Skip to content

Releases: SamNet-dev/dnstm-setup

v1.3 — NoizDNS + Xray Backend

16 Mar 17:44

Choose a tag to compare

What's New in v1.3

🛡️ NoizDNS Tunnels (DPI-Resistant)

Two new tunnel types added to the main setup — 6 tunnels instead of 4:

  • NoizDNS + SOCKS (n subdomain) — DPI-resistant DNS tunnel for SOCKS proxy
  • NoizDNS + SSH (z subdomain) — DPI-resistant DNS tunnel for SSH tunneling

NoizDNS is a DPI-resistant fork of DNSTT by anonvector (same author as SlipNet) that uses alternative DNS query encoding to evade Deep Packet Inspection. The server auto-detects both standard DNSTT and NoizDNS clients. In SlipNet, select NoizDNS as the tunnel type for n and z subdomains.

  • Zero extra configuration — binary downloaded automatically during setup
  • Graceful degradation — if download fails, creates 4 standard tunnels and continues
  • Works on all architectures (amd64, arm64, arm, 386)

🔌 Xray Backend Integration (Optional)

New optional feature to connect an existing 3x-ui panel (or raw Xray) to a DNS tunnel:

sudo bash dnstm-setup.sh --add-xray
# Or via management menu: --manage → option 8
  • Auto-detects 3x-ui (native or Docker) — or installs it for you (full panel or headless)
  • 4 protocols: VLESS, Shadowsocks, VMess, Trojan
  • Internal-only inbound on 127.0.0.1 — only reachable through the DNSTT tunnel
  • Generates client configs — SlipNet URL + client URI for Nekobox/v2rayNG/Shadowrocket
  • Compatible with any V2Ray/Xray client that supports proxy chaining

Other Improvements

  • 7 DNS records (was 5) — 2 new NS records for NoizDNS subdomains
  • --add-domain now creates NoizDNS tunnels for backup domains
  • --status displays NoizDNS tunnel info and SlipNet URLs
  • --remove-tunnel properly cleans up Xray and NoizDNS service overrides
  • Security — SQL injection prevention, cookie jar cleanup, restrictive file permissions, bcrypt password detection
  • Portable — no grep -P, no python3, pure bash

Full Tunnel Setup (v1.3)

Tunnel Subdomain Transport Backend
slip1 t Slipstream (QUIC) SOCKS
dnstt1 d DNSTT (Noise) SOCKS
noiz1 n NoizDNS (DPI-resistant) SOCKS
slip-ssh s Slipstream (QUIC) SSH
dnstt-ssh ds DNSTT (Noise) SSH
noiz-ssh z NoizDNS (DPI-resistant) SSH