# usque

> usque is a self-hosted, open-source reimplementation of Cloudflare WARP using MASQUE (RFC 9484) for secure tunnels as SOCKS5/HTTP proxies or TUN interfaces.

- **Category:** VPN
- **Licence:** MIT
- **Latest version:** v4.2.1
- **Open source:** oss
- **Languages:** Go
- **Platforms:** Docker, Linux
- **Tags:** Privacy, Proxy, VPN, Tunnel, Socks5, Quic, Http Proxy, Vpn Client, Cloudflare, Warp, Censorship circumvention, Tun, Masque, Connect IP

## Description

usque is an unofficial, open-source CLI tool that reimplements Cloudflare WARP's MASQUE mode using the Connect-IP protocol (RFC 9484). It lets users register a WARP account and then run the tunnel in several modes: a native TUN device (Linux/Windows), SOCKS5 proxy, HTTP proxy with CONNECT support, lighter L4 TCP-only variants of both proxies, and a port-forwarding mode for WARP-to-WARP device communication. It supports both personal WARP and Cloudflare ZeroTrust (with manual token setup), offers connect/disconnect hooks for route management, and can fall back to TCP/HTTP/2 when QUIC is blocked. The program is written in Go, distributed as static binaries for Linux, Windows, macOS, Android, and iOS, and can also be built via the provided Dockerfile. Only the Linux amd64 binary is tested by the author. Configuration is stored in a JSON file containing keys, endpoints, and assigned IP addresses.

## Links

- [Homepage](https://github.com/diniboy1123/usque)
- [GitHub Repository](https://github.com/Diniboy1123/usque)
- [Wiki (L4 Proxy Mode)](https://github.com/Diniboy1123/usque/wiki/L4-proxy-mode)
- [Wiki (HTTP/2 Support)](https://github.com/Diniboy1123/usque/wiki/HTTP-2-support)
- [Releases](https://github.com/Diniboy1123/usque/releases)

---
Source: https://selfhost.directory/project/usque