Grafinya
Open self-hosted project

Grafinyayour own secure tunnel on your own server

Its own Grafinya core and protocol, a panel for your VPS and the grafinya iOS app. It protects your connection on public Wi‑Fi and keeps you in control of your data — your server, your keys, your traffic goes only through it.

  • Grafinya core
  • Kill Switch
  • .conf file only
  • AGPL-3.0 / MIT
“Your own server — peace of mind!”
Grafinya holding a key — the project mascot
Three parts

Core, panel and app

They work best together, but each part stands on its own: the panel issues Grafinya configs and the app accepts any compatible .conf.

Protocol

Grafinya core

A fast encrypted tunnel. Packets are padded with junk data and randomized headers, so the connection is harder to fingerprint and block.

Server

All-in-one panel

Web panel and VPN node in a single Docker container on your server. Clients, configs, QR codes, expiry dates, statistics. Started with one command: docker compose up -d.

Installation guide →
iPhone

grafinya app

Add the .conf file from your panel via “Choose file” and connect with one tap. Kill Switch keeps your real IP from leaking if the tunnel drops.

About the app →
Features

Security without the clutter

  • Protection on public Wi‑Fi

    In a café, airport or hotel, all device traffic goes into an encrypted tunnel to your server — nobody else on the network can see it.

  • Kill Switch

    If the tunnel drops, the iPhone blocks internet access until it is back. Your real IP won’t leak.

  • Traffic masking

    Built into the Grafinya core and on by default: masking parameters are randomly generated for each server on first start.

  • Configuration via .conf file only

    No accounts and no links from third-party sites: you download the file from your own panel and pick it in the app.

  • Your server, your rules

    We don’t run servers for users and never see your traffic: it flows directly between your device and your VPS.

  • We collect almost nothing

    The app sends only a random installation ID, errors and diagnostics. They are kept for 30 days and then deleted. Details

Getting started

Four steps to your own tunnel

  1. Get a VPS

    Any provider, Ubuntu 22.04/24.04 or Debian 12, 1 GB RAM or more.

  2. Install the panel

    git clone and docker compose up -d --build — see the guide.

  3. Create a client

    In the panel: “New client” → download the .conf file.

  4. Connect

    grafinya → “Choose file” → .conf → flip the switch.

“Open source, your own server and no surprises. Shall we?”