🚀 Professional script for managing secure and anti-filtering tunnels with GOST

Special focus on bypassing DPI, high stability in unstable networks, and support for diverse and combined protocols (Shadowsocks, KCP, obfs4, QUIC, gRPC, TLS, WebSocket and more than 30 ready-made combinations).

Strong anti-filtering | Weak networks | Streaming & Gaming

• Support for more than 40 combined profiles (KCP, QUIC, gRPC, Shadowsocks, obfs4, TLS, WebSocket, Multiplex, etc.)
• Beautiful interactive menu with color coding and easy protocol selection
• Automatic systemd service creation + Restart=always
• Smart Watchdog (via cron) for monitoring and automatic restart
• Automatic firewall (UFW / iptables)
• Live logs and service management (Start/Stop/Edit/Logs/Delete)
• Multi-Port Forwarding support (TCP + UDP simultaneously)
• Stealth TLS certificate (Stealth certificate similar to speedtest.net)
• Optimized for Iranian & foreign VPS – high stability under packet loss and filtering

Run on both servers (Iran & foreign) as root:

bash <(curl -fsSL https://raw.githubusercontent.com/behzadea12/Gost-Tunnel-Manager/main/Gost-Manager.sh)

After installation, run the command gost-manager to open the main menu.

1. From the main menu select [2] Configure Server Tunnel (Kharej)
2. Choose your desired protocol from the list (e.g. KCP-Fast3, SS-TCP, obfs4+TLS, etc.)
3. Enter Listen port (server listening port)
   • Default: 8443
   • Recommended: 443, 8443, 2083 or non-standard ports for better bypass
4. Confirm the generated password (Y) or enter manually (N)
5. The script will automatically:
   • Generate stealth TLS certificate (if required by protocol)
   • Open firewall (TCP/UDP)
   • Create, enable and start systemd service
   • Show public IP and final password (save it!)

1. From the main menu select [1] Configure Client Tunnel (Iran)

2. Choose the tunnel protocol

   • Must be exactly the same as the foreign server (e.g. if server is KCP-Fast3, choose the same here)

3. Enter foreign server information:

   • Foreign server IP
   • Tunnel port (same as server's Listen port)
   • Password (exactly the same one created on foreign server)

4. Enter Forward ports (ports you want to open on Iran side)

   • Example: 80,443,2083 (comma separated)

5. For each port choose protocol:

   • 1 = TCP only
   • 2 = UDP only
   • 3 = Both (TCP + UDP)
   • Script opens firewall according to selected protocol

6. The script will automatically:

   • Create and start client systemd service
   • Enable Watchdog (auto monitor & restart)
   • Show connection details (with protocol per port)

• List / Start / Stop / Restart / Logs / Edit / Delete
• View live logs: journalctl -u gost-client-... -f

Main Menu

Manage Tunnels / Service Management

Live Logs

If you encounter any issues, contact me on Telegram:

@behzad_developer

I am usually online and will assist you as soon as possible.

If this script was useful and you want development to continue:

• Give it a Star
• Fork and modify
• Share in Telegram groups or channels

Developer Telegram Channel: t.me/BehzadEa12
Support: t.me/behzad_developer

If you're using Gost-Manager and would like to support the development of this project, you can donate via:

Tron (TRC20): TFYnorJt5gvejLwR8XQdjep1krS9Zw8pz3
Ton: UQBXx5-u5Wzv58BUjIKtMGKG06Je0pGUO0sQ4HFh2Y_AOXgR

Tether
TRC20
TFYnorJt5gvejLwR8XQdjep1krS9Zw8pz3

TON
UQBXx5-u5Wzv58BUjIKtMGKG06Je0pGUO0sQ4HFh2Y_AOXgR

BEP20
0x06B904248da14E20D3d33eb6Ab7Be282AA9e6fBe

Tron (TRC20):
TFYnorJt5gvejLwR8XQdjep1krS9Zw8pz3

Any contribution, big or small, helps keep the project alive and motivates further development. 🙏

This project is released under the MIT license.
You are free to use, modify and distribute it (with attribution).

• GOST – Core engine of this tool https://github.com/ginuerzh/gost