Skip to content

Commit 13e6819

Browse files
SamNet-devSamNet-dev
committed
Shorten subdomain prefixes: t2/d2/s2/ds2 → t/d/s/ds
Cleaner, shorter subdomains for all tunnel types: t = Slipstream + SOCKS d = DNSTT + SOCKS s = Slipstream + SSH ds = DNSTT + SSH Updated across tunnel creation, slipnet URL generation, DNS record instructions, help text, architecture diagrams, summary output, and README (English + Farsi).
1 parent d360de0 commit 13e6819

2 files changed

Lines changed: 131 additions & 131 deletions

File tree

‎README.md‎

Lines changed: 55 additions & 55 deletions
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ DNS (Domain Name System) is the internet's phone book — every device on the pl
4242
**How it works:**
4343

4444
1. 📱 Your phone (running SlipNet) encodes internet traffic as DNS queries
45-
2. 🔒 These queries look like normal DNS lookups (e.g., `abc123.t2.yourdomain.com`)
45+
2. 🔒 These queries look like normal DNS lookups (e.g., `abc123.t.yourdomain.com`)
4646
3. 🌍 The queries travel through public DNS resolvers (Google `8.8.8.8`, Cloudflare `1.1.1.1`, etc.)
4747
4. 🖥️ Your server receives the queries, decodes the hidden data, and forwards it to the real internet
4848
5. ↩️ Responses travel back the same way, encoded inside DNS responses
@@ -67,26 +67,26 @@ Because the traffic looks like ordinary DNS resolution, it passes through filter
6767
v
6868
🔀 DNS Router (multiplexes port 53)
6969
|
70-
+---> t2.domain ---> Slipstream ---> microsocks (SOCKS5) ---> 🌐 Internet
70+
+---> t.domain ---> Slipstream ---> microsocks (SOCKS5) ---> 🌐 Internet
7171
| (QUIC + TLS)
7272
|
73-
+---> d2.domain ---> DNSTT --------> microsocks (SOCKS5) ---> 🌐 Internet
73+
+---> d.domain ---> DNSTT --------> microsocks (SOCKS5) ---> 🌐 Internet
7474
| (Noise + Curve25519)
7575
|
76-
+---> s2.domain ---> Slipstream ---> SSH Tunnel ------------> 🌐 Internet
76+
+---> s.domain ---> Slipstream ---> SSH Tunnel ------------> 🌐 Internet
7777
| (QUIC + TLS) (port forwarding)
7878
|
79-
+---> ds2.domain --> DNSTT --------> SSH Tunnel ------------> 🌐 Internet
79+
+---> ds.domain --> DNSTT --------> SSH Tunnel ------------> 🌐 Internet
8080
(Noise + Curve25519) (port forwarding)
8181
```
8282

8383
### 🔗 How DNS Delegation Works
8484

85-
When someone queries `t2.yourdomain.com`, the global DNS system follows this chain:
85+
When someone queries `t.yourdomain.com`, the global DNS system follows this chain:
8686

87-
1. Client asks its resolver: *"What is xyz.t2.yourdomain.com?"*
88-
2. Resolver asks Cloudflare (your domain's nameserver): *"What is t2.yourdomain.com?"*
89-
3. Cloudflare sees the NS record: *"For t2.yourdomain.com, ask ns.yourdomain.com"*
87+
1. Client asks its resolver: *"What is xyz.t.yourdomain.com?"*
88+
2. Resolver asks Cloudflare (your domain's nameserver): *"What is t.yourdomain.com?"*
89+
3. Cloudflare sees the NS record: *"For t.yourdomain.com, ask ns.yourdomain.com"*
9090
4. Cloudflare sees the A record: *"ns.yourdomain.com is at `<your server IP>`"*
9191
5. Resolver sends the query directly to your server on port 53
9292
6. Your server's DNS Router receives it and routes to the correct tunnel
@@ -110,10 +110,10 @@ When someone queries `t2.yourdomain.com`, the global DNS system follows this cha
110110

111111
| Tunnel | Subdomain | Transport | Backend | Use Case |
112112
|---|---|---|---|---|
113-
| ⚡ **slip1** | `t2.domain` | Slipstream (QUIC) | SOCKS | Fastest — recommended for most users |
114-
| 🔐 **dnstt1** | `d2.domain` | DNSTT (Noise) | SOCKS | Fallback if Slipstream is blocked |
115-
| 🔑 **slip-ssh** | `s2.domain` | Slipstream (QUIC) | SSH | When you need per-user authentication |
116-
| 🔑 **dnstt-ssh** | `ds2.domain` | DNSTT (Noise) | SSH | SSH fallback if Slipstream is blocked |
113+
| ⚡ **slip1** | `t.domain` | Slipstream (QUIC) | SOCKS | Fastest — recommended for most users |
