NetProxy by Fanju routes your whole phone's traffic through a proxy. It's a root module for Magisk, KernelSU and APatch built on sing-box (the reF1nd fork), and it takes over traffic with eBPF by default or with TUN plus auto_redirect if you switch it in the settings. It needs an arm64-v8a device.
What's in the zip
bin/sing-box, the proxy core.netproxyctl, a Go program that runs the service and offers a CLI and, since 8.6.0, an HTTPS management API that keeps working while the core is stopped.NetProxy.apk, the Android manager app. The installer offers to install it for you.- Two web interfaces: a terminal-style module WebUI and the sing-box Dashboard.
- A default sing-box config with local rule files and rule sets for China sites, Google, Telegram, ads and AI services.
What you can do with it
- Transparent proxying of TCP, UDP and DNS, including devices sharing your hotspot or USB tethering.
- Nodes and subscriptions: import node links, plain node lists, Clash YAML or sing-box JSON; filter subscriptions, set request headers, see traffic info and update them automatically.
- Pick a node by hand or let it choose the fastest; speed tests also work while the service is off.
- Per-app proxying with a blacklist or whitelist, configured per Android user and covering cloned apps.
- Rule, global proxy, direct, and rule-with-ads modes, switched automatically by Wi-Fi name and actual exit.
- Edit the sing-box config and local rules, read the running config and logs, and export a redacted diagnostics bundle.
Installation
- Flash the zip in Magisk, KernelSU or APatch.
- The installer asks with the volume keys (Volume + to move, Volume − to confirm) whether to keep all your data, keep only nodes, or start fresh, then whether to install the manager app. With no input it takes the default after 10 seconds.
- On an update the new version is applied in the background, so no reboot is needed; a first install asks you to reboot.
- Open the manager, which connects to the module by itself. Import a node or add a subscription, pick a node, then start the service from the dashboard.
The service starts manually by default; turn on auto-start in Settings. The Action button in your root manager also toggles it. Uninstalling stops sing-box so its eBPF programs, TC hooks and routes are released.