Proxy Builder

A chain proxy routes your traffic through two proxies in sequence:

This fixes your outgoing IP address to the chain proxy's IP, ensuring a consistent IP for all destinations.

Supported Protocols

• VLESS — vless://uuid@server:port?params
• VMess — vmess://base64-json
• Trojan — trojan://password@server:port?params
• Shadowsocks — ss://base64(method:pass)@server:port
• SOCKS — socks://user:pass@server:port
• HTTP — http://user:pass@server:port
• SSH — Sing-box only (4-field input: server, port, username, password)

Output Formats

• Xray JSON — Use with any Xray-compatible client (v2rayN, v2rayNG, Nekoray, etc.)
• Sing-box JSON — Use with sing-box client

Supported Transports

TCP, TCP (http header), WebSocket, gRPC, HTTPUpgrade

Supported TLS

TLS, Reality, None

⚠️ Important Notes

• SOCKS & HTTP configs must include username and password.
• Xray does not support raw (headerless TCP) configs.
• Shadowsocks cannot have any transport (WebSocket, gRPC, etc.) and cannot have TLS.
• SSH is only supported by Sing-box — Xray tab is disabled when SSH is used.

Paste VLESS or Trojan URL(s) (one per line) and this tool adds:

• fp — TLS fingerprint (default chrome, overrides the URL's own value).
• ech — ECH Config List for Encrypted ClientHello. Use the ECH Server selector to pick a preset (default cloudflare-ech.com + Cloudflare udp://1.1.1.1); the field stays editable for manual tweaks. A bare domain (e.g. cloudflare-ech.com) auto-adds +udp://8.8.8.8; a base64 ECHConfigList is passed through untouched.
• Server — IP/domain override, auto-filled from the pasted URL; empty to keep the original address.
• Subscription Input — paste a subscription link to fetch it in your browser, or paste its contents (plain or base64) to batch-enhance every VLESS / Trojan config inside with the same ECH options below. The server override is ignored here — each config keeps its own address.
• Output — Copy to clipboard, .txt download (one config per line), or base64 .txt download (standard subscription body).

ech is only added when the config uses tls security. Clear the field to skip it.

⚠️ TLS required: this tool only works with configs that have TLS enabled. Non-TLS configs are not supported and will not work.

Client Requirements

• Xray — any recent core (v2rayN, v2rayNG, Nekoray, etc.).
• Sing-box — version 1.13.0 or higher; Clash — version 1.19.20 or higher.

Paste VLESS or Trojan URL(s) (one per line) and this tool adds:

• cs — TLS cipher suite list for the handshake.
• fm — final mask / fragment settings (packet fragmentation for TLS handshakes). Use the Fragment Version selector to switch between v1 (classic) and v2 (new, default); the field stays editable for manual tweaks.
• fp — TLS fingerprint (default unsafe, overrides the URL's own value).
• Server — IP/domain override, auto-filled from the pasted URL; empty to keep the original address.

cs and fm are only added when the config uses tls security. Clear a field to skip that parameter.

⚠️ TLS required: this tool only works with configs that have TLS enabled (security tls or reality). Non-TLS configs are not supported and will not work.

Client Requirements

• Windows — use PattN.
• Android — use PattNG.

Paste a subscription link and this tool fetches it in your browser, then runs every config through the Fragment + Fingerprint options above.

• Fetch — fetched directly in your browser (works when the provider sends CORS headers); if the provider blocks browser access, the link's content must be pasted manually. The error then shows 3 quick steps, and the Open link button next to Fetch opens the URL in a new tab for copying.
• Pasted content — if the box holds a list of configs (or a base64 blob) instead of a link, nothing is fetched; the content is enhanced as-is. A saved subscription file can also be dropped onto the input card.
• Decode — accepts both plain-text lists and base64-encoded subscription bodies.
• Enhance — uses the fp / cs / fm values set in the options above. Fragment presets apply to TLS configs only. ECH is handled in the ECH tab and is not applied here.
• Server override in the options above is ignored here — a subscription holds many servers, so each config keeps its own address.

Output Formats

• Copy — clipboard, one config per line.
• .txt — one config per line, ready for bulk import (v2rayNG, v2rayN, Nekobox...).
• base64 .txt — the whole list base64-encoded, the standard subscription body format.

⚠️ Notes

• Only VLESS and Trojan configs can be enhanced — others are counted as skipped.
• Configs without TLS / Reality are exported but fragment settings are not applied to them.
• If the fetch fails, the provider likely blocks browser access — open the link in a new tab and paste its contents straight into this box.