vpnem: VPN infrastructure with load-balanced multi-protocol nodesHEADmain

- Multi-protocol VPS nodes (VLESS-REALITY + Hysteria2 + SOCKS5)
- Smart load balancing via recommendation API
- Windows/Linux client (Go + Wails + sing-box)
- Server API with RealIP detection and connection tracking
- Auto-deployment via vpnui control plane
- Silent Windows installer with UAC elevation
- Load-based server recommendation (no sticky sessions)
- Best Server one-click connection workflow

5 files changed, 332 insertions, 0 deletions

diff --git a/data/routing-policy.json b/data/routing-policy.json
new file mode 100644
index 0000000..f3b7649
--- /dev/null
+++ b/data/routing-policy.json
@@ -0,0 +1,234 @@
+{
+  "version": "2026-04-04",
+  "always_direct_processes": [
+    "QTranslate.exe",
+    "aspia_host.exe",
+    "aspia_host_service.exe",
+    "aspia_desktop_agent.exe",
+    "Performer Application v5.x.exe",
+    "chromium.exe",
+    "\u042f\u043d\u0434\u0435\u043a\u0441 \u041c\u0443\u0437\u044b\u043a\u0430.exe"
+  ],
+  "prefer_direct_processes": [
+    "obs64.exe"
+  ],
+  "proxyable_browser_processes": [
+    "chrome.exe",
+    "firefox.exe",
+    "msedgewebview2.exe"
+  ],
+  "lovense_process_regex": [
+    "(?i).*lovense.*"
+  ],
+  "static_bypass_ips": [
+    "5.180.97.200/32",
+    "5.180.97.199/32",
+    "5.180.97.198/32",
+    "5.180.97.197/32",
+    "5.180.97.181/32",
+    "84.252.100.166/32",
+    "84.252.100.165/32",
+    "84.252.100.161/32",
+    "84.252.100.117/32",
+    "84.252.100.103/32",
+    "109.107.175.41/32",
+    "146.103.104.48/32",
+    "77.105.138.163/32",
+    "91.84.113.225/32",
+    "146.103.98.171/32",
+    "94.103.88.252/32",
+    "178.20.44.93/32",
+    "89.124.70.47/32"
+  ],
+  "reserved_cidrs": [
+    "100.64.0.0/10",
+    "192.0.0.0/24",
+    "192.0.2.0/24",
+    "198.51.100.0/24",
+    "203.0.113.0/24",
+    "240.0.0.0/4",
+    "255.255.255.255/32"
+  ],
+  "local_domain_suffixes": [
+    "local",
+    "localhost",
+    "lan",
+    "internal",
+    "home.arpa",
+    "corp",
+    "intranet",
+    "test",
+    "invalid",
+    "example",
+    "home",
+    "localdomain"
+  ],
+  "windows_ncsi_domains": [
+    "msftconnecttest.com",
+    "msftncsi.com"
+  ],
+  "infra_bypass_domains": [
+    "em-sysadmin.xyz"
+  ],
+  "forced_proxy_ips": [
+    "65.21.33.248/32",
+    "91.132.135.38/32"
+  ],
+  "telegram_processes": [
+    "Telegram.exe"
+  ],
+  "telegram_process_regex": [
+    "(?i).*telegram.*\\\\telegram\\.exe$"
+  ],
+  "telegram_domains": [
+    "telegram.org",
+    "telegram.me",
+    "t.me",
+    "telegra.ph",
+    "telegram.dog"
+  ],
+  "telegram_domain_regex": [
+    ".*telegram.*",
+    ".*t\\.me.*"
+  ],
+  "telegram_ips": [
+    "91.108.56.0/22",
+    "91.108.4.0/22",
+    "91.108.8.0/22",
+    "91.108.16.0/22",
+    "91.108.12.0/22",
+    "149.154.160.0/20",
+    "91.105.192.0/23",
+    "91.108.20.0/22",
+    "185.76.151.0/24"
+  ],
+  "blocked_domains": [
+    "telegram.org",
+    "t.me",
+    "telegram.me",
+    "telegra.ph",
+    "telegram.dog",
+    "web.telegram.org",
+    "discord.com",
+    "discord.gg",
+    "discordapp.com",
+    "discordapp.net",
+    "instagram.com",
+    "cdninstagram.com",
+    "ig.me",
+    "igcdn.com",
+    "facebook.com",
+    "fb.com",
+    "fbcdn.net",
+    "fbsbx.com",
+    "fb.me",
+    "whatsapp.com",
+    "whatsapp.net",
+    "twitter.com",
+    "x.com",
+    "twimg.com",
+    "t.co",
+    "openai.com",
+    "chatgpt.com",
+    "oaistatic.com",
+    "oaiusercontent.com",
+    "claude.ai",
+    "anthropic.com",
+    "youtube.com",
+    "googlevideo.com",
+    "youtu.be",
+    "ggpht.com",
+    "ytimg.com",
+    "gstatic.com",
+    "doubleclick.net",
+    "googleadservices.com",
+    "stripchat.com",
+    "stripchat.global",
+    "ststandard.com",
+    "strpssts-ana.com",
+    "strpst.com",
+    "striiiipst.com",
+    "chaturbate.com",
+    "highwebmedia.com",
+    "cb.dev",
+    "camsoda.com",
+    "cam4.com",
