_   _     _     _   _     _           _@_
 | | | |   / \   | \ | |   / \        .'@@@'.
 | |_| |  / _ \  |  \| |  / _ \      ( @@@@@ )
 |  _  | / ___ \ | |\  | / ___ \      '.@@@.'
 |_| |_|/_/   \_\|_| \_|/_/   \_\       \_|_/

Start your own proxy in minutes.

Hana starts a small server in your own AWS account, installs a VLESS + REALITY and Hysteria2 proxy on it, and hands you a ready-made config for your laptop and your phone.

One binary. No subscription, no account to make, and nobody else sitting in the middle of your traffic. When you are done, one command shuts the server down and releases everything it created.

source and other builds on GitHub

After you download

1. Make it runnable. A downloaded binary usually arrives without permission to run:

   $ chmod +x ~/Downloads/hana

2. macOS will refuse to open it the first time. It is not signed by an Apple developer account, so you get “Apple could not verify it is free of malware”. Open System Settings → Privacy & Security, scroll to the bottom, and press Open Anyway next to the message about Hana. You only do this once.

   On macOS 15 and later the old right-click → Open trick no longer works, so use Settings. From a terminal the equivalent is xattr -d com.apple.quarantine ~/Downloads/hana.

3. Double-click it. A terminal window opens with the Hana interface. Everything is menus and arrow keys.

You will need an AWS key

Hana runs the server in your own Amazon account. Nobody shares a password, and you pay only for what you use. If you do not have an account yet, sign up first — it takes a few minutes and needs a card.

Then press this once. It opens Amazon’s own console with a small recipe already filled in:

1. Press Create stack at the bottom.
2. Tick the box acknowledging it creates an IAM user, then confirm.
3. When it finishes, open the Outputs tab. Copy AccessKeyId and SecretAccessKey into Hana’s first screen.

The key it creates can do almost nothing except run and stop proxy servers. It cannot touch anything else in your account, cannot start anything larger than a mid-size machine, and cannot shut down a server it did not create. Keep the stack — deleting it revokes the key.

Already use the AWS CLI? Hana finds your existing profiles on its own, and picks up AWS_ACCESS_KEY_ID from your environment. The first screen tells you what it found. Full details in the AWS access key documentation.

Then

Pick a region — Hana suggests the closest one outside the country you are in — and choose Launch. A couple of minutes later it prints your links.

To put your own laptop through it, choose Connection on the menu — or run

$ hana connect <id>

Hana runs sing-box for you, installing it first if you do not have it, and opens a proxy on 127.0.0.1:1080 for your browser or your system network settings to use. It then tells you, by asking through the tunnel, which city your traffic now comes out in. It is not a VPN: nothing runs as root, no routing changes, and hana disconnect stops it. The connection keeps working after you quit.

For a phone, do not copy anything. Run

$ hana qr <id>

and scan the square with the phone’s camera, using any app that accepts vless:// links.