project introduces advanced features for circumventing internet restrictions, providing users with access to more robust and sophisticated protocols resistant to censorship.</p>
<h2>The Role of the Mahsa App and Future Prospects</h2>
<p>The Mahsa application, a practical implementation of GFW-knocker's ideas, serves as the primary testing and deployment platform for this customized version. Designed to meet the needs of Iranian users, especially during periods of severe internet restrictions, this app offers an effective tool for accessing an open internet. The developer has also indicated that, upon achieving sufficient stability, these modifications may be proposed for merging with the main Xray core, enabling their integration into popular clients like v2rayNG.</p>
<p><img src="/content/blog/4/xray-core-warp.jpg" alt="xray-core"></p>
<h2>Vision and Impact</h2>
<p>The release of this customized version has the potential to significantly improve the experience of Iranian users facing internet restrictions. By combining innovative configurations with support for diverse protocols, it enhances user flexibility and paves the way for the development of similar open-source tools.</p>


The release of this customized version has the potential to significantly improve the experience of Iranian users facing internet restrictions.

Customized Xray-Core for Iran

<p>In today’s world, unrestricted access to the internet has become a fundamental necessity. However, in many countries, including Iran, internet restrictions and censorship prevent users from accessing free and open information. The <code>MahsaNG</code> app, a VPN platform, offers a solution to bypass these limitations.</p>
<p>MahsaNG is a customized fork of v2rayNG, designed to provide free and resilient access to the internet. This application leverages advanced technologies such as DNS over HTTPS, TLS packet splitting, rotating configurations, and random subdomains to ensure a secure and stable online experience for users.</p>
<p>One of the standout features of MahsaNG is the ability for users to share server configurations. This empowers individuals to contribute to the accessibility of free internet by sharing their configurations, helping others bypass censorship effectively.</p>
<p>The app is developed under the "Sogaro Dream" project, a collaborative effort by a team of experts. The primary goal of this project is to create a free and decentralized VPN service, offering those with restricted internet access the opportunity to connect to open online resources.</p>
<p>MahsaNG employs various security techniques to provide a safe platform for its users. Additionally, users can verify the app's integrity through online services such as <code>VirusTotal</code> to ensure its security.</p>
<p>This application is especially suited for individuals seeking a robust solution against censorship and a gateway to unrestricted internet access. With its advanced features, MahsaNG not only serves as a tool to overcome limitations but also as a social initiative to support underprivileged individuals in accessing open information.</p>
<p>If you are looking for a secure and free tool to access the uncensored internet, the MahsaNG app can be an ideal choice for you. You can download it from <a href="https://github.com/GFW-knocker/Xray-core/releases/latest">GitHub Page</a> or <a href="https://play.google.com/store/apps/details?id=com.MahsaNet.MahsaNG&#x26;hl=en">Google Play</a>.</p>


With its advanced features, MahsaNG not only serves as a tool to overcome limitations but also as a social initiative to support underprivileged individuals in accessing open information.

