BaoLianDeng
macOS VPN proxy app powered by meow-rs, a Clash/mihomo-compatible proxy kernel written in Rust.
App Store · TestFlight Beta · Website
Features
- Transparent Proxy — Built on
NETransparentProxyProvider for socket-level flow interception, faster than traditional TUN-based solutions
- meow-rs Engine — Clash/mihomo-compatible proxy kernel written in Rust (meow-rs/meow-rs), compiled as a native xcframework
- Per-App Proxy — Choose which apps go through the proxy (allowlist) or bypass it (blocklist)
- Subscription Management — Add, refresh, and switch between proxy subscriptions (Clash YAML and base64 formats)
- Smart Proxy Routing — Browse nodes with latency indicators, switch proxy groups, rule/global/direct modes
- Traffic Analytics — Daily bar charts, session stats, and monthly summaries for proxy traffic
Known differences from upstream mihomo: TUIC, WireGuard, SSH, and ShadowsocksR outbounds are not supported. Supported outbounds: ss (including the built-in ech-tls-tunnel plugin), trojan, vless (+ vision, + post-quantum encryption, + REALITY), vmess, snell, hysteria2, anytls, plus sing-mux (smux:). client-fingerprint: (uTLS) is live via boring-tls.
Architecture
┌─────────────────────────────────────────────┐
│ macOS App (SwiftUI) │
│ ┌──────────┬────────┬───────┬───────────┐ │
│ │ Home │ Config │ Data │ Settings │ │
│ │ Subs & │ YAML │Charts │ Groups / │ │
│ │ Nodes │ Editor │& Stats│ Logs │ │
│ └──────────┴────────┴───────┴───────────┘ │
│ ┌───────────────────────────────────────┐ │
│ │ VPNManager (NETransparentProxyManager)│ │
│ └──────────────────┬────────────────────┘ │
├─────────────────────┼───────────────────────┤
│ App Extension (PlugIns/TransparentProxy) │
│ ┌──────────────────┴────────────────────┐ │
│ │ NETransparentProxyProvider │ │
│ │ ┌──────────────────────────────┐ │ │
│ │ │MihomoCore.xcframework (Rust) │ │ │
│ │ │ - Proxy Engine │ │ │
│ │ │ - DNS (fake-ip) │ │ │
│ │ │ - Rules / Routing │ │ │
│ │ └──────────────────────────────┘ │ │
│ └───────────────────────────────────────┘ │
└─────────────────────────────────────────────┘
IPC between the app and tunnel extension uses NETunnelProviderSession.sendMessage for mode switching, traffic stats, and version queries. Both targets share preferences via standard UserDefaults.
Install
From the App Store
- Download from the Mac App Store
- Launch BaoLianDeng from Applications
- Enable the network extension: System Settings → General → Login Items & Extensions → Network Extensions → toggle on BaoLianDeng
Build from Source
Prerequisites: macOS 14.0+ with Xcode 15+, Rust stable via rustup with the aarch64-apple-darwin and x86_64-apple-darwin targets installed
1. Build the Rust framework
make framework # macOS universal (arm64 + x86_64)
This builds the Rust FFI bridge under Rust/meow-ffi/ (a staticlib around the meow-rs engine) into Framework/MihomoCore.xcframework.
Copy the template and set your Apple development team ID:
cp Local.xcconfig.template Local.xcconfig
# Edit Local.xcconfig and set DEVELOPMENT_TEAM = YOUR_TEAM_ID
Finding your Team ID: Apple Developer portal → Membership → Team ID (10-character string, e.g. AB12CD34EF).
The app and the provider require these capabilities (already configured in entitlements):
- App Sandbox
- Network Extensions — App Proxy Provider (transparent proxy)
3. Build and run
open BaoLianDeng.xcodeproj
# Select BaoLianDeng scheme → My Mac → Run (⌘R)
License
MIT — see LICENSE for details.
评论