Download
RU EN DE FR ES PT 中文

VPN — User Guide | YoBench

How to use the VPN module in YoBench: VLESS+Reality via sing-box, TUN and proxy modes, subscription import, metrics, routing bypass.

What the VPN module does

A built-in VLESS+Reality VPN client powered by sing-box. Two modes: TUN (system tunnel — all OS traffic goes through the VPN) and proxy (only apps that know how to use a local SOCKS proxy). Useful for bypassing blocks and private network access.

What you get:

  • VLESS+Reality via sing-box — with built-in xtls-rprx-vision flow.
  • Two modes: TUN or local SOCKS proxy.
  • Subscription import — a single URL expands to a list of profiles.
  • Real-time metrics — up/down via Clash API (port 9090), refreshed ~1/sec.
  • Connection logs — 200-entry buffer; sing-box stderr is parsed into info / warn / error levels.
  • Latency test — TCP probe to the profile's server.
  • Platform architecture: on Windows the TUN mode is served by the Go service yobench-vpn-service.exe over TCP port 19876 (installed once via UAC); on macOS/Linux TUN requires sudo, with a /etc/sudoers.d/yobench-vpn rule for convenience.

Profile parameters

A VPN profile is created either by pasting a VLESS URI or by importing a subscription:

vless://UUID@SERVER:PORT?encryption=none&type=tcp&security=reality
       &fp=FINGERPRINT&pbk=PUBKEY&sid=SHORT_ID&sni=SNI&flow=FLOW#NAME

The database stores name, server, server_port, uuid, sni, public_key, short_id, fingerprint, flow, vless_uri.

Global settings

Under Settings → VPN:

  • Last profile (vpnLastProfileId) — auto-restore after app restart.
  • Mode (vpnMode) — tun (default) or proxy.
  • Proxy port (vpnProxyPort) — default 10808.
  • Auto-connect (vpnAutoConnect) — connect automatically.
  • Subscription URL (vpnSubscriptionUrl) — external URL to import a set of profiles.
  • Bypass domains (vpnBypassDomains) and bypass suffixes (vpnBypassSuffixes) — split tunneling by domain.
  • DNS provider (vpnDnsProvider) — Cloudflare (default), Google, etc.
  • Custom DNS (vpnDnsCustomUrl) — supports tls://, https://, udp://.
  • TLS fragmentation (vpnFragment) — false by default.
  • Log level (vpnLogLevel) — error / warn / info / debug. Default warn.

Routing: private IPs go direct, multicast and mDNS are blocked, public IPv6 goes through the proxy (fallback), DNS queries are intercepted (hijack-dns).

Leak protection: while the tunnel is active, alternative DNS protocols are blocked so apps can't sidestep the configured DNS resolver.

Workflow

1. Add a profile

  1. Open the VPN module from the left sidebar.
  2. Import subscription: paste the URL and click Import — the profile list appears.
  3. Or Add manually: paste the VLESS URI and a name.

2. Pick a mode

  • TUN — for a system tunnel (admin rights required).
  • Proxy — local SOCKS on port 10808; configure apps manually or via HTTP_PROXY / HTTPS_PROXY.

3. Connect

Click Connect. The up/down metrics appear in real time and the status shows in the header.

4. Tune the routing

In settings:

  • Bypass domains — a list of domains that go around the VPN (e.g. a banking app or local services).
  • DNS — pick a provider or a custom URL.

5. Check latency

The Latency test button TCP-pings the profile's server and shows ms.

Next steps

  • If you use the VPN for scraping — wire a proxy into the module, or use the local SOCKS port 10808.
  • For server monitoring through the VPN — Servers.

Help and feedback

Want Trojan, Shadowsocks, Hysteria, or a kill switch? Contact us via the feedback form.