VPN Infrastructure & SDKs

Ship a censorship-resistant VPN in days, not months.

Drop-in Android, Desktop, C-FFI, and Java SDKs powered by the Leaf proxy core. Bypass DPI with TLS fragmentation, REALITY, Stealth, H2Mux, QUIC, and MPTP — backed by a full multi-tenant panel with crypto billing.

Read the DocsBrowse Sample Apps
  • REALITY
  • Stealth
  • MPTP
  • QUIC
  • H2Mux
  • xHTTP
  • WebSocket
  • gRPC
  • FakeTCP
  • TLS-Fragment

One core. Every platform.

The same Leaf core, the same runtime HTTP API, the same LeafPreferences — across mobile, desktop, and native FFI.

  • Android SDK

    Java / JNI library wrapping Android's VpnService. Min SDK 21. Maven-published.

    com.github.shiroedev2024:leaf-sdk-androidRead the integration guide›

  • Desktop SDK (Rust)

    Pure Rust crate for Tauri, iced, egui, or CLI apps. Windows, macOS, Linux.

    leaf_sdk_desktop (Kellnr)Read the integration guide›

  • C / C++ FFI

    Stable C ABI (libleaf.*, leaf.h). Use from Qt, C#, Python, Go, Swift — anything.

    libleaf.so / leaf.dll / libleaf.dylibRead the integration guide›

  • Desktop SDK (Java)

    JVM-native JAR for Swing, JavaFX, Compose Desktop, Spring, or plain CLI.

    com.github.shiroedev2024:leaf-java-sdkRead the integration guide›

Three lines to a working VPN.

Same shape across every SDK: fetch the subscription, verify, start.

// Kotlin (Android)
val sm = ServiceManagement.getInstance()
sm.updateSubscription(clientId) {
    sm.verifyFileIntegrity(); sm.startLeaf()
}

Open-source reference apps

Apache 2.0 clients you can fork and rebrand in an afternoon.

Apache 2.0

leaf-android

Kotlin + Jetpack Compose. Quick Settings tile, leafvpn:// deep links, memory log viewer, 8-language localisation.

KotlinCompose8 locales
View on GitHubRead SDK guide
Apache 2.0

leaf-desktop

Tauri 2 + Vue 3. System tray, auto-updater, .leafsub file association, window-state persistence.

Tauri 2Vue 3Cross-platform
View on GitHubRead SDK guide

Features

The same Leaf core, the same runtime HTTP API, the same LeafPreferences — across mobile, desktop, and native FFI.

  • Built on Leaf, the DPI-bypass Rust core

    Trojan, VMess, VLESS, Stealth, Shadowsocks over WebSocket, HTTPUpgrade, HTTP/2, gRPC, xHTTP, QUIC, REALITY, FakeTCP. Every trick in one binary.

  • MPTP multi-path bonding

    Aggregate multiple TCP/UDP sub-links into one reliable stream to saturate throttled networks.

  • TLS fragmentation & fake-host

    Randomised fragmentation of the TLS ClientHello and Host: header to defeat SNI filtering.

  • Multi-tenant panel + REST API

    Provision clients programmatically, manage per-app quotas, take crypto payments via NOWPayments.

  • Local runtime HTTP API

    Live stats, outbound selection, failover health checks on 127.0.0.1 — typed wrappers in every SDK.

  • Offline subscriptions

    Sign encrypted .leafsub bundles for users in networks where your panel can't be reached.

True Pay-As-You-Go pricing. No tiers. No lock-in.

Top up your wallet and pay exactly for the bandwidth your users consume. Deductions are made hourly based on precise byte counts. No monthly contracts, no seat licenses, and no minimum commitments.

One unified fee covers everything. By paying for bandwidth, you get full access to our mobile/desktop SDKs, the multi-tenant orchestration panel, continuous core updates, and technical support.

Upload

$0.0250per GB

Per GB of traffic egressing through a Leaf node on behalf of your end users.

Download

$0.0250per GB

Per GB of traffic returning to your end users through a Leaf node.

What you get for every GB

  • DPI-bypass proxy core with REALITY, Stealth, TLS-fragmentation, MPTP, QUIC, H2Mux.
  • Unlimited sub-accounts, per-client quotas, offline `.leafsub` bundles, and crypto billing via NOWPayments.
  • Closed-source Leaf core + Apache 2.0 sample clients (Android Compose, Tauri) you can fork and ship.

I need a VPN
I have Servers
Download Traffic100 GB
Upload Traffic900 GB
Estimated Cost
$ 32.00

Start building

Create a free account, spin up your first application, copy the API key, and call updateSubscription(uuid) from three lines of code.

Create AccountContact Support