Windows GUI client for per-application TCP, UDP and DNS tunneling.

Server: mtp-gateway.

Author: itinfra7 from GitHub
License: AGPL-3.0-only; third-party notices are in NOTICE.

The transport uses Fake-TLS ee, Obfuscated2, explicit padded chunks, TLS 1.3 mutual authentication and multiplexing. UDP uses UDP-over-TCP.

Windows x86_64, Rust 1.88 or later, the x64 MSVC toolchain and Windows SDK.

.\scripts\prepare-fonts.ps1
.\scripts\build.ps1

Download the Windows archive from Releases, verify SHA256SUMS and extract it. DirectX 12 and administrator privileges are required. Release archives include WinDivert; for source builds, place WinDivert.dll and the signed WinDivert64.sys from the WinDivert 2.2.2 release in bin/.

.\mtp-splitter.exe

Run as administrator, import the gateway configuration ZIP, add applications and connect. Stop disconnects the tunnel and keeps applications blocked; Release terminates the tunnel and watchdog, allowing direct connections. Stop and release before importing or deleting server settings. The Server tab can delete server settings while preserving application rules.

.\mtp-splitter.exe import-client .\client-desktop.zip
.\mtp-splitter.exe doctor
.\mtp-splitter.exe gateway-probe
.\mtp-splitter.exe processes
.\mtp-splitter.exe clear-server

Keep exported credentials private. Server deployment, protocol, client integration.