Knowledge base
Guides
How the protocols actually work, and what a VPN does and does not change about what others can learn about you. Written for people who want the mechanism, not a sales pitch.
Sixteen articles are available in English. The full knowledge base of 38 guides is in Russian.
5 min read
What is VLESS Reality: how the protocol works and why it stays stable in 2026
VLESS Reality explained without jargon: how the protocol makes traffic look like ordinary HTTPS, how it differs from WireGuard and OpenVPN, and why it keeps latency low.
5 min read
VLESS Reality vs Hysteria2: which VPN protocol to use in 2026
VLESS Reality vs Hysteria2 compared: TCP against UDP/QUIC transport, latency, and how each protocol behaves on mobile data and crowded Wi-Fi, plus when to switch.
7 min read
Post-quantum VPN encryption: what ML-KEM is and why it matters in 2026
ML-KEM (Kyber, FIPS 203) and hybrid X25519MLKEM768 key exchange in plain terms: what harvest-now-decrypt-later means and what post-quantum crypto changes for a VPN in 2026.
7 min read
Does a VPN make you anonymous? The Global Device ID case, explained (2026)
A VPN hides your IP address, but not the identifiers your OS sends outside the tunnel. A 2026 US case shows how a Windows Global Device ID exposed a user running three VPNs.
6 min read
How crypto wallets get drained: seed phrases, clipboard swaps and public Wi-Fi (2026)
Three ways a crypto wallet gets drained: a phishing site, a swapped address in the clipboard, a fake app. What a VPN covers on public Wi-Fi, and what it never will.
7 min read
Airdrop Sybil detection: how wallets get clustered and what a VPN does (2026)
How airdrop Sybil filters actually work: what links wallets into one cluster, why an IP address is the weakest signal of all, and what a VPN does not change.
8 min read
What is Xray-core, and how is it different from V2Ray?
Xray-core is the proxy engine behind VLESS, Reality, VMess, Trojan and Shadowsocks. What it is, how the V2Ray fork happened, and whether you need to touch it at all.
8 min read
What is a VPN subscription link: the vless:// and hy2:// URL formats explained
A subscription URL returns a list of vless:// and hy2:// URIs. What each field in those links means, why clients re-fetch them, and what access you give away by sharing one.
8 min read
How to choose a VLESS and Hysteria2 client in 2026: Xray, sing-box or Clash
Clients differ in the core they run, how they refresh a subscription link and what routing they allow. What to check on iOS, Android, desktop and TV before installing one.
8 min read
Can my ISP see my VPN traffic? What stays visible in 2026
A tunnel hides your destinations and hostnames, not its own endpoint, timing or byte counts. What an ISP can still log, what the outer handshake shows, and what leaks past it.
8 min read
DNS leak test: what the result actually means, and what it misses
A DNS query leaves your device before any traffic does. What a leak test really measures, what it cannot see at all, and how a DNS leak differs from WebRTC and IPv6 leaks.
9 min read
What is a JA3 fingerprint: TLS fingerprinting, JA4 and what Reality changes
What JA3 and JA4 read out of a TLS ClientHello, why a proxy client can stand out before anything is encrypted, what uTLS and Reality fix, and what they leave visible.
8 min read
QUIC blocked on your network: why Hysteria2 fails and VLESS over TCP still works
UDP gets filtered, rate-limited or black-holed on plenty of networks. How to tell a real block from a shaper, a dead NAT mapping or an MTU floor, and what each one means.
8 min read
VPN stalls on mobile data: MTU, fragmentation and PMTUD black holes (2026)
A tunnel that comes up instantly and then freezes on large transfers is usually a packet-size problem, not a busy cell. How to tell the two apart, measure the path, and fix it.
8 min read
VPN device limits: how HWID binding works and what it cannot stop
How a subscription gets bound to a device: where the check runs, why an HWID header is a billing control rather than a security boundary, and why one phone counts as three.
8 min read
Is a self-hosted VPN worth it? Costs, upkeep and the single-IP problem
Running your own VPS against buying access: what the monthly invoice leaves out, why a datacenter IP collects captchas, and what a single-user exit address gives away.