MahsaNG App: A Bridge to Free Internet Access

<p>Managing cloud costs is crucial for businesses that leverage Azure Virtual Machines (VMs) to host VPS servers. Below, we outline a practical strategy for significantly reducing Azure bandwidth expenses using Cloudflare's services and efficient traffic management techniques.</p>
<h3>Utilize Cloudflare’s Bandwidth Alliance</h3>
<p>Cloudflare partners with Azure under the <a href="https://www.cloudflare.com/bandwidth-alliance/">Bandwidth Alliance</a>, which provides cost savings on data transfer fees. By routing all traffic through Cloudflare’s Content Delivery Network (CDN) or WARP service, you can cut your bandwidth costs by up to one-third.</p>
<h3>Leverage Xray-core and WireGuard</h3>
<p>To maximize the benefits of WARP’s free configurations, we can use Xray-core with the WireGuard interface. This setup ensures seamless connectivity while leveraging WARP’s capabilities for free bandwidth.</p>
<h3>Overcome WARP’s Speed Limitations</h3>
<p>Each WARP interface has a speed limit of 400 Mbps. To achieve higher throughput, implement load balancing across multiple WARP interfaces using Xray-core. Assume we have a VPS with a 1 Gbps dedicated port. So we set three WARP interfaces and load balance between them:</p>
<h4>Configuration:</h4>
<ol>
<li>
<p><strong>Set up three WARP interfaces with WireGuard kernel:</strong></p>
<ul>
<li>
<p><strong>Install WireGuard:</strong></p>
<ul>
<li>If Ubuntu = 24.04 LTS:
<pre><code class="language-bash">sudo apt install wireguard -yq
</code></pre>
</li>
<li>If Ubuntu &#x3C; 24:
<pre><code class="language-bash">sudo apt install resolvconf wireguard-dkms wireguard-tools -yq
</code></pre>
</li>
</ul>
</li>
<li>
<p><strong>Generate three WARP configs:</strong></p>
<ul>
<li>Download and set up the <code>wgcf</code> program corresponding to your server architecture. For example, for amd64:
<pre><code class="language-bash">wget https://github.com/ViRb3/wgcf/releases/download/v2.2.24/wgcf_2.2.24_linux_amd64
mv wgcf_2.2.24_linux_amd64 /usr/bin/wgcf
chmod +x /usr/bin/wgcf
</code></pre>
</li>
<li>Register and generate WARP config profile:
<pre><code class="language-bash">wgcf register
wgcf generate
</code></pre>
</li>
<li>Add the <code>Table = off</code> line to the generated WireGuard <code>wgcf-profile.conf</code> file (below MTU).</li>
</ul>
<p><img src="/content/blog/7/unnamed1.png" alt="content"></p>
</li>
<li>
<p><strong>Configure WireGuard and enable the first interface:</strong></p>
<pre><code class="language-bash">sudo mv wgcf-profile.conf /etc/wireguard/warp1.conf
sudo systemctl enable --now wg-quick@warp1
</code></pre>
<p>Note that we renamed the <code>wgcf-profile.conf</code> to <code>warp1.conf</code>. This is our first WARP interface. Repeat this process to generate <code>warp2.conf</code> and <code>warp3.conf</code>. Ensure all configuration files are in the <code>/etc/wireguard/</code> directory. For generating new WARP profiles, delete the <code>wgcf-account.toml</code> file and re-run the <code>wgcf register</code> and <code>wgcf generate</code> commands.</p>
</li>
</ul>
</li>
<li>
<p><strong>Configure Xray-core:</strong></p>
<ul>
<li>
<p><strong>Configure Xray <code>outbound</code>:</strong></p>
<p><img src="/content/blog/7/unnamed2.png" alt="content"></p>
</li>
<li>
<p><strong>Configure Xray Routing:</strong></p>
<ul>
<li>Add a <code>balancer</code> rule in the <code>routing</code> object:
<img src="/content/blog/7/unnamed3.png" alt="content"></li>
<li>Create the <code>balancers</code> object:
<img src="/content/blog/7/unnamed4.png" alt="content"></li>
</ul>
</li>
</ul>
</li>
</ol>
<h4>Notes:</h4>
<ol>
<li>When using <code>LoadBalancing</code> in Xray-core, ensure that the <code>domainStrategy</code> in the <code>routing</code> object is set to <code>IPOnDemand</code>.</li>
<li>If your inbound configuration does not have a tag, add one. This tag will be referenced in the <code>inboundTag</code> when defining the <code>balancer</code> rule.</li>
</ol>
<h3>Benefits and Additional Features</h3>
<p>This approach leverages load balancing across multiple WARP interfaces to distribute traffic evenly, effectively increasing total bandwidth capacity and optimizing port utilization. However, using more than six WARP interfaces with load balancing can lead to significantly increased resource usage in Xray-core, potentially impacting system performance. For this reason, it is recommended to limit the number of WARP interfaces to four (the lower, the better), which strikes a good balance between performance and resource efficiency.</p>
<p>In addition to improving traffic management, this method offers substantial cost savings. By distributing bandwidth usage across WARP interfaces, Azure bandwidth costs can be reduced from approximately $0.08 per GB to around $0.03 per GB. This makes it a cost-effective solution for managing high-bandwidth requirements while maintaining system stability.</p>
<p>In emergencies, "porn" traffic can be blocked either through <a href="https://www.google.com/url?q=https://www.google.com/url?q%3Dhttps://github.com/Chocolate4U/Iran-v2ray-rules/%26amp;sa%3DD%26amp;source%3Deditors%26amp;ust%3D1737301083195983%26amp;usg%3DAOvVaw005Ce-k5fYYWdDHk6cyS2H&#x26;sa=D&#x26;source=docs&#x26;ust=1737301083207061&#x26;usg=AOvVaw2rvw7K5yYa6VXc25GmvL94">“geosite”</a> files or DNS blocking (e.g., Cloudflare Family) to further reduce bandwidth usage by approximately 20%. This figure is based on extensive experimentation over several months on Iranian networks.</p>
<p>This solution, powered by <a href="https://www.google.com/url?q=https://www.google.com/url?q%3Dhttps://github.com/compassvpn/agent%26amp;sa%3DD%26amp;source%3Deditors%26amp;ust%3D1737301083196250%26amp;usg%3DAOvVaw2y8Zjrprg7OjXgCfsaOIEn&#x26;sa=D&#x26;source=docs&#x26;ust=1737301083207198&#x26;usg=AOvVaw2GlediDfIcyJ3z3Oad8ftl">CompassVPN</a>, offers a streamlined and automated approach to VPN setup and management, running seamlessly on a VPS. With a one-command setup, it enables remote monitoring, central dashboard integration, and automatic collection of VM metrics like CPU, memory, and traffic. It automates Cloudflare DNS and TLS certificate management, supports direct or proxied configurations, and optimizes connections with WARP auto-rotation. Additional features include automatic updates, configuration rotation, and blocking of torrents, ads, malware, phishing, and Iranian websites. Integration with Grafana Cloud or Pushgateway ensures efficient metric visualization, while Xray-Knife verifies configuration reliability. Custom DNS options further enhance performance and cost efficiency, making CompassVPN a professional and comprehensive solution.</p>


A guide on reducing Azure bandwidth expenses using Cloudflare services, Xray-core, and WireGuard for efficient traffic management.

