Oblivion is an unofficial Cloudflare WARP client with a GUI

Oblivion is a Cloudflare WARP client with a GUI

Oblivion is an unofficial Cloudflare WARP client with a user-friendly graphical interface. It provides secure, optimized internet access through an app that uses Cloudflare WARP technology. The project's tagline is "Internet, for all or none." Oblivion is built on Aether, a user-space Warp core written in Rust that speaks MASQUE and WireGuard. A notable design choice is that a single codebase runs on Android, Windows, and Linux. The app aims for a simple, intuitive interface available in Persian and English, and it is positioned as a community-driven project focused on making internet access broadly available to its users.

Two transports: MASQUE and WireGuard

Oblivion supports two transports for carrying traffic. The first is MASQUE, which runs over QUIC and HTTP/3 or over HTTP/2. The second is classic WireGuard. MASQUE is carried by quiche, Cloudflare's QUIC and HTTP/3 implementation, while the WireGuard transport uses BoringTun, a user-space WireGuard implementation in Rust. The Aether core implements MASQUE over QUIC and HTTP/2, WireGuard, endpoint discovery, obfuscation, and Cloudflare Zero Trust enrolment, and it exposes the tunnel as a local proxy. Offering both transports lets the app adapt to different network conditions and middleboxes without changing the user experience.

Zero Trust, traffic rules, and split tunnelling

Beyond the transports, Oblivion adds several control features. Zero Trust support lets a device connect as a managed device on an organization's Cloudflare account, signing in with an emailed code, a service token, or a token the user holds. Traffic rules let you block a destination outright or send it straight out and bypass the tunnel, which the README notes is what banking apps and domestic sites need. Split tunnelling on Android lets you choose which apps stay off the tunnel. Obfuscation profiles reshape the handshake for networks that fingerprint it. These features give fine-grained control over how and where traffic flows for each device.

Platform targets and how it runs

Oblivion targets Android, Windows, and Linux from one codebase. On Android the app runs as a VPN service and needs no root access. On Windows and Linux it exposes a local SOCKS5 proxy, and full device routing on those platforms requires administrator rights. Getting started is straightforward: download the build for your platform from the releases page and install it, then launch Oblivion and toggle the switch button to connect. The shared codebase means the same feature set is available across the three operating systems, with platform-specific differences only in how the tunnel is attached to the system.

Building Oblivion from source

Building Oblivion from source requires a few prerequisites. You need Flutter 3.44 or newer, Rust stable for the Aether core and the FFI bridge, Android NDK r27 or newer and JDK 17 for Android builds, and CMake, Ninja, Clang, and libgtk-3-dev for Linux builds. The Aether core and hev-socks5-tunnel live in their own repositories and are linked as submodules, so the source must be cloned recursively. If you already cloned without recursion, you can initialize the submodules afterward. Then fetch Flutter packages and build the APK, Linux, or Windows release as shown below.

git clone --recursive https://github.com/bepass-org/oblivion.git

git submodule update --init --recursive

flutter pub get

flutter build apk --release --split-per-abi
flutter build apk --release
flutter build linux --release
flutter build windows --release

The open-source components it builds on

Oblivion builds on several open-source components. Aether is the Warp core it is built on, licensed under the GNU AGPL v3. quiche, from Cloudflare, provides the QUIC and HTTP/3 stack that carries MASQUE. hev-socks5-tunnel is a tun-to-socks5 forwarder that, on Android, turns packets from the VPN interface into proxy connections the core carries. BoringTun supplies the user-space WireGuard implementation used for the WireGuard transport. Cloudflare WARP itself is the underlying technology for routing traffic. Each component keeps its own license, and the README points users to those licenses for their specific terms and conditions.

License and community

Oblivion is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License, often shortened to CC BY-NC-SA 4.0. That license allows non-commercial use with attribution, and any remix or build must be shared under the same license. The project welcomes community involvement through GitHub issues and pull requests, framing itself as community-driven. The CC BY-NC-SA terms mean the app is intended for non-commercial use rather than commercial products, and the README summarizes the attribution, non-commercial, and share-alike obligations for users. Because the work depends on components under their own licenses, the README reminds users to consult each upstream license for its exact terms before distributing a build.

Editorial conclusion

Oblivion is an unofficial Cloudflare WARP client with a graphical interface, built on the Rust-based Aether core and available on Android, Windows, and Linux from one codebase. It offers two transports, MASQUE over QUIC or HTTP/2 and classic WireGuard, plus Zero Trust enrolment, traffic rules, split tunnelling, and obfuscation. Building it needs Flutter, Rust, and platform-specific tools, with the source cloned recursively because of submodules. Released under CC BY-NC-SA 4.0, it is positioned as a non-commercial, community-driven networking client.

Frequently asked questions

Official sources

1. bepass-org/oblivion on GitHub
2. Issues
3. License: MIT
4. README
5. Releases