114+
| 🔐 **dnstt1** | `d.domain` | DNSTT (Noise) | SOCKS | Fallback if Slipstream is blocked |
115+
| 🔑 **slip-ssh** | `s.domain` | Slipstream (QUIC) | SSH | When you need per-user authentication |
116+
| 🔑 **dnstt-ssh** | `ds.domain` | DNSTT (Noise) | SSH | SSH fallback if Slipstream is blocked |
117117

118118
> 🧦 **SOCKS backend:** Optionally secured with SOCKS5 username/password authentication. Without auth, anyone who knows the domain can connect.
119119
>
@@ -228,10 +228,10 @@ The wizard has **12 steps**. Here's what each one does:
228228

229229
- Asks for DNSTT MTU size (default 1232, range 512–1400) — useful for networks with packet size restrictions
230230
- Creates 4 tunnels using `dnstm tunnel add`:
231-
- `slip1` — Slipstream + SOCKS on `t2.yourdomain.com`
232-
- `dnstt1` — DNSTT + SOCKS on `d2.yourdomain.com` (with configurable MTU)
233-
- `slip-ssh` — Slipstream + SSH on `s2.yourdomain.com`
234-
- `dnstt-ssh` — DNSTT + SSH on `ds2.yourdomain.com` (with configurable MTU)
231+
- `slip1` — Slipstream + SOCKS on `t.yourdomain.com`
232+
- `dnstt1` — DNSTT + SOCKS on `d.yourdomain.com` (with configurable MTU)
233+
- `slip-ssh` — Slipstream + SSH on `s.yourdomain.com`
234+
- `dnstt-ssh` — DNSTT + SSH on `ds.yourdomain.com` (with configurable MTU)
235235
- Extracts and displays the DNSTT public key (needed for client config)
236236
- Handles "already exists" gracefully on re-runs
237237
</details>
@@ -260,7 +260,7 @@ The wizard has **12 steps**. Here's what each one does:
260260
<details>
261261
<summary><b>Step 10 — 👤 SSH Tunnel User</b></summary>
262262

263-
- **Required for SSH tunnels (s2/ds2) to work** — skipping means SSH tunnels won't function
263+
- **Required for SSH tunnels (s/ds) to work** — skipping means SSH tunnels won't function
264264
- Downloads `sshtun-user` tool if not installed
265265
- Configures SSH with security restrictions
266266
- Creates a restricted user that can only do SSH port forwarding
@@ -317,12 +317,12 @@ Create these records in your **Cloudflare** dashboard:
317317

318318
| Type | Name | Target |
319319
|---|---|---|
320-
| `NS` | `t2` | `ns.yourdomain.com` |
321-
| `NS` | `d2` | `ns.yourdomain.com` |
322-
| `NS` | `s2` | `ns.yourdomain.com` |
323-
| `NS` | `ds2` | `ns.yourdomain.com` |
320+
| `NS` | `t` | `ns.yourdomain.com` |
321+
| `NS` | `d` | `ns.yourdomain.com` |
322+
| `NS` | `s` | `ns.yourdomain.com` |
323+
| `NS` | `ds` | `ns.yourdomain.com` |
324324

325-
> ☝️ These tell the internet: *"For queries about t2/d2/s2/ds2.yourdomain.com, ask ns.yourdomain.com (your server)."*
325+
> ☝️ These tell the internet: *"For queries about t/d/s/ds.yourdomain.com, ask ns.yourdomain.com (your server)."*
326326
327327
### ⚠️ Common Mistakes
328328

@@ -412,29 +412,29 @@ Each topic gives deep explanations of how things work, why each step is needed,
412412

413413
| Setting | Value |
414414
|---|---|
415-
| 🌐 **Domain** | Your tunnel subdomain (e.g. `t2.yourdomain.com`) |
415+
| 🌐 **Domain** | Your tunnel subdomain (e.g. `t.yourdomain.com`) |
416416
| 🔍 **DNS Resolver** | Any public resolver (see below) |
417-
| 🔄 **Transport** | Slipstream (for t2/s2) or DNSTT (for d2) |
418-
| 🔑 **DNSTT Public Key** | The key shown in Step 7 (only for d2 tunnel) |
417+
| 🔄 **Transport** | Slipstream (for t/s) or DNSTT (for d) |
418+
| 🔑 **DNSTT Public Key** | The key shown in Step 7 (only for d tunnel) |
419419

420420
### 🍎 iOS — HTTP Injector
421421

422-
**HTTP Injector** supports DNSTT tunnels (the `d2` subdomain). Slipstream is not supported on iOS.
422+
**HTTP Injector** supports DNSTT tunnels (the `d` subdomain). Slipstream is not supported on iOS.
423423

424424
📥 **Download:** [App Store](https://apps.apple.com/us/app/http-injector/id1659992827)
425425

426426
| Setting | Value |
427427
|---|---|
428428
