VLESS Reality VPN Marketplace

Your app opens a TCP connection to the node on port 443 and starts an ordinary TLS 1.3 handshake. The server name in it is a large website that has nothing to do with the node: the operator picks one, or the node software picks one the node can reach. The app shapes the handshake like Chrome's, so on the wire it looks like a browser visiting that site.

Only a client that holds the node's public key and short ID gets a VPN session. Anything else, including a censor's active probe, is passed through to the real website and receives that website's genuine certificate. There is no home-made certificate to spot and no VPN greeting to find.

• XTLS Vision. ProofKit links use the xtls-rprx-vision flow, which avoids the tell-tale packet sizes of TLS running inside TLS.
• A personal ID. Each user has their own ID on the node, so traffic is counted per user and billed per GB.
• Direct or 2-hop. A direct route goes from your app to the exit node. A 2-hop route adds an entry node that reads only the server name to decide where to forward, then passes the still-encrypted stream to the exit over a tunnel between the two nodes (WireGuard by default). Reality is decrypted only at the exit.

Reality hides what your traffic is, not where it goes. It can still be stopped by:

• Address blocks. Blocking the node's IP address, or a hosting provider's whole range, stops it however good the disguise is.
• Mismatch checks and throttling. The node's address is not the borrowed website's address. A filter that checks this, or throttles long TLS sessions to foreign data centres, can slow or cut the connection.
• Allowlist networks. Where only a short list of approved services is reachable, no TLS disguise gets through.

Then switch transport in the same app: Hysteria2 if UDP gets through, XHTTP if the network judges connections by their behaviour, a 2-hop route if foreign addresses are blocked, and olcRTC if almost nothing gets through.

Nearly every Xray- or sing-box-based app runs VLESS Reality: Happ (iOS, Android), Hiddify (iOS, Android, desktop), V2RayNG (Android), Streisand (iOS), NekoBox and V2RayN (Windows). You add one subscription URL and the app keeps its server list up to date. Step-by-step guides: Hiddify, V2RayNG.

1. Sign in with email or Telegram and top up with TON.
2. In the marketplace, pick an exit country and connect to a node, directly or through an entry node.
3. In the dashboard, open Subscription URL, set Your app to Happ · Hiddify · V2RayNG and copy the URL. That list carries Reality unless you change Transports in subscription.
4. Add the URL as a subscription in your app, pick the new entry and connect. When you connect to other nodes later, the app picks them up on its next refresh.

The node's own per-GB price plus the 20% network fee, locked when you connect and paid from your TON deposit in the escrow contract; Hysteria2 and XHTTP cost the same. olcRTC costs it too until 20 November 2026, then has one network-wide price per GB (the olcRTC page lists it). Unused balance can be withdrawn at any time. Each node's price is listed in the marketplace.