OneBox is a cross-platform desktop client built with Tauri, React, Rust, and the sing-box network core.
It is designed for people who want a clean daily-driver client instead of a configuration workshop: add a subscription, pick a route mode, start the service, and let the app handle the platform details.
Note
OneBox is not a playground for wish-list driven sing-box customization. Requests for full manual control, endless knobs, or niche behavior are out of scope, and related PRs are not guaranteed to be accepted. If you need that workflow, fork the project, build your own copy, and maintain it yourself.
| Home | Configuration | Settings |
|---|---|---|
![]() |
![]() |
![]() |
| Capability | What OneBox does |
|---|---|
| Subscription-first workflow | Imports remote configuration links, tracks traffic metadata, refreshes subscriptions, and supports deep-link based setup. |
| Route modes | Provides mixed and TUN modes with rule/global templates maintained for supported sing-box versions. |
| System integration | Includes tray controls, system proxy helpers, autostart, updater flow, and platform-specific service handling. |
| Privacy-conscious storage | Stores sensitive values through system-backed mechanisms instead of treating secrets as plain UI state. |
| Developer visibility | Ships log, generated config, and config-template views for debugging without exposing casual users to noise. |
| Built on Rust and Tauri | Keeps the desktop shell lightweight while delegating network execution to the sing-box core. |
Warning
OneBox applies multiple security and privacy controls, but vulnerabilities in the underlying network core are handled by the upstream sing-box project. Track upstream advisories when assessing operational risk.
| Tier | Platform | Status |
|---|---|---|
| Tier 1: Official | macOS | Production-ready and maintained by the core team with priority fixes. |
| Tier 2: Community | Windows, Ubuntu | Stable, with fixes and feature parity depending on community maintenance. |
| Tier 3: Experimental | Linux | Beta quality. Expect incomplete behavior and use at your own risk. |
Get the latest build from the GitHub Releases page, or install the mobile companion from the store badges above.
The macOS build is notarized by Apple, so it can be installed without manual security overrides.
Install dependencies:
bun installStart the desktop frontend during development:
bun run devBuild the web bundle:
bun run buildRun the frontend test suite:
bun run testRun Rust tests with captured output shown:
cargo test -- --nocapture- Config templates are synchronized before
devandbuildthroughscripts/sync-templates.ts. - The Windows TUN service is built through
scripts/build-tun-service.ts. - Platform-specific Tauri settings live under
src-tauri/tauri.*.conf.json. - Human-facing protocol notes are available under
docs/spec/zh/.
This software is licensed under the Apache License 2.0.
The OneBox name, logos, icons, and other brand assets are proprietary assets of OneOh Cloud LLC. The Apache License does not grant permission to use those branding elements in derivative works. Any use of these assets or the product name must follow the NOTICE policy.




