sing-box · client config generator

Paste a link.
Get a config that runs.

Drop in one or more vless://, vmess://, trojan://, ss://, hysteria2:// or tuic:// share links. This builds a sing-box 1.13+ client config — SOCKS, HTTP, and/or TUN inbounds — entirely in your browser. Nothing is uploaded anywhere.

live route trace— hops · — bypass domains

01 Proxy links

One link per line. Each becomes an outbound in the generated config.

02 Inbounds

How local apps or the OS reach sing-box.

SOCKS proxy
Point individual apps at it manually
Listen address
Listen port
Auth (optional)
HTTP proxy
For tools that only take an HTTP(S)_PROXY env var
Listen address
Listen port
Auth (optional)
TUN device
System-wide, routes the whole OS
Interface name
IPv4 address
IPv6 addressBlank ≠ blocked — IPv6 traffic then bypasses the tunnel entirely unless you disable IPv6 in the OS
MTU
Stack
strict_route
auto_redirectLinux nftables, skip if unsure

03 Outbound routing

How traffic picks which proxy — and what skips the proxy.

Group type
urltest auto-picks the fastest node
Health-check URL
Re-test interval
Bypass LAN / private IPs
RFC1918 etc. go direct
Bypass domains
One per line — the domain and its subdomains go direct, skipping the proxy (and FakeIP, if on)
Sniff + hijack DNS
Needed for domain-based routing under TUN
Remote DNS
Resolves domains through the proxy
FakeIP
TUN only — smoother domain routing

04 Security

Checked live against what you've parsed and configured above.

Enforce certificate validation
Strip any insecure flag a link tries to set — refuses to trust an unverified TLS certificate
Fail closed
If every proxy is unreachable, connections fail — never silently falls back to direct
always on

05 Generated config

Targets sing-box 1.13+ syntax (rule-action based sniff / DNS hijack). 
// Parse at least one link above to generate a config.