n9'witch

N9 is a compact encrypted tunnel protocol with its own n9core packet path. It now understands provider traffic rules, DNS-aware routing, and direct UDP/TCP paths without hiding the tunnel state.

0.164 iOS TestFlight n9core routing macOS / iOS / Windows

The protocol is the product.

n9'witch is the public landing for N9: a small encrypted tunnel stack built around local profiles, short-lived sessions, and native VPN routes.

01

Profile first

A client profile stores a gateway address and access key locally. The profile is used to request a tunnel session, not to expose infrastructure on the public page.

02

Negotiated session

The control exchange validates access, returns session parameters, and tells the client which transport path to use for packet data.

03

n9core data path

IP packets from the system VPN interface are parsed, routed, wrapped into N9 frames, and protected with AES-128-GCM before they leave the device.

n9core

Own packet stack in every client.

The core sits between the native VPN interface and the encrypted N9 tunnel.

It resolves DNS inside the app, reads provider traffic rules, and decides whether a matched flow should use the tunnel or a direct UDP/TCP path.

DNS aware Direct or tunnel Fallback ready
Routing

Provider traffic rules

One client switch enables DNS rules, domain matches, and direct/tunnel decisions as a single routing model.

Direct

UDP and TCP paths

Matched flows can leave through n9core direct, with fallback to the encrypted tunnel when a path misbehaves.

Diagnostics

Readable tunnel state

Session, DNS, route, UDP, and TCP counters are exposed in the app so routing issues are visible.

How N9 works, briefly.

The client opens a control session, receives tunnel and routing parameters, creates the native VPN path, then lets n9core move packet frames over the selected transport. Keepalive, ping, transferred bytes, and routing state stay visible in the client UI.

1

Control

Authenticate the profile and receive fresh session instructions.

2

Route

Create a system VPN path through NetworkExtension or Wintun and load provider traffic rules.

3

Data

Encrypt tunneled packet frames and handle selected direct flows in n9core.

4

State

Track health signals without hiding what the tunnel is doing.

Native clients with the new n9core line.

macOS and Windows builds are available directly. iPhone distribution stays on TestFlight while the App Store listing is prepared.

macOS

n9'witch macOS 0.162

Desktop client package with the current N9 protocol and native packet tunnel support.

Download DMG
Windows

n9'witch Windows 0.162

Windows client bundle with the required Wintun runtime file and updated N9 core logic.

Download ZIP
iPhone

n9'witch iOS 0.164 (165)

TestFlight build with n9core routing, DNS settings, diagnostics, and provider traffic rules.

Request invite

iPhone client screens.

The TestFlight build includes profile import, one-tap connection, live tunnel state, subscription details, DNS settings, and provider routing controls.

n9'witch iPhone main screen with connection button
Main screen
n9'witch iPhone subscription screen
Subscription
n9'witch iPhone settings screen
Settings
n9'witch macOS client interface n9'witch iPhone client interface

n9core release line

The current clients share the same N9 profile model and are moving onto n9core: local profile storage, native VPN routes, encrypted tunnel frames, provider routing, and readable connection telemetry.

  • Saved N9 profiles with gateway and access key
  • One-tap connect and disconnect
  • Provider traffic rules with direct or tunnel decisions
  • DNS-aware routing controls in the iPhone client
  • Visible route state, ping, TCP/UDP counters, and traffic counters
SHA-256 checksums

N9 clients are available for macOS, Windows, and invited iPhone testers with n9core routing.

Get access

Privacy Policy

n9'witch clients store VPN profiles locally on your device. A profile contains the gateway address and access key you provide. The clients use this information to request an N9 tunnel session and create the system VPN route.

The clients do not sell personal data and do not include third-party advertising trackers. Network traffic passes through the N9 gateway selected in your profile. Server-side account, traffic, and session information may be processed by the gateway operator to provide the VPN service, enforce account limits, and diagnose connection issues.

For privacy questions, contact privacy@n9witch.com.

Support

For help with profiles, access keys, VPN permissions, downloads, TestFlight, or connection stability, email support@n9witch.com.

When reporting a connection problem, include your device model, OS version, client version, and whether the issue happened on Wi-Fi, Ethernet, or cellular.