X-RAY
Reality is designed for countries with the highest levels of internet censorship and is protected against detection using active probing methods.
- Available with AmneziaVPN on all platforms.
- Requires minimal configuration.
- Undetectable by DPI analysis systems and resistant to blocking.
- Operates over the TCP network protocol.
How It Works:
Censors can attempt to identify REALITY even during the TLS handshake phase. However, if REALITY detects that the incoming request is from an authorized client, the server establishes a VPN tunnel for it.
If any other request reaches port 443, the TLS connection is redirected to a legitimate external website, such as google.com. This means that the censor will receive a genuine TLS certificate from google.com, along with all the actual data from that site.
From the perspective of traffic analysis systems, this appears as a normal connection to a real website. The server provides a legitimate TLS certificate, and everything—including the TLS fingerprint of the server—looks completely authentic, raising no suspicion.
An added benefit is that REALITY offers excellent performance and connection speeds, particularly compared to alternatives like OpenVPN over Cloak.
The masking website used in the REALITY protocol settings should:
- Be an international website accessible from your country without a VPN.
- Not have a login/password form.
- Ideally, be a large and well-known website, making your traffic blend in with regular users.
In rare cases, website owners may report phishing attempts to your ISP, so it's important to carefully choose the site.
