Hidden in plain HTTPS.
A censor watching the wire sees ordinary web traffic on port 443. No tell-tale handshake, no blockable fingerprint. If they probe the server, it answers like a normal website.
A Double Ratchet rekeys every message, so a stolen key never unlocks the past or the future.
Probe the endpoint and it serves a real decoy site. Nothing to confirm, nothing to block.
The core is written in Rust, so entire classes of vulnerability cannot occur.
Many flows.
One connection shape.
One TLS connection per flow means hundreds of parallel sessions under load: slow to establish, and a shape worth flagging. Pooled multiplexing carries every flow over a handful of long-lived connections, so the wire stays small and ordinary no matter how busy you are.
Every flow pays a full TCP + TLS + WebSocket + X3DH handshake. A busy client holds hundreds of parallel TLS sessions to one server.
Flows share a small pool of long-lived connections. Credit-based flow control keeps bulk transfers from starving interactive ones, and reconnects resume TLS 1.3 tickets in a single round trip.
Don't take our word for it.
Every claim on this page maps to code you can read. Clone the repo, check out a tag, and build the exact binary we ship. Reproducible by design.
Read the whitepaper →Open source first.
Always.
rVPN is free and open under AGPLv3, and always will be. Development is fully funded by PDG Global Limited; sales of the iOS and Android apps, together with donations, contribute towards development costs. The code never closes.
Everywhere you are.
One protocol, every device. Native apps for phone and desktop, a command-line client for your servers, and the source code to port it anywhere we have not yet.
