VPN & Anti-DPI Glossary
Clear explanations of VLESS XTLS-Reality, TSPU packet inspection, carrier whitelists, uTLS fingerprinting, and split-tunneling.
VLESS (VMess Lightweight Encryptionless Secure Socket)
A lightweight, zero-overhead proxy protocol built on Xray-core. Unlike legacy VMess, VLESS avoids double encryption when paired with TLS 1.3 or Reality.
XTLS-Reality
A TLS 1.3 camouflage layer that eliminates the need for a self-owned domain certificate by borrowing authentic TLS handshakes from trusted high-reputation SNI destinations.
TSPU & DPI (Deep Packet Inspection)
Hardware middleboxes deployed inside Russian ISP networks that inspect SNI headers, TLS fingerprints, and freeze TCP flows after 16–64 KB of transfer.
ISP Whitelists (Mobile Shutdown Mode)
A strict carrier filtering mode where only domestic Russian banking, government, and CDN domains are permitted. Bypassed via VLESS Reality with WHITE-SNI.
Split-Tunneling (Geo-Routing)
Routing configuration that sends domestic .ru traffic directly through the local ISP while tunneling blocked international and AI services through the proxy.
uTLS (TLS Fingerprint Camouflage)
Client-side TLS handshake emulation that mimics genuine Chrome, Firefox, or Safari browser fingerprints to prevent automated DPI blocking.
Frequently Asked Questions
Troubleshooting, protocols, and client setup guidance
What is the difference between a VPN app and a proxy key/subscription? ▼
A client app (Happ, v2RayTun, Hiddify, FlClash) is the software interface on your device, while a key (vless://) or subscription URL provides the live verified server endpoints and encryption parameters.