+    "cam101.com",
+    "bongamodels.com",
+    "flirt4free.com",
+    "privatecams.com",
+    "streamray.com",
+    "cams.com",
+    "homelivesex.com",
+    "skyprivate.com",
+    "mywebcamroom.com",
+    "livemediahost.com",
+    "xcdnpro.com",
+    "mmcdn.com",
+    "vscdns.com",
+    "bgicdn.com",
+    "bgmicdn.com",
+    "doppiocdn.com",
+    "doppiocdn.net",
+    "doppiostreams.com",
+    "fanclubs.tech",
+    "my.club",
+    "chapturist.com",
+    "moengage.com",
+    "amplitude.com",
+    "dwin1.com",
+    "eizzih.com",
+    "loo3laej.com",
+    "iesnare.com",
+    "hytto.com",
+    "zendesk.com",
+    "lovense.com",
+    "lovense-api.com",
+    "lovense.club",
+    "bitrix24.ru",
+    "bitrix24.com",
+    "cloudflare.com",
+    "viber.com",
+    "linkedin.com",
+    "spotify.com",
+    "ntc.party",
+    "ipify.org",
+    "rutracker.org",
+    "rutracker.net",
+    "rutracker.me",
+    "4pda.to",
+    "kinozal.tv",
+    "nnmclub.to",
+    "protonmail.com",
+    "proton.me",
+    "tutanota.com",
+    "medium.com",
+    "archive.org",
+    "soundcloud.com",
+    "twitch.tv",
+    "ifconfig.me",
+    "ifconfig.co",
+    "icanhazip.com",
+    "ipinfo.io",
+    "em-mail.ru"
+  ],
+  "proxy_dns_domains": [
+    "lovense.com",
+    "lovense-api.com",
+    "lovense.club",
+    "anthropic.com",
+    "igcdn.com",
+    "fbsbx.com",
+    "ifconfig.me",
+    "ifconfig.co",
+    "icanhazip.com",
+    "ipinfo.io",
+    "ipify.org"
+  ],
+  "ip_check_domains": [
+    "ifconfig.me",
+    "ifconfig.co",
+    "icanhazip.com",
+    "ipinfo.io"
+  ]
+}
diff --git a/data/rulesets.json b/data/rulesets.json
new file mode 100644
index 0000000..58c72ca
--- /dev/null
+++ b/data/rulesets.json
@@ -0,0 +1,52 @@
+{
+  "rule_sets": [
+    {
+      "tag": "refilter-domains",
+      "description": "Заблокированные домены РФ (Re-filter)",
+      "url": "https://vpn.em-sysadmin.xyz/rules/refilter-domains.srs",
+      "format": "binary",
+      "type": "domain",
+      "optional": false
+    },
+    {
+      "tag": "refilter-ip",
+      "description": "Заблокированные IP РФ (Re-filter)",
+      "url": "https://vpn.em-sysadmin.xyz/rules/refilter-ip.srs",
+      "format": "binary",
+      "type": "ip",
+      "optional": false
+    },
+    {
+      "tag": "discord-voice",
+      "description": "Discord voice server IPs",
+      "url": "https://vpn.em-sysadmin.xyz/rules/discord-voice-ip-list.srs",
+      "format": "binary",
+      "type": "ip",
+      "optional": false
+    },
+    {
+      "tag": "antizapret",
+      "description": "Расширенный список блокировок (AntiZapret)",
+      "url": "",
+      "format": "binary",
+      "type": "domain",
+      "optional": true
+    },
+    {
+      "tag": "itdoginfo-inside-russia",
+      "description": "Российские ресурсы (для direct маршрута)",
+      "url": "",
+      "format": "binary",
+      "type": "domain",
+      "optional": true
+    },
+    {
+      "tag": "torrent-clients",
+      "description": "Торрент-клиенты",
+      "url": "",
+      "format": "binary",
+      "type": "ip",
+      "optional": true
+    }
+  ]
+}
diff --git a/data/servers.json b/data/servers.json
new file mode 100644
index 0000000..205dea8
--- /dev/null
+++ b/data/servers.json
@@ -0,0 +1,20 @@
+{
+  "servers": [
+    {"tag": "nl-1", "region": "NL", "type": "socks", "server": "5.180.97.200", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "nl-2", "region": "NL", "type": "socks", "server": "5.180.97.200", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "nl-3", "region": "NL", "type": "socks", "server": "5.180.97.199", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "nl-4", "region": "NL", "type": "socks", "server": "5.180.97.199", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "nl-5", "region": "NL", "type": "socks", "server": "5.180.97.198", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "nl-6", "region": "NL", "type": "socks", "server": "5.180.97.198", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "nl-7", "region": "NL", "type": "socks", "server": "5.180.97.197", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "nl-8", "region": "NL", "type": "socks", "server": "5.180.97.197", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "nl-9", "region": "NL", "type": "socks", "server": "5.180.97.181", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "nl-10", "region": "NL", "type": "socks", "server": "5.180.97.181", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "ru-1", "region": "RU", "type": "socks", "server": "84.252.100.166", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "ru-2", "region": "RU", "type": "socks", "server": "84.252.100.165", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "ru-3", "region": "RU", "type": "socks", "server": "84.252.100.161", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "ru-4", "region": "RU", "type": "socks", "server": "84.252.100.117", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "ru-5", "region": "RU", "type": "socks", "server": "84.252.100.103", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "nl-ss-1", "region": "NL", "type": "shadowsocks", "server": "xui5.em-sysadmin.xyz", "server_port": 36728, "method": "chacha20-ietf-poly1305", "password": "0vHhNd7ZoIyg+tOmLZN0ia3yATGtsLVrAq8qnbk1HLg="}
+  ]
+}
diff --git a/data/static-servers.json b/data/static-servers.json
new file mode 100644
index 0000000..205dea8
--- /dev/null
+++ b/data/static-servers.json
@@ -0,0 +1,20 @@
+{
+  "servers": [
+    {"tag": "nl-1", "region": "NL", "type": "socks", "server": "5.180.97.200", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "nl-2", "region": "NL", "type": "socks", "server": "5.180.97.200", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "nl-3", "region": "NL", "type": "socks", "server": "5.180.97.199", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "nl-4", "region": "NL", "type": "socks", "server": "5.180.97.199", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "nl-5", "region": "NL", "type": "socks", "server": "5.180.97.198", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "nl-6", "region": "NL", "type": "socks", "server": "5.180.97.198", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "nl-7", "region": "NL", "type": "socks", "server": "5.180.97.197", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "nl-8", "region": "NL", "type": "socks", "server": "5.180.97.197", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "nl-9", "region": "NL", "type": "socks", "server": "5.180.97.181", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "nl-10", "region": "NL", "type": "socks", "server": "5.180.97.181", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "ru-1", "region": "RU", "type": "socks", "server": "84.252.100.166", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "ru-2", "region": "RU", "type": "socks", "server": "84.252.100.165", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "ru-3", "region": "RU", "type": "socks", "server": "84.252.100.161", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "ru-4", "region": "RU", "type": "socks", "server": "84.252.100.117", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "ru-5", "region": "RU", "type": "socks", "server": "84.252.100.103", "server_port": 54101, "udp_over_tcp": true},
+    {"tag": "nl-ss-1", "region": "NL", "type": "shadowsocks", "server": "xui5.em-sysadmin.xyz", "server_port": 36728, "method": "chacha20-ietf-poly1305", "password": "0vHhNd7ZoIyg+tOmLZN0ia3yATGtsLVrAq8qnbk1HLg="}
+  ]
+}
diff --git a/data/version.json b/data/version.json
new file mode 100644
index 0000000..8c9bee8
--- /dev/null
+++ b/data/version.json
@@ -0,0 +1,6 @@
+{
+  "version": "2.0.16",
+  "url": "https://vpn.em-sysadmin.xyz/releases/vpnem-windows-amd64.exe",
+  "sha256": "d99efa113372590aa6b9aa46e0e511011f59af19353701729a5c6c507411005a",
+  "changelog": "All auto-update and version checks removed. Updates via scripts/GPO only."
+}