How to Lower Azure Bandwidth Cost Effectively (Xray+WARP)

<p>The first technical report by the IRGFW team, titled Understanding Iran's Great Firewall, is now available. The report provides a comprehensive analysis of the infrastructure and operations of Iran's Great Firewall.</p>
<p>Key topics covered in the report include the status of DNS servers, UDP and QUIC status, IP status, active scanners, the DPI system, and an overview of protocols.</p>
<p>For those interested in analyzing internet filtering methods in Iran, this report serves as a complete and accurate resource, available in both <a href="https://raw.githubusercontent.com/irgfw/irgfw-website/ad91766f62b8b666eb705a5d90136bba0f72fc42/static/files/project1/IRGFW-Report1-English.pdf">English</a> or <a href="https://raw.githubusercontent.com/irgfw/irgfw-website/ad91766f62b8b666eb705a5d90136bba0f72fc42/static/files/project1/IRGFW-Report1-Persian.pdf">Persian</a>.</p>


Key topics covered in the report include the status of DNS servers, UDP and QUIC status, IP status, active scanners, the DPI system, and an overview of protocols.

Understanding The Iranian Great Firewall

<p>We are dedicated to providing open and uncensored internet access to individuals in countries with censored internet. We believe in fostering free expression, knowledge sharing, and connectivity for a more empowered and informed society.</p>
<h3>What We Do?</h3>
<p>We have developed the MahsaNG app, a powerful tool that utilizes VPN configurations from our Mahsa Server. This innovative approach allows us to bypass online restrictions, ensuring that users have access to a wide range of uncensored content and information.</p>
<p>Our Mahsa Server continuously tests and maintains healthy configurations, sourced from various channels including user contributions. This collaborative effort democratizes affordable internet access and promotes open communication within the countries that have censored internet.</p>
<h3>Get Involved</h3>
<p>Join us in our mission to bridge the gap between restricted access and open connectivity. You can contribute by spreading awareness, using the MahsaNG app, and even donating VPN configurations to our Mahsa Server.</p>


Our mission is to provide uncensored internet access to individuals in countries with censored internet, fostering free expression, knowledge sharing, and connectivity for a more empowered and informed society.

Mission

Our vision is to create a future where every individual in countries with censorship can benefit from unrestricted internet access, enabling them to thrive in a connected and informed environment, even beyond current challenges.

Vision

Our project values freedom, empowerment, and accessibility. We uphold integrity, collaboration, innovation, privacy, and transparency, prioritizing positive impact and community needs.

Values

Our innovation lies in MahsaNG apps utilization of the Mahsa Server. It dynamically maintains, tests, and collects VPN configurations from multiple sources, empowering users with cost-effective and accessible internet solutions.

Innovation

We prioritize privacy. Through robust encryption and strict security practices, we ensure the protection of user data, maintaining utmost confidentiality.

Privacy

Users can contribute to our cause by donating VPN configurations to the Mahsa Server. This generosity expands the range of accessible options, promoting affordable internet access for all.

MahsaNet

Risen from the ashes of fire,
for Iran

Solutions for bypassing internet restrictions in Iran

How can I join this movement and contribute?

MahsaNG

Blog

Technology will always have the upper hand against censorship

Customized Xray-Core for Iran

MahsaNG App: A Bridge to Free Internet Access

We believe in our fight against internet censorship!

NikaNG

How to Lower Azure Bandwidth Cost Effectively (Xray+WARP)

Understanding The Iranian Great Firewall

Technology will always have the upper hand against censorship

Customized Xray-Core for Iran

MahsaNG App: A Bridge to Free Internet Access

Iran internet status Radar

Explore now

Do you need help?

MahsaNet

Risen from the ashes of fire, for Iran

Solutions for bypassing internet restrictions in Iran

How can I join this movement and contribute?

MahsaNG

Blog

Technology will always have the upper hand against censorship

Customized Xray-Core for Iran

MahsaNG App: A Bridge to Free Internet Access

We believe in our fight against internet censorship!

NikaNG

How to Lower Azure Bandwidth Cost Effectively (Xray+WARP)

Understanding The Iranian Great Firewall

Technology will always have the upper hand against censorship

Customized Xray-Core for Iran

MahsaNG App: A Bridge to Free Internet Access

Iran internet status Radar

Explore now

Do you need help?

Risen from the ashes of fire,
for Iran