Open-source VPN core
MockMini
An original native VPN and packet stack for WLSAPlus on macOS — userspace IP forwarding, Shadowsocks AEAD, VMess, and WebSocket transport. Not derived from mihomo, Clash, sing-box, gVisor, or WireGuard. Under continuous open development.
What it is
MockMini provides the network path used by the WLSAPlus macOS client:
a bounded packet engine with a macOS utun adapter, plus
protocol framing for common proxy transports. The macOS app vendors
this tree; this site is the public home for the library.
Continuous development
MockMini is strengthened in ongoing passes: IPv4-first dial failover, clearer dial / WebSocket upgrade errors, Shadowsocks and VMess wire tests, and an honest packet-engine limit surface. Improvements land in the public GitHub tree first, then vendor into WLSAPlus for macOS.
Known limits
Bounded by design: 128 flows, MSS-only TCP options (no SACK / window scaling / timestamps), 32 KiB TCP reassembly and 256 KiB unacked remote data per flow. Not a drop-in Clash/mihomo replacement — original, small, and still growing.
License
Released under the Apache License 2.0. See the
repository LICENSE and NOTICE files for terms.
Footer credit: daniel.ye.