TUNNELCAT
Who else but a cat?!
The standard client for connecting to this network — for Windows, macOS, Linux, and Android.
Get ShortNerdCat →Ratatosk, Проект, Лисиндер, BlackBadger, and more — every client running on this infrastructure.
Browse apps →
We dig through any ground.
We fit where nothing else can.
Every tunnel, built to last.
New paths. New possibilities.
Deep Packet Inspection analyzes traffic at the provider level. IP address and port alone are no longer enough to stay hidden.
Unique handshake signature. Blocked within seconds of detection.
UDP packets identified by entropy and size. Trivial to block.
Statistical entropy analysis. Detected via traffic pattern matching.
Indistinguishable from browser HTTPS. Seven independent layers of detection resistance.
Traffic passes through four independent components. The client only ever knows the control-node addresses — exit and arbiter addresses are never exposed to it.
Each layer is an independent barrier. Even if one is compromised, the rest hold.
TLS ClientHello is indistinguishable from Chrome, Firefox, or Safari. Rotated on every connection.
The control byte hides inside the standard TLS Session ID field.
The tunnel looks like a chunked HTTP upload with randomized chunk sizes, padding, and jitter.
Parallel uTLS requests to real CDN endpoints match a real browser session.
Burst smoothing keeps the traffic pattern within normal browsing bounds.
The server never reveals its purpose to an unauthenticated probe.
Losing one node reveals nothing about the rest of the network.
| Feature | OpenVPN | WireGuard | Outline | Tor | Tunnel Cat |
|---|---|---|---|---|---|
| DPI-resistant | No | No | Partial | Partial | Yes |
| Indistinguishable from HTTPS | No | No | No | No | Yes |
| Decoy traffic | No | No | No | No | Yes |
| No public node IPs | No | No | No | No | Yes |
| UDP | Yes | Yes | No | No | Yes |
| Speed | Partial | Yes | Yes | No | Yes |
Chief tunneler. Sees a path where everyone else sees a dead end.
Engineer and strategist. Builds what keeps the network running at full capacity.
Build your own integrations on top of The Tunnel Cat's infrastructure. The SDK is published on GitHub.