| 🔄 **Protocol** | DNS Tunnel (DNSTT) |
429-
| 🌐 **Domain** | `d2.yourdomain.com` |
429+
| 🌐 **Domain** | `d.yourdomain.com` |
430430
| 🔍 **DNS Resolver** | Any public resolver (see below) |
431431
| 🔑 **DNSTT Public Key** | The key shown in Step 7 |
432432

433-
> ⚠️ iOS users can only use the **DNSTT tunnel** (`d2` subdomain). Slipstream tunnels (`t2`/`s2`) are Android-only via SlipNet.
433+
> ⚠️ iOS users can only use the **DNSTT tunnel** (`d` subdomain). Slipstream tunnels (`t`/`s`) are Android-only via SlipNet.
434434
435435
### 📊 Platform Support
436436

437-
| Platform | App | Slipstream (t2/s2) | DNSTT (d2) |
437+
| Platform | App | Slipstream (t/s) | DNSTT (d) |
438438
|---|---|---|---|
439439
| 🤖 Android | SlipNet | ✅ | ✅ |
440440
| 🍎 iOS | HTTP Injector | ❌ | ✅ |
@@ -543,15 +543,15 @@ This opens an interactive menu:
543543
| **4** | **Delete user** — remove a user (with confirmation) |
544544
| **0** | **Exit** |
545545

546-
> **What are SSH tunnel users?** These are restricted system users that can only create SSH tunnels (SOCKS proxy, port forwarding) — they have no shell access and cannot run commands on your server. They're required for the SSH-based tunnels (`s2` and `ds2` subdomains).
546+
> **What are SSH tunnel users?** These are restricted system users that can only create SSH tunnels (SOCKS proxy, port forwarding) — they have no shell access and cannot run commands on your server. They're required for the SSH-based tunnels (`s` and `ds` subdomains).
547547
548548
If `sshtun-user` is not installed, the script will automatically download and configure it on first run.
549549

550550
---
551551

552552
## 🔐 SOCKS Proxy Authentication
553553

554-
During setup (Step 9), the wizard asks whether to enable SOCKS5 authentication on the microsocks proxy. This controls access to the **SOCKS tunnels** (`t2` and `d2` subdomains).
554+
During setup (Step 9), the wizard asks whether to enable SOCKS5 authentication on the microsocks proxy. This controls access to the **SOCKS tunnels** (`t` and `d` subdomains).
555555

556556
### With Authentication (Recommended)
557557

@@ -679,14 +679,14 @@ curl --socks5 127.0.0.1:<MICROSOCKS_PORT> https://api.ipify.org
679679
- Make sure the A record proxy is **OFF** (grey cloud ⚪, not orange 🟠)
680680
- NS record values must be `ns.yourdomain.com` (not an IP address)
681681
- Wait 5–10 minutes for DNS propagation after creating records
682-
- Test with: `dig NS t2.yourdomain.com` — should show `ns.yourdomain.com`
682+
- Test with: `dig NS t.yourdomain.com` — should show `ns.yourdomain.com`
683683
</details>
684684

685685
<details>
686686
<summary><b>🔴 SlipNet can't connect</b></summary>
687687

688688
- Try different DNS resolvers (`8.8.8.8`, `1.1.1.1`, `9.9.9.9`)
689-
- Make sure you selected the correct transport (Slipstream for t2/s2, DNSTT for d2)
689+
- Make sure you selected the correct transport (Slipstream for t/s, DNSTT for d)
690690
- For DNSTT, verify the public key matches the one shown during setup
691691
- Check that port 53 UDP and TCP are open in your hosting provider's firewall panel
692692
</details>
@@ -781,10 +781,10 @@ Made By **SamNet Technologies** — Saman
781781
v
782782
🔀 DNS Router (مالتی‌پلکسر)
783783
|
784-
+---> t2.domain ---> Slipstream ---> microsocks (SOCKS5) ---> 🌐 اینترنت
785-
+---> d2.domain ---> DNSTT --------> microsocks (SOCKS5) ---> 🌐 اینترنت
786-
+---> s2.domain ---> Slip+SSH -----> تانل SSH --------------> 🌐 اینترنت
787-
+---> ds2.domain --> DNSTT+SSH ----> تانل SSH --------------> 🌐 اینترنت
784+
+---> t.domain ---> Slipstream ---> microsocks (SOCKS5) ---> 🌐 اینترنت
785+
+---> d.domain ---> DNSTT --------> microsocks (SOCKS5) ---> 🌐 اینترنت
786+
+---> s.domain ---> Slip+SSH -----> تانل SSH --------------> 🌐 اینترنت
787+
+---> ds.domain --> DNSTT+SSH ----> تانل SSH --------------> 🌐 اینترنت
788788
```
789789

