EQUI
EN

details

Everything about EQUI on one page, each claim with its limit.

what it does

  • your own servers

    Subscriptions (reviewed before saving), share links, configs, QR codes, a link from your phone. VLESS, VMess, Trojan, Shadowsocks, Hysteria2, TUIC, WireGuard, AmneziaWG and more, on sing-box or Xray.

    None are included or sold. Past your server, your traffic is up to whoever runs it.

  • a kill switch

    When the tunnel drops, a Windows firewall block holds your traffic. Programs can be blocked or closed on a drop too.

    Needs administrator approval; the full Windows test matrix is still to run.

  • a leak check

    Before and after connecting, side by side: your address, DNS, IPv6 and WebRTC. Untested never reads as passed.

    It sees what a website sees, not what apps send inside their own traffic.

  • Tor, built in

    Your server only, Tor only, or your server and then Tor, with bridges for networks that block it.

    Whether Tor gets through depends on your network and bridges.

  • routing and per-app

    Rules by site, address, country list or program, and a tester that shows which rule decides.

    The tester previews your rules; it doesn't test whether a site is reachable.

  • finding a server

    Pings that say what they measured, an Auto pool that ranks itself, a switch to another server when one dies.

    Auto-switch is tested on simulated sessions, not live servers.

what isn't protected

  • your device

    A VPN hides your address, not your device: Windows, games and apps send their own ids inside their own encrypted traffic.

  • your server

    Whoever runs it sees your real address and every site you reach.

  • apps outside the tunnel

    With the system proxy, UDP, QUIC and apps that ignore the proxy go direct; the app says "on · proxy apps only".

  • one install id

    Subscription refreshes send one random id per install, the same to every provider, so panels run by one operator can link your subscriptions.

what the app itself connects to

  • An IP echo service (such as api.ipify.org) when it starts and before each connect, from your real address.
  • The leak check after connecting and every 10 to 14 minutes, with STUN at Google and Cloudflare.
  • After a failed connect, the usual connectivity checks, then ya.ru and aparat.com to tell a national whitelist from an outage.
  • Your provider, for subscription refreshes (every 6 hours by default).

No analytics or crash reporting. Update checks run at most once a day and only while connected, once the app has an address to ask. The 10-to-14-minute check and the failed-connect probes can't be turned off.

install

  1. Check the file. In PowerShell, Get-FileHash .\EQUI-*.exe -Algorithm SHA256 must print the sha256 shown with the download.
  2. Windows SmartScreen warns because the installer isn't signed yet: choose More info, then Run anyway.
  3. Approve the administrator prompt. EQUI installs for every account; then add your first server.

Needs 64-bit Windows 10 or 11 and a server or subscription of your own. To uninstall, use Windows Settings › Apps; your servers and settings stay in %APPDATA%\EQUI VPN until you delete it.

Not tested yet: the Windows release test matrix (the kill switch's live firewall runs), real hardware for the hotspot and the Wi-Fi rules, and a PC with a graphics card.