For China and Iran
Hardened mode with frame-length obfuscation and domain fronting — where an ordinary tunnel never comes up.
China and Iran differ from ordinary blocking in that the filter is active: it does not merely watch traffic, it connects to the suspicious server itself and checks how it answers. Encryption alone is therefore not enough — the server has to behave like an ordinary web server for anyone who does not hold the key. In Logrus that is handled by hardened mode, where frame lengths are encrypted and the stream is indistinguishable from random bytes, and by the deflector, which serves a normal website in response to a failed handshake.
What you get
Domain fronting through Cloudflare
Frame-length obfuscation — packet-size analysis gets nothing to work with
Automatic fallback to another transport when the current one stops answering
Locations verified for these networks are flagged on the public status page
How it works
- 1
The connection is dressed as ordinary HTTPS
The transport comes up with a real browser's TLS fingerprint and an allowlisted domain in SNI — to the filtering box it is one more visit to a website.
- 2
An active probe finds nothing interesting
Given a request without valid authentication, the server answers like a normal website: the prober gets a page rather than a rejection, and no reason to list the address ever appears.
- 3
Strategies rotate until one sticks
When a particular transport stops getting through, the client moves to the next one and remembers the outcome — next time the working option is tried first.
First find out what is actually being blocked
Free in-browser probes show whether your ISP throttles a given service, whether DNS leaks, and whether your TLS fingerprint is being rewritten. Nothing to install.
What it costs
One plan covers every scenario — there is no extra charge for a particular service. Today we take crypto and reseller payments; cards are on the way. Refunds within 30 days.
Frequently asked questions
- What if it will not connect right after I land?
- Give the client three to five minutes — it cycles through transports by itself. If nothing comes up by then, email support with your country and ISP; we keep dedicated configs for known networks.
- How does hardened mode differ from the normal one?
- In normal mode each frame's length is visible in the clear, which is faster. In hardened mode the length is encrypted too, so packet-size analysis yields nothing; the price is roughly 40% more crypto cost.
- Should I download the client in advance?
- Yes, ideally before you travel: distribution sites may be unreachable once you are there. Installers for every platform are on the downloads page.
- Does this work against allowlists rather than blocklists?
- Yes — that is exactly what domain fronting is for: from the outside the connection goes to a permitted domain on a major CDN, which cannot be dropped from an allowlist without collateral damage.
Try it on your own ISP
The trial needs no card up front. If it does not work on your ISP, we refund within 30 days, no questions asked.
Other scenarios
Messengers that stay connected
Messages, calls and voice notes get through even when the network throttles messengers.
Streaming services without stutter
4K video, music and region-locked subscriptions — without the dip halfway through an episode.
Gaming without lag
Low ping, a session that holds, and no being logged out of game accounts mid-match.