sing-box · client config generator

Paste a link.
Get a config that runs.

Drop in one or more vless://, vmess://, trojan://, ss://, hysteria2:// or tuic:// share links. Builds a sing-box 1.13+ client config entirely in your browser. Nothing is uploaded anywhere.

route—

01 Proxy links

One link per line. Each becomes an outbound in the generated config.

02 Inbounds

How local apps or the OS reach sing-box.

Local proxy

One port, handles SOCKS and HTTP simultaneously

Listen

Auth (optional)

TUN device

System-wide

Interface name

IPv4 address

IPv6 address

MTU

Stack

strict_route

Recommended on — closes a real DNS/traffic leak

03 Routing & DNS

How traffic picks a proxy, and how DNS is resolved.

Group type

Health-check URL

Bypass LAN / private IPs

RFC1918 etc. go direct

Bypass domains

One per line — routed direct, subdomains included

Sniff + hijack DNS

Needed for domain-based routing under TUN

Remote DNS

FakeIP

TUN only — optional, sniff+hijack already routes by domain

04 Security

Checked live against what's configured above.

Enforce certificate validation

Strips any insecure flag a link tries to set

Block ads & trackers (DNS)

SagerNet's official geosite-category-ads-all list, fetched at runtime

Block QUIC (force TCP fallback)

Rejects outbound UDP:443 — browsers heavily prefer QUIC/HTTP3, which can behave unpredictably under a tunnel; this forces the well-tested TCP+TLS fallback instead

05 Generated config

Targets sing-box 1.13+.

// Parse at least one link above to generate a config.

Cloudflare Pages: no build step. Drag this folder in under Direct Upload, or connect a repo with an empty build command and output directory /. All parsing runs client-side; nothing leaves your browser.

Troubleshooting a running config? Set "log":{"level":"debug"} in the downloaded JSON and check your sing-box client's log output — a real error line narrows things down far faster than a symptom alone.