MoaV - Mother of all VPNs | Internet Freedom Stack

5 min read Original article ↗

MoaV Logo

 ███╗   ███╗ ██████╗  █████╗ ██╗   ██╗
 ████╗ ████║██╔═══██╗██╔══██╗██║   ██║
 ██╔████╔██║██║   ██║███████║██║   ██║
 ██║╚██╔╝██║██║   ██║██╔══██║╚██╗ ██╔╝
 ██║ ╚═╝ ██║╚██████╔╝██║  ██║ ╚████╔╝
 ╚═╝     ╚═╝ ╚═════╝ ╚═╝  ╚═╝  ╚═══╝

Multi-protocol censorship circumvention stack
optimized for hostile network environments

$ curl -fsSL moav.sh/install.sh | bash

Multi-Protocol Arsenal

Multiple protocols, one stack. If one is blocked, others take over.

Stealth Proxies

Reality (VLESS), Hysteria2, Trojan. Look like normal HTTPS traffic. V2Ray-compatible, powered by sing-box.

443/tcp · 443/udp · 8443/tcp

WireGuard VPN

Full VPN mode. Direct UDP or tunneled over WebSocket (wstunnel) when UDP is blocked.

51820/udp · 8080/tcp

DNS Tunnel (dnstt)

Last resort when everything else is blocked. Tunnels traffic over DNS queries. Slow but hard to block.

53/udp

Psiphon Conduit

Donate bandwidth to help others bypass censorship. Support the global anti-censorship network.

Psiphon Network

Tor Snowflake

Donate bandwidth to the Tor network. Help Tor users bypass censorship worldwide.

Tor Network

TrustTunnel

HTTP/2 and QUIC tunneling. Looks exactly like normal HTTPS traffic to deep packet inspection.

4443/tcp+udp

CDN Mode (VLESS+WS)

Route through Cloudflare when server IP is blocked. WebSocket over CDN bypasses IP-based filtering.

443 via Cloudflare

Your Protocol?

Easy to add new protocols! Know one that should be here? Let us know.

See client apps to connect with these protocols.

Why MoaV?

Internet access is a human right. MoaV exists because censorship shouldn't.

When governments shut down the internet, people lose access to news, banking, healthcare, and contact with family. MoaV provides multiple fallback protocols so when one is blocked, others keep working. Run your own server, share with trusted people, or donate bandwidth to help strangers worldwide through Psiphon and Tor.

Deploy in Minutes

Single command setup. Docker Compose handles the rest. No manual configuration needed.

Multi-User Ready

Create, revoke, and manage users independently. Each user gets unique credentials.

Stealth First

All traffic looks like normal HTTPS, WebSocket, or DNS. Decoy website included.

Protocol Fallback

If one protocol is blocked, others automatically take over. Multiple layers of redundancy.

Cross-Platform

Works with popular clients on iOS, Android, macOS, Windows, and Linux.

Open Source

Fully transparent. Audit the code, contribute, or fork. MIT licensed.

Give Back

Donate bandwidth through Conduit and Snowflake. Your server helps strangers bypass censorship worldwide.

Self-Hosted Freedom

Your server, your rules. No third-party services, no subscriptions, no data collection. Full control.

See It In Action

From zero to all protocols running in minutes

Web-based admin panel

User management, download config packages, service status

Click to enlarge

Real-time metrics

CPU, memory, traffic, connections

Click to enlarge

Architecture Overview

                                                              ┌───────────────┐  ┌───────────────┐
       ┌───────────────┐                                      │ Psiphon Users │  │   Tor Users   │
       │  Your Clients │                                      │  (worldwide)  │  │  (worldwide)  │
       │   (private)   │                                      └───────┬───────┘  └───────┬───────┘
       └───────┬───────┘                                              │                  │
               │                                                      │                  │
               ├─────────────────┐                                    │                  │
               │                 │ (when IP blocked)                  │                  │
               │          ┌──────┴───────┐                            │                  │
               │          │ Cloudflare   │                            │                  │
               │          │  CDN (VLESS) │                            │                  │
               │          └──────┬───────┘                            │                  │
               │                 │                                    │                  │
┌──────────────╪─────────────────╪────────────────────────────────────╪──────────────────╪─────────┐
│              │                 │          Restricted Internet       │                  │         │
└──────────────╪─────────────────╪────────────────────────────────────╪──────────────────╪─────────┘
               │                 │                                    │                  │
╔══════════════╪═════════════════╪════════════════════════════════════╪══════════════════╪═════════╗
║              │                 │                                    │                  │         ║
║     ┌────────┼─────────────────┼───────┐                            │                  │         ║
║     │        │         │       │       │                            │                  │         ║
║     ▼        ▼         ▼       ▼       ▼                            ▼                  ▼         ║
║ ┌─────────┐┌─────────┐┌───────┐┌─────────┐                    ┌───────────┐      ┌───────────┐   ║
║ │ Reality ││WireGuard││ Trust ││  DNS    │                    │           │      │           │   ║
║ │ 443/tcp ││51820/udp││Tunnel ││ 53/udp  │                    │  Conduit  │      │ Snowflake │   ║
║ │ Trojan  ││wstunnel ││4443/  │├─────────┤                    │  (donate  │      │  (donate  │   ║
║ │8443/tcp ││8080/tcp ││tcp+udp││  dnstt  │                    │ bandwidth)│      │ bandwidth)│   ║
║ │Hysteria2│└────┬────┘└───┬───┘└────┬────┘                    └─────┬─────┘      └─────┬─────┘   ║
║ │ 443/udp │     │         │         │                               │                  │         ║
║ │ CDN WS  │     │         │         │                               │                  │         ║
║ │2082/tcp │     │         │         │    ┌────────────────────┐     │                  │     M   ║
║ ├─────────┤     │         │         │    │ Grafana   :9444    │     │                  │     O   ║
║ │ sing-box│     │         │         │    │ Prometheus         │     │                  │     A   ║
║ └────┬────┘     │         │         │    └────────────────────┘     │                  │     V   ║
║      │          │         │         │                               │                  │         ║
╚══════╪══════════╪═════════╪═════════╪═══════════════════════════════╪══════════════════╪═════════╝
       │          │         │         │                               │                  │
       ▼          ▼         ▼         ▼                               ▼                  ▼
┌──────────────────────────────────────────────────────────────────────────────────────────────────┐
│                                        Open Internet                                             │
└──────────────────────────────────────────────────────────────────────────────────────────────────┘
                    

Quick Start

From zero to running in minutes. Use the one-liner or manual setup.

1

Install with One Command

curl -fsSL moav.sh/install.sh | bash

Installs Docker, clones MoaV, prompts for domain/email/password, and starts the interactive setup.

Manual install (alternative)
git clone https://github.com/shayanb/MoaV.git
cd MoaV
cp .env.example .env
nano .env  # Set DOMAIN, ACME_EMAIL, ADMIN_PASSWORD
./moav.sh

2

Use the CLI

moav                   # Interactive menu
moav start             # Start services
moav user add joe      # Add a user
moav update            # Update MoaV

After installation, use moav from anywhere. Run moav help for all commands.

3

Download Configs & Connect

Download user bundles from the admin dashboard at https://your-server:9443, or scan QR codes directly from the terminal. Each bundle contains configs for all protocols.

Support the Project

Help keep the internet free and open