790790
<div dir="rtl">
@@ -870,10 +870,10 @@ sudo bash dnstm-setup.sh --users
870870

871871
| Type | Name | Target |
872872
|---|---|---|
873-
| `NS` | `t2` | `ns.yourdomain.com` |
874-
| `NS` | `d2` | `ns.yourdomain.com` |
875-
| `NS` | `s2` | `ns.yourdomain.com` |
876-
| `NS` | `ds2` | `ns.yourdomain.com` |
873+
| `NS` | `t` | `ns.yourdomain.com` |
874+
| `NS` | `d` | `ns.yourdomain.com` |
875+
| `NS` | `s` | `ns.yourdomain.com` |
876+
| `NS` | `ds` | `ns.yourdomain.com` |
877877

878878
### ⚠️ اشتباهات رایج
879879

@@ -909,10 +909,10 @@ sudo bash dnstm-setup.sh --users
909909

910910
| تانل | ساب‌دامین | پروتکل | سرعت | توضیح |
911911
|---|---|---|---|---|
912-
| ⚡ **Slipstream + SOCKS** | `t2` | QUIC + TLS | ~63 KB/s | سریع‌ترین — پیشنهادی برای اکثر کاربران |
913-
| 🔐 **DNSTT + SOCKS** | `d2` | Noise + Curve25519 | ~42 KB/s | جایگزین اگر Slipstream مسدود شود |
914-
| 🔑 **Slipstream + SSH** | `s2` | QUIC + TLS + SSH | ~60 KB/s | نیاز به نام کاربری و رمز عبور |
915-
| 🔑 **DNSTT + SSH** | `ds2` | Noise + Curve25519 + SSH | ~40 KB/s | جایگزین SSH اگر Slipstream مسدود شود |
912+
| ⚡ **Slipstream + SOCKS** | `t` | QUIC + TLS | ~63 KB/s | سریع‌ترین — پیشنهادی برای اکثر کاربران |
913+
| 🔐 **DNSTT + SOCKS** | `d` | Noise + Curve25519 | ~42 KB/s | جایگزین اگر Slipstream مسدود شود |
914+
| 🔑 **Slipstream + SSH** | `s` | QUIC + TLS + SSH | ~60 KB/s | نیاز به نام کاربری و رمز عبور |
915+
| 🔑 **DNSTT + SSH** | `ds` | Noise + Curve25519 + SSH | ~40 KB/s | جایگزین SSH اگر Slipstream مسدود شود |
916916

917917
> 🧦 **بک‌اند SOCKS:** امکان فعال‌سازی احراز هویت SOCKS5 با نام کاربری و رمز عبور. بدون احراز هویت، هر کسی که دامنه را بداند می‌تواند وصل شود.
918918
>
@@ -930,29 +930,29 @@ sudo bash dnstm-setup.sh --users
930930

