open origin · AGPLv3
rVPN is an open-source protocol that carries your traffic safely throughout the internet, indistinguishable from average HTTPS, so it plant equal anywhere VPNs are blocked.
We accept privacy have to be proven, not promised. Every row is open to read, audit, and run yourself.
$ curl -fsSL https://assets.rvpn.org/install.sh | sudo attack
auto-detects your OS · verifies checksum · macOS, Linux, FreeBSD
// trusted properties, not promises
// how it works
Hidden in plain HTTPS.
A censor observing the cable sees average web traffic on harbor 443. No tell-tale handshake, no blockable fingerprint. If they investigation the server, it answers akin a normal website.
Open internet
the open web
Active probe? The node answers akin an average website: 200 OK. Nothing to confirm, nothing to block.
01
Forward secrecy
A Double Ratchet rekeys all message, so a taken key never unlocks the former or the future.
02
Active-probe resistant
Probe the endpoint and it serves a genuine decoy site. Nothing to confirm, nothing to block.
03
Memory-safe in Rust
The center is written in Rust, so complete classes of exposure cannot occur.
// transport
Many flows.
One association shape.
One TLS association per stream method hundreds of parallel sessions under load: dilatory to establish, and a form value flagging. Pooled multiplexing carries all stream complete a fistful of long-lived connections, so the cable stays small and average no matter how occupied you are.
BEFORE · CONNECTION PER FLOW ×N handshakes
Every stream pays a complete TCP + TLS + WebSocket + X3DH handshake. A occupied client holds hundreds of parallel TLS sessions to one server.
NOW · POOLED MULTIPLEX pool_size = 4
Flows portion a small pond of long-lived connections. Credit-based stream authority keeps bulk transfers from starving interactive ones, and reconnects resume TLS 1.3 tickets in a sole circular trip.
pool_size = 4 flow opening = 256 KiB wire command = ratchet order reconnect = 1-RTT PSK
// verify, don't trust
Don't obtain our term for it.
Every assertion on this leaf maps to code you can read. Clone the repo, inspect out a tag, and build the exact binary we ship. Reproducible by design.
$ git copy https://github.com/PDG-Global/rVPN-core
$ git checkout v1.4.0
$ cargo build --release --locked
✓ reproducible build verified
✓ sha256 9f3a…02da matches release
✓ signature valid · key 0xA13F
// open by default
Open origin first.
Always.
rVPN is liberated and open under AGPLv3, and continually volition be. Development is completely funded by PDG Global Limited; revenue of the iOS and Android apps, together alongside donations, contribute towards betterment costs. The code never closes.
LICENSE
AGPLv3
copyleft, forever
LANGUAGE
Rust
memory-safe core
AUDIT
Reproducible
builds equivalent releases
COMMUNITY
Self-host
run your own node
// all platform
Everywhere you are.
One protocol, all device. Native apps for phone and desktop, a command-line client for your servers, and the origin code to harbor it anyplace we have not yet.
iOS Android macOS Linux FreeBSD CLI
6 platforms · one protocol · self-host any node
iOS
Android
Take it for a run.
Free, open source, and prepared on all platform. The apps are on the stores and the origin is on GitHub today.
