ProofKit uses VLESS Reality and optional 2-hop routing to keep VPN traffic usable in DPI-heavy networks. A local entry node can receive your connection, then forward encrypted traffic to a foreign exit node through WireGuard or GRE/IPsec.
Classic VPN protocols have visible signatures. VLESS Reality makes the first handshake look like ordinary TLS 1.3 to a real website, so passive DPI and active probes see a normal HTTPS-like connection instead of a VPN endpoint.
Direct routes prioritize speed. 2-hop routes send traffic through an entry node before the exit node, separating your real IP from the server that reaches the open internet.
ProofKit prices are set by independent node operators. You pay only for measured traffic, with funds held in non-custodial TON escrow and unused balance withdrawable.
ProofKit is designed for restrictive networks including Russia. Availability always depends on the current local network conditions and node quality, but VLESS Reality and 2-hop routing are built specifically for DPI-heavy environments.
Use a VLESS Reality compatible client such as Hiddify, V2RayNG, Streisand, NekoBox, or V2RayN.
No. Direct routes are simpler and faster. 2-hop routes are useful when you want stronger privacy separation or when a local entry improves reachability.
Pick a route by country, price, uptime, and proof status. Pay only for traffic you actually use. Unused TON balance is withdrawable from the escrow, subject to pending charges.