931931
| تنظیم | مقدار |
932932
|---|---|
933-
| 🌐 **Domain** | ساب‌دامین تانل (مثلاً `t2.yourdomain.com`) |
933+
| 🌐 **Domain** | ساب‌دامین تانل (مثلاً `t.yourdomain.com`) |
934934
| 🔍 **DNS Resolver** | یکی از resolverهای عمومی (جدول زیر) |
935-
| 🔄 **Transport** | Slipstream (برای t2/s2) یا DNSTT (برای d2) |
936-
| 🔑 **DNSTT Public Key** | کلید نمایش داده شده در مرحله ۷ (فقط برای تانل d2) |
935+
| 🔄 **Transport** | Slipstream (برای t/s) یا DNSTT (برای d) |
936+
| 🔑 **DNSTT Public Key** | کلید نمایش داده شده در مرحله ۷ (فقط برای تانل d) |
937937

938938
### 🍎 iOS — HTTP Injector
939939

940-
**HTTP Injector** فقط از تانل DNSTT (ساب‌دامین `d2`) پشتیبانی می‌کند. Slipstream روی iOS پشتیبانی نمی‌شود.
940+
**HTTP Injector** فقط از تانل DNSTT (ساب‌دامین `d`) پشتیبانی می‌کند. Slipstream روی iOS پشتیبانی نمی‌شود.
941941

942942
📥 **دانلود:** [App Store](https://apps.apple.com/us/app/http-injector/id1659992827)
943943

944944
| تنظیم | مقدار |
945945
|---|---|
946946
| 🔄 **Protocol** | DNS Tunnel (DNSTT) |
947-
| 🌐 **Domain** | `d2.yourdomain.com` |
947+
| 🌐 **Domain** | `d.yourdomain.com` |
948948
| 🔍 **DNS Resolver** | یکی از resolverهای عمومی (جدول زیر) |
949949
| 🔑 **DNSTT Public Key** | کلید نمایش داده شده در مرحله ۷ |
950950

951-
> ⚠️ کاربران iOS فقط می‌توانند از **تانل DNSTT** (ساب‌دامین `d2`) استفاده کنند. تانل‌های Slipstream (`t2`/`s2`) فقط روی اندروید با SlipNet کار می‌کنند.
951+
> ⚠️ کاربران iOS فقط می‌توانند از **تانل DNSTT** (ساب‌دامین `d`) استفاده کنند. تانل‌های Slipstream (`t`/`s`) فقط روی اندروید با SlipNet کار می‌کنند.
952952
953953
### 📊 پشتیبانی پلتفرم‌ها
954954

955-
| پلتفرم | اپلیکیشن | Slipstream (t2/s2) | DNSTT (d2) |
955+
| پلتفرم | اپلیکیشن | Slipstream (t/s) | DNSTT (d) |
956956
|---|---|---|---|
957957
| 🤖 اندروید | SlipNet | ✅ | ✅ |
958958
| 🍎 iOS | HTTP Injector | ❌ | ✅ |
@@ -1068,7 +1068,7 @@ sudo bash dnstm-setup.sh --users
10681068
| **4** | **حذف کاربر** — حذف کاربر (با تأیید) |
10691069
| **0** | **خروج** |
10701070

1071-
> **کاربران تانل SSH چی هستن؟** کاربران محدود سیستمی هستن که فقط می‌تونن تانل SSH بزنن (پروکسی SOCKS، فوروارد پورت) — دسترسی shell ندارن و نمی‌تونن روی سرور شما دستوری اجرا کنن. برای تانل‌های SSH (ساب‌دامین‌های `s2` و `ds2`) لازمن.
1071+
> **کاربران تانل SSH چی هستن؟** کاربران محدود سیستمی هستن که فقط می‌تونن تانل SSH بزنن (پروکسی SOCKS، فوروارد پورت) — دسترسی shell ندارن و نمی‌تونن روی سرور شما دستوری اجرا کنن. برای تانل‌های SSH (ساب‌دامین‌های `s` و `ds`) لازمن.
10721072
10731073
اگر `sshtun-user` نصب نباشد، اسکریپت خودکار آن را دانلود و تنظیم می‌کند.
10741074

@@ -1106,7 +1106,7 @@ dnstm router logs
11061106

11071107
### 🔴 SlipNet وصل نمی‌شود
11081108
- DNS resolverهای مختلف را امتحان کنید
1109-
- مطمئن شوید Transport صحیح انتخاب شده (Slipstream برای t2/s2، DNSTT برای d2)
1109+
- مطمئن شوید Transport صحیح انتخاب شده (Slipstream برای t/s، DNSTT برای d)
11101110
- برای DNSTT، کلید عمومی را بررسی کنید
11111111
- پورت 53 (UDP و TCP) باید در فایروال هاستینگ باز باشد
11121112

0 commit comments

Comments
 (0)