Profile first
A client profile stores a gateway address and access key locally. The profile is used to request a tunnel session, not to expose infrastructure on the public page.
N9 is a compact encrypted tunnel protocol with its own n9core packet path. It now understands provider traffic rules, DNS-aware routing, and direct UDP/TCP paths without hiding the tunnel state.
n9'witch is the public landing for N9: a small encrypted tunnel stack built around local profiles, short-lived sessions, and native VPN routes.
A client profile stores a gateway address and access key locally. The profile is used to request a tunnel session, not to expose infrastructure on the public page.
The control exchange validates access, returns session parameters, and tells the client which transport path to use for packet data.
IP packets from the system VPN interface are parsed, routed, wrapped into N9 frames, and protected with AES-128-GCM before they leave the device.
The core sits between the native VPN interface and the encrypted N9 tunnel.
It resolves DNS inside the app, reads provider traffic rules, and decides whether a matched flow should use the tunnel or a direct UDP/TCP path.
One client switch enables DNS rules, domain matches, and direct/tunnel decisions as a single routing model.
Matched flows can leave through n9core direct, with fallback to the encrypted tunnel when a path misbehaves.
Session, DNS, route, UDP, and TCP counters are exposed in the app so routing issues are visible.
The client opens a control session, receives tunnel and routing parameters, creates the native VPN path, then lets n9core move packet frames over the selected transport. Keepalive, ping, transferred bytes, and routing state stay visible in the client UI.
Authenticate the profile and receive fresh session instructions.
Create a system VPN path through NetworkExtension or Wintun and load provider traffic rules.
Encrypt tunneled packet frames and handle selected direct flows in n9core.
Track health signals without hiding what the tunnel is doing.
macOS and Windows builds are available directly. iPhone distribution stays on TestFlight while the App Store listing is prepared.
Desktop client package with the current N9 protocol and native packet tunnel support.
Windows client bundle with the required Wintun runtime file and updated N9 core logic.
TestFlight build with n9core routing, DNS settings, diagnostics, and provider traffic rules.
The TestFlight build includes profile import, one-tap connection, live tunnel state, subscription details, DNS settings, and provider routing controls.
The current clients share the same N9 profile model and are moving onto n9core: local profile storage, native VPN routes, encrypted tunnel frames, provider routing, and readable connection telemetry.
N9 clients are available for macOS, Windows, and invited iPhone testers with n9core routing.
Get accessn9'witch clients store VPN profiles locally on your device. A profile contains the gateway address and access key you provide. The clients use this information to request an N9 tunnel session and create the system VPN route.
The clients do not sell personal data and do not include third-party advertising trackers. Network traffic passes through the N9 gateway selected in your profile. Server-side account, traffic, and session information may be processed by the gateway operator to provide the VPN service, enforce account limits, and diagnose connection issues.
For privacy questions, contact privacy@n9witch.com.
For help with profiles, access keys, VPN permissions, downloads, TestFlight, or connection stability, email support@n9witch.com.
When reporting a connection problem, include your device model, OS version, client version, and whether the issue happened on Wi-Fi, Ethernet, or cellular.