HTTP/2 over TLS tunnel for bypassing deep packet inspection. Bridge daemon on VPN servers, client-side H2 transport, session protocol tracking in admin.
- HTTP/2 over TLS tunnel transport (bridge daemon + client)
- H2 session indicator in admin sessions and user details
- Helsinki VPN server with H2 bridge
IPv6 priority for servers with dual-stack support, web cover on all VPN servers, VPN connectivity test tool, and UI improvements across platforms.
- IPv6-first connection when server has dual-stack
- Server-driven protocol order (proto array)
- Nginx reverse proxy on all VPN servers (DPI cover)
- Self-signed HTTPS on VPN servers via own CA
- VPN connectivity test script (Linux, macOS, Windows)
- HTTP traffic generator from Moscow (cron)
- Frankfurt (DE) VPN server added
- San Jose 2 (US) VPN server added
Real-time server directory replaces static profiles. The app now fetches a live server list on each connection, enabling automatic load balancing, per-country failover with user prompt, and instant server propagation without re-login.
- Live server directory with load-based sorting
- Country selector populated from server data
- Per-country failover with user prompt
- Censored country warnings driven by server flag
- File-based identity and directory caching
- On-the-fly VPN config assembly
VPN session tracking moved to server-side, device ID standardized across platforms, multi-server profile support with country selector.
- Session tracking via VPN server status reports
- Unified device ID format across platforms
- Country selector with flag icons
- Version enforcement on VPN servers
- Admin UI: sessions grouped under devices
P4EN profile encryption for transit security, connection obfuscation improvements, and airplane mode handling.
- P4EN profile encryption (substitution cipher)
- Improved obfuscation with ballast padding
- Airplane mode and no-internet detection
- Sticky error messages with lazy clearing
Windows app rewritten with background service for VPN connections — no more UAC prompts on every launch.
- Windows: service-based architecture (no UAC on GUI launch)
- Traffic stats polling in message area
- Auto-update check on launch
- Tray icon with quick connect/disconnect
