SkyChord turns your devices and servers into a single encrypted mesh network — every node a peer, every packet end-to-end encrypted, with rule-based routing that puts you in control.
A mesh VPN designed for performance-sensitive and censorship-prone networks — not just another point-to-point tunnel.
Every node is a peer. Nodes authenticate each other, discover the topology automatically, and relay traffic — so any two devices can reach each other even without a direct path.
A Surge/Clash-style ordered rule list decides per flow: through an exit node, across the overlay, direct, or dropped — matching on domain, CIDR, port, or protocol.
Data rides a fast authenticated-UDP path by default, and transparently falls back to a shaped TCP carrier when the network blocks or degrades UDP.
Ed25519 node identities with modern authenticated encryption. Relays forward payloads they cannot read — your traffic is yours alone.
Run SkyChord as a Layer-3 router (TUN, IP packets) or a Layer-2 switch (TAP, Ethernet frames with MAC learning) — whichever your network needs.
A compact C core with zero per-packet allocation runs comfortably inside the iOS Network Extension memory budget — the same engine on phone and server.
Three ideas, one tunnel.
Add your devices and servers with a simple key exchange. Each node gets an Ed25519 identity and learns the topology automatically — no central server required.
Packets take the fastest authenticated-UDP route, relayed peer-to-peer when needed. If UDP is blocked or throttled, SkyChord shifts to its TCP fallback carrier without dropping your session.
Per-flow rules pick the exit: a chosen node, the overlay, direct out, or drop. Match by domain, IP range, port, or protocol — just like the proxy tools you already know.
Launching soon on the App Store. Be the first to connect your iPhone and iPad to your own encrypted mesh.
Self-hosted server component · Open protocol · No account required