MASQUE Panel — WARP Gateway

One IP or domain per line. Domains and IPs are used directly without resolving.

0 Endpoints

Format: hostname [label] (e.g. consumer-masque.cloudflareclient.com masque)

0 SNIs

Routing Engine Applies domestic Iran direct routing rules to bypass Iranian banking and local services.

Rule Provider Mirror Fast mirror for remote rule providers.

Transport Network HTTP/2 Extended CONNECT (:protocol = connect-ip).

Max Proxies Per Subscription Limits output node count in Mihomo profile.

Profile Title Name shown in Clash Meta profile list.

Auto-update Interval (Hours) Subscription update header sent to Clash client.

MTU Tunnel MTU (1280 recommended for mobile data).

DNS Resolvers (comma separated) Remote DNS servers inside proxy core.

Skip TLS Certificate Verification (skip-cert-verify)

Required when tunneling through clean IP/domain pools to prevent x509 public key mismatches.

Block Ads, Malware, and Phishing (Chocolate4U)

Ad and malware domains automatically routed to REJECT.

Inject Fake-IP DNS Profile

Resolves DNS inside Mihomo to prevent domestic DNS hijacking.

Run directly in Termux on Android or a Linux machine on MCI/Irancell to discover responsive WARP clean IPs:

$ curl -fsSL /scan.sh | bash -s -- consumer-masque.cloudflareclient.com 162.159.198 Copy

Unlock Panel.