🇷🇺 Русский | 🇬🇧 English

---

⚡ About Tachyon

Tachyon is a direct fork of Forkop by @ushan0v (formerly Podkop Plus). The project has evolved into an independent, high-performance network routing engine and DPI bypass framework designed specifically for OpenWrt (fully supporting OpenWrt 23.05, 24.10, 25.x, and SNAPSHOT builds).

I built upon the solid engineering foundations of the original Podkop by @itdoginfo and its evolution in Forkop by @ushan0v, introducing enterprise-grade resilience, multi-protocol routing, and dynamic system self-healing.

The core backend of Tachyon is written in ucode — OpenWrt's native, lightweight scripting language — delivering blazingly fast execution with minimal RAM footprint on embedded hardware.

---

🔥 Key Features

🛡️ Multi-Protocol Proxying & Local DPI Bypass

• sing-box Integration: Native support for modern proxy protocols including VLESS, VMess, Shadowsocks, Trojan, and WireGuard.
• Local DPI Bypass (Zapret v1 / Zapret v2 / ByeDPI):
  • Full built-in integration with Zapret v1 (nfqws), Zapret v2 (nfqws2), and ByeDPI (ciadpi) desync engines for flexible local packet manipulation directly on the router without third-party proxy servers.
• Multi-Dimensional Selective Routing:
  • By Domains, IP Subnets & Ports: Route only selected target traffic through proxy or DPI desync engines.
  • By Client Devices (MAC / IP): Per-device routing rules for individual home network clients (Smart TVs, phones, PCs).
  • By GeoIP & Countries: Filter and route traffic based on destination country (GeoIP / GeoSite) with full inclusion/exclusion list controls.
• Automated Subscription Updates: Background fetching and parsing of remote proxy subscription links.

🤖 Interactive Telegram Control Bot

A feature-rich control center right inside your messenger:

• Live Rule Management: View active routing lists and instantly add new domains or IP subnets on the fly.
• Instant Toggle: Enable or disable routing sections with a single button.
• Server Selection & Latency: Switch active proxy nodes with live RTT ping measurements.
• Device Access Control: View active DHCP clients and block/unblock internet access by MAC address.
• Network Diagnostics: Trigger connection tests directly from Telegram.

🩺 System Self-Healing — Tachyon Doctor

An intelligent diagnostic and repair engine available via CLI (tachyon doctor) or WebUI:

• Scans all core services (sing-box, zapret, zapret2, byedpi, dnsmasq, watchdog).
• Validates nftables chains and local DNS resolution health.
• Auto-Repair: Automatically rebuilds broken firewall rules and restarts crashed services without requiring a full router reboot.

⚡ Reliability, OpenWrt 25+ & Watchdog

• OpenWrt 25+ Full Compatibility: Full support for upcoming release branches and bleeding-edge OpenWrt toolchains.
• Seamless Hot-Reload: Rule updates and server switches apply softly without dropping active TCP connections (Discord calls, VoIP, and downloads remain uninterrupted).
• OOM Watchdog & Memory Tuning: Continuous RAM health monitoring. Dynamically adjusts process limits (GOMEMLIMIT) under memory pressure and sends Telegram alerts.
• MSS Clamping (MTU Fix): Automated resolution of MTU fragmentation and frozen TCP handshakes over tunnel interfaces.

🛡️ Watchdog — Protection & Self-Healing System

Watchdog is the heart of Tachyon's stability. It continuously monitors all critical services and automatically recovers from failures without rebooting the router. Version 1.2.57 introduces a comprehensive overhaul of the protection system:

Atomic Operations & Data Integrity:

• Atomic UCI Restore: All configuration changes are written through an intermediate backup — if a write fails, the system restores the previous working state.
• Backup Validation: Before restoring configuration, backups are checked for integrity and validity — corrupted backups are discarded.
• Atomic JSON Writes: sing-box generator, subscription cache, diagnostics, and runtime write configs via tmp + mv, preventing partial writes on crash.

Restart-Loop Protection:

• Proxy Cooldown: Maximum 3 proxy restarts per 10 minutes (safe_proxy_restart()). When the limit is exceeded, restarts are suspended and a notification is sent.
• Restart Lock: A PROXY_RESTART_LOCK mutex prevents concurrent sing-box restarts from different threads.
• DNS Loop Cooldown: When DNS query loops are detected, automatic switching is suspended for 5 minutes to allow stabilization.

Data Correctness:

• Empty Section Validation: Checks for actual data in domain, domain_suffix, ip_cidr sections — empty sections are not written to config.
• Correct Config Reading: Fixed a bug where the "network" section was read instead of CONFIG_NAME.
• nslookup Fix: BusyBox compatibility — correct nslookup -type=A and -port=53 operation.

Telegram Bot & Notifications:

• Notification Rate Limiting: Maximum 10 Telegram notifications per 5 minutes, preventing spam during mass failures.
• Atomic Telegram Config Restore: Bot config is restored via cp to tmp then mv — preventing corruption on failure.
• Persistent Paths: Backups and staging files stored in /etc/.tachyon/ — survive between reboots.

Firewall & nftables:

• Background Reload: Firewall reload runs in the background (reload_firewall &), not blocking the main watchdog thread.
• nftables Table Check: nftables operations only execute after confirming the table exists.
• Reload Deduplication: Eliminated duplicate reload_firewall calls from different modules.

Wan-Monitor & Routing:

• Wan-Monitor Notification Rate Limit: 60-second cooldown between WAN problem notifications.
• Merged Recovery: Unified function for restoring both WAN and gateway routes — prevents races during parallel recovery.
• Orphan Config Cleanup: Automatic removal of temporary configs left over from interrupted startups.

🖥️ Modern Web Interface (LuCI)

• Native integration into OpenWrt's LuCI dashboard.
• Real-time latency tracking, subscription manager, rule editor, and service controls.
• Dynamic Repository Links: The globe icon in each component card links to the installed variant's repository (extended → shtorm-7/sing-box-extended, lx → Leadaxe/sing-box-lx, stable → SagerNet/sing-box).
• Commit-Level Update Tracking: The updates interface shows "Update available for current release" when a newer commit is available within the same release tag (e.g., 1.2.57).

---

💻 Installation

Run the following single command in your router's SSH terminal:

sh <(wget -O - https://raw.githubusercontent.com/Dushnilin/tachyon/main/install.sh)

Note

Automatic Migration: Existing configurations from Forkop, Podkop Plus, or original Podkop are fully compatible. The installer will automatically migrate your settings to /etc/config/tachyon.

---

🤝 Upstream Projects & Credits

Tachyon stands on the shoulders of incredible open-source projects:

• 🍴 Forkop (ushan0v) — Direct parent repository (formerly Podkop Plus).
• 🐕 Podkop (itdoginfo) — The original project that inspired the architecture.
• 📦 sing-box — Universal proxy engine.
• 🚀 zapret (bol-van) — DPI desync framework (nfqws / nfqws2).
• 🌐 ByeDPI — Local SOCKS desync proxy.

---

💖 Support & Donations

If Tachyon powers your daily networking and helps keep your connection fast and secure, consider supporting ongoing development! ☕ 🧀 🌭

💳 Credit Cards / SBP / Tinkoff Pay:
👉 Support the project via CloudTips

---

Made with ❤️ for OpenWrt Community