Skip to content

VPN Proxy Clients: Tun2Socks & Tun2Http

Route your entire Android device's network traffic through upstream HTTP or SOCKS proxy servers using Android's native VpnService. No root required.

Every Proxy includes built-in system-wide VPN client capabilities. While Server Mode allows you to share your phone's connection with other devices, Client Mode allows your Android phone itself to route all application traffic through an external proxy server.

What are Tun2Socks and Tun2Http?

On Android, applications and system services communicate over standard IP sockets. Many tools, games, or legacy apps do not offer in-app proxy configuration options.

Every Proxy solves this by creating a virtual network TUN interface (/dev/tun) via Android's VpnService API:

  • Tun2Socks (Socks Proxy Client): Captures raw IP packets from all Android applications and transparently translates them into standard SOCKS4, SOCKS4a, or SOCKS5 TCP and UDP connections destined for an upstream proxy.
  • Tun2Http (Http Proxy Client): Captures device traffic and tunnels TCP streams through an upstream HTTP or HTTPS proxy server using standard HTTP CONNECT tunneling.
[All Apps on Android] ──> [/dev/tun Interface] ──> [Every Proxy Engine] ──> [Upstream Proxy] ──> [Internet]

When to Use Client Mode

  • Bypassing Wi-Fi Restrictions

    Route all phone traffic through a secure remote proxy when connected to restrictive public, hotel, or corporate Wi-Fi networks.

  • Geo-Location Testing for QA & Devs

    Route your entire Android device through a regional proxy to test app behavior, localized notifications, and region-locked content across all apps on the device.

  • App-Wide Privacy Without Native Settings

    Force apps that ignore Android Wi-Fi proxy settings to route their traffic through an encrypted or authenticated proxy server.

  • Chaining to Remote Servers

    Tunnel device connections to a private cloud SOCKS5 server (e.g. Shadowsocks, Dante, Squid) without requiring third-party VPN apps or complex setups.

Configuration & Setup

1. Access the Client Tab

Open Every Proxy and tap the Client tab located at the top of the home screen (next to the Server tab).

You will see two client options: * Socks Proxy Client (Tun2Socks) * Http Proxy Client (Tun2Http)

2. Configure Upstream Settings

Tap the Edit Icon on the desired client card to configure your upstream proxy settings:

Setting Description Default / Example
Proxy Host IP address or domain name of your upstream proxy server. 192.168.1.100 or proxy.example.com
Proxy Port Listening port on your upstream proxy. 1080 (SOCKS) / 8080 (HTTP)
DNS Server Custom DNS resolver used to resolve hostnames within the tunnel. 8.8.8.8 or 1.1.1.1
MTU Maximum Transmission Unit packet size for the virtual TUN interface. 1500 bytes
Authentication Optional Username and Password for authenticated proxies. Supports RFC basic auth
Auto Start Automatically reconnect the VPN client when the Android device boots. Disabled by default

3. Grant Android VPN Permission

When you toggle the client switch ON for the first time, Android will display the standard system VPN connection dialog:

"Every Proxy wants to set up a VPN connection that allows it to monitor network traffic. Only accept if you trust the source."

Tap OK to authorize the connection. Once connected: * A key icon () will appear in your Android status bar. * A persistent foreground notification will display live traffic throughput. * The home screen card will show real-time transfer graphs and active/peak transfer counters.

Developer Edition Diagnostics

Owners of the Developer Edition in-app purchase gain full transparency into client tunnel traffic:

  • Active Sockets: Tap View under Connections on the client card to see every app connection currently active through the upstream proxy.
  • Session Log & Latency: Inspect packet latency, DNS resolution performance, UDP target endpoints, and connection timelines.
  • JSON Export: Export client session histories for compliance auditing or debugging.

Frequently Asked Questions

Does Client Mode require root?

No. Every Proxy uses Android's official VpnService framework. It operates completely in user-space and does not require root permissions.

Can I run Server Mode and Client Mode at the same time?

Yes! You can run local proxy servers to share your network while simultaneously routing device apps through an upstream proxy. However, ensure that local client routing and upstream destinations do not create circular dependency loops.

What is the difference between SOCKS4 and SOCKS5 in Tun2Socks?

SOCKS5 supports remote DNS resolution and UDP packet forwarding, whereas SOCKS4 only supports IPv4 TCP connections. For full mobile app compatibility (especially VoIP and gaming), SOCKS5 is strongly recommended.