Experimental MASQUE‑based VPN MVP (Android/Windows/server) — possible related project / future backend #1208

Hi,

I’ve published an experimental MASQUE‑based VPN MVP on GitHub: Android client, Windows client and server.

– MASQUE over QUIC + HTTP/3 CONNECT‑IP (RFC 9484)
– mutual TLS between client and server
– Windows client uses a Wintun adapter (full‑route mode, separate host route for the MASQUE server)
– Android client and server code are included for lab/testing setups
– the public repo only contains source code and sanitized example profiles (no production certificates, keys or VPS endpoints).

Repo: https://github.com/Next1971/masque-vpn-mvp

Since NekoBoxForAndroid is a universal proxy toolchain based on sing‑box and supports Xray‑core as a backend, I thought this MASQUE VPN MVP might be interesting as:
– a reference implementation for MASQUE / CONNECT‑IP behaviour, or
– a possible future backend / integration point if you ever explore MASQUE alongside existing protocols.

I’m happy to answer protocol‑level questions (MASQUE, CONNECT‑IP, routing, DNS) and adapt the code or documentation if you see a concrete way this could fit into your ecosystem.

Thanks in advance for taking a look, and thanks for your work on NekoBox.