Help · Operators

Origin (exit) vs Edge (entry)

Every node is one of two types. An origin is an exit: users' traffic leaves to the internet from it. An edge is an entry for 2-hop routes: it forwards users to origins over a tunnel without decrypting anything.

Open in the app All help topics
example
Direct:  user → origin → internet
2-hop:   user → edge → tunnel → origin → internet

A node is either an origin or an edge, and one server can hold only one of them: an edge and an origin must be on different servers.

Origin (exit node)

Runs Xray with VLESS Reality on TCP 443, plus Hysteria2 (UDP 443) and XHTTP (TCP 8444) if you switch them on, WireGuard for tunnels from edges, and olcRTC if you switch it on. Users' traffic leaves to the internet from the origin.

  • Earnings: you receive 80% of what the user pays for your node's part of the route, which is 0.96 × your price, on a direct route and on a 2-hop route alike (olcRTC traffic aside: from 20 November 2026 the exit earns 80% of the network's olcRTC price for it); see Revenue split.
  • Complaints: abuse and copyright complaints about user traffic go to the exit's IP address. Torrent Guard blocks BitTorrent; WARP sends TCP traffic out through Cloudflare instead of your IP.

Edge (entry node)

Runs nginx as a stream proxy on port 443 and WireGuard (or GRE / GRE+IPsec) tunnels to the origins it is linked to, plus relays for Hysteria2 (UDP) and XHTTP (TCP) on per-link ports. It has no Xray. It reads the cover site name from each connection to pick the origin, and forwards the encrypted bytes without decrypting them. On an entry the platform has opened WebTunnel for, an extra address of the server can carry one more line the same way.

  • Earnings: an edge earns only from 2-hop routes through it: 0.96 × its price per GB, as an origin does. olcRTC never passes the entry, so an edge earns nothing from it.
  • Complaints: users' traffic leaves from the origin, not from the edge.
  • Links: an edge carries nothing until it is linked to at least one origin. See Edge ↔ Origin links.
An edge is useful where connections to addresses abroad are blocked or throttled but domestic ones pass: an edge inside that country, linked to an origin outside it, gives users a route that starts at home.