L×Box: VPN & Proxy Client

L×Box is a high-performance proxy client with no compromises.

You choose the servers. You set the rules. You control the traffic. L×Box does exactly what you told it to.

12+ protocols, your Tailscale network, advanced routing, full DNS control, detour chains, per-app split tunneling and built-in diagnostics.

THE CORE IS OURS

L×Box runs on sing-box-lx, our own fork of sing-box, developed together with the app. On top of stock sing-box the core adds:

• AmneziaWG 3.1 — obfuscated WireGuard;

• XHTTP — Xray transport, including stream-one;

• VLESS + ML-KEM-768 — post-quantum protection;

• MASQUE — Cloudflare WARP as a full node and a chain link.

And it is tuned for real life on a phone:

• DNS groups — several resolvers with failover;

• smart urltest — pools, sticky selection, lazy health checks;

• load balancing — connections spread across the pool;

• self-healing of stuck connections;

• idle tunnel sleep — less memory, less battery;

• observability — DNS, connections and chains visible from the app.

12+ PROTOCOLS

VLESS, VMess, Trojan, Shadowsocks, Hysteria2, TUIC v5, NaiveProxy, AnyTLS, SSH, SOCKS, WireGuard, Tailscale, AmneziaWG 3.1, MASQUE over QUIC/HTTP-3.

Cloudflare WARP in one tap: simple registration right in the app, the private key is generated on your device and never leaves it — Cloudflare receives only the public half. WireGuard or MASQUE.

Import any familiar format: subscriptions and links, Base64, Xray arrays, WireGuard URI/INI, Amnezia vpn://, sing-box JSON configs, local files, plain text.

TAILSCALE WITHOUT A SECOND APP

Android runs one VPN at a time, so a Tailscale app and a proxy client cannot run together. In L×Box the Tailscale node runs inside the core: the phone joins your tailnet, and the rest of the traffic follows your rules.

• devices answer by name through MagicDNS;

• exit to the internet through an exit node of your tailnet;

• sign-in, device list and ping with the path in the app;