RedVPN for
Mac

A small command-line client for Apple silicon and Intel Macs. It runs without administrator rights and gives every program on the Mac a local proxy on 127.0.0.1:1080.

Install

curl -fsSL https://vpn.red/dist/cli/install-macos.sh | sh

One universal binary (macOS 11 or later), signed by Red Team LTD. It goes to /usr/local/bin (the installer asks for your password only if that folder is not yours) and the download quarantine flag is cleared. Remove it with sudo rm /usr/local/bin/redvpn.

Use

redvpn up                 # connect; prints the proxy address when ready
curl --socks5-hostname 127.0.0.1:1080 https://ip-geo.redvpn.workers.dev/   # prints: ok
redvpn status             # or: redvpn status --json
redvpn down

Point a browser, a terminal (ALL_PROXY=socks5h://127.0.0.1:1080) or any application that speaks SOCKS5 at the proxy. In Safari and Chrome that is System Settings, Network, your connection, Details, Proxies, SOCKS Proxy. Use the hostname variant (socks5h, --socks5-hostname) where there is a choice, so names are resolved on the far side. If port 1080 is already taken, redvpn up prints the port it used instead; --port picks one.

Your plan

A new Mac starts on the free plan, like a new phone. To use the plan you bought on vpn.red or in the app, sign in with the same e-mail address:

redvpn login              # e-mail, then the 6-digit code we send you
redvpn account            # plan, remaining free data, account code

Already have a device id from another install? redvpn login --cid <id> adopts it. The id and the session live in ~/.config/redvpn, readable by you only; redvpn logout drops the session.

Whole Mac (experimental)

sudo redvpn up --tun routes all traffic from the Mac through RedVPN instead of only what you point at the proxy. It needs administrator rights and a hev-socks5-tunnel binary on PATH (the same bridge the phones use; build it from its source with make, which needs the Xcode command line tools). It creates a utun interface (--tun-dev utunN picks the number). DNS keeps using your system resolvers in this mode. The proxy mode above is the supported one; treat this as a preview and read redvpn --help.

Verify the download

The installer checks the binary against /dist/cli/SHA256SUMS before it installs anything. To do it by hand:

curl -fsSLO https://vpn.red/dist/cli/redvpn-macos-universal
curl -fsSLO https://vpn.red/dist/cli/SHA256SUMS
grep ' redvpn-macos-universal$' SHA256SUMS | shasum -a 256 -c
codesign -dv --verbose=2 redvpn-macos-universal     # Authority: Developer ID Application: Red Team LTD
chmod +x redvpn-macos-universal
xattr -d com.apple.quarantine redvpn-macos-universal 2>/dev/null   # only needed if a browser downloaded it
sudo install -m 755 redvpn-macos-universal /usr/local/bin/redvpn

Version 0.2.0:

1986ce3287f968734c07be304246149696edda80992d72a92c5323365f249311  redvpn-macos-universal

Older releases stay at /dist/cli/<version>/.

Exit codes

0	ok (`status`: connected)
1	error (`status`: not connected)
2	usage
3	not entitled: free data used up, get Premium or sign in
4	could not reach any server from this network
5	already running
6	missing privilege or tool (`--tun`)