Tegant - Censorship-Resistant VPN

The Technical Stack That Got Us Banned in Russia:

We run multiple protocols across two systems:

- WireGuard: Curve25519, ChaCha20-Poly1305, BLAKE2s, minimal 4k LOC

• Custom kernel tuning (BBR congestion control, optimised buffers)
• nDPI deep-packet inspection for torrent blocking
• Self-healing infrastructure with automated kernel-module rebuilds
• Up to 2047 concurrent connections per server

- Xray supporting three protocols with four transport configurations:

• VLESS+Vision+REALITY (TLS 1.3 fingerprint with x25519 curves)
• VLESS+H2C+TLS (HTTP/2 clear text via Caddy proxy)
• Trojan+RAW+TLS (TLS 1.2 with ChaCha20-Poly1305)
• VMess+WebSocket+TLS (CDN-compatible, ready for Cloudflare proxy)

Global Server Network:

- 50+ servers across 15 countries on 5 continents

- Strategic locations: USA (East/West), UK, Germany, Netherlands, Singapore, Japan, Australia

- Specialized servers: Premium CN2GIA routes for China, optimized Middle East servers for UAE

- Each location supports all 5 protocols (WireGuard + 4 Xray configurations)

- Real-time server health monitoring with automatic failover

Infrastructure Details:

• Caddy reverse proxy with SNI routing on port 443 (multiplexes all protocols)
• Auto-SSL via Cloudflare DNS challenges
• GeoIP/GeoSite blocking (china rules)
• Redis/PostgreSQL back-end with GCM encryption
• Premium CN2GIA route from Los Angeles to China for low latency
• IP-rotation system for China connectivity maintenance

The Russia Story (May 2025):

Russia’s DPI systems could not reliably block our stack. Instead, Roskomnadzor requested that Apple remove us from the App Store. Our protocols have, to date, proven technically resilient. Existing Russian customers retain access until their subscriptions expire, and our Belarusian users continue to enjoy full service.

China Performance:

While many providers struggle in China, we maintain fast, stable connections through:

• Premium CN2GIA direct land routes (expensive but worth it)
• Automated IP rotation when required
• REALITY protocol that closely mimics legitimate traffic
• Multiple fallback transports

UAE Market – Connecting Expats & Families:

We have become essential for the UAE’s large expatriate community and locals who require WhatsApp, FaceTime and social media to stay in touch with loved ones. In a country where VoIP is restricted, we help families bridge distances. Our protocols are specifically optimised for real-time communication, not bulk downloads.

Why We Block Torrents:

We use nDPI to block all torrent traffic across our network. This is not about being anti-piracy police – it is about focus. We are here to help people access information, communicate with family and use social media freely. As a small team, we cannot handle copyright strikes and legal issues from torrent usage. By blocking torrents entirely, we can concentrate on what matters: keeping our service reliable for people who need uncensored internet access.

Privacy Matters Everywhere – Including Western Societies:

Even in countries with free speech, advertisers, data brokers and unsecured Wi-Fi networks harvest vast amounts of personal information. Tegant encrypts every packet, hides DNS queries and strips metadata so your browsing remains yours alone. We do not log or monetise your activity, ever.

Platform Support:

• iOS/macOS: Full multi-protocol support (WireGuard + VLESS/VMess/Trojan via Xray)
• Android: WireGuard only
• All platforms share the same infrastructure and privacy guarantees

Privacy Architecture:

• Zero logs – we do not collect or store user activity
• Private AdGuard DNS (WireGuard subnet) → Cloudflare DoT
• Configuration encryption: AES (WireGuard), GCM (Xray)
• No IPv6 support by design

Why This Matters:

We have shown that, with the right technical approach, censorship can be overcome through protocol innovation rather than legal manoeuvres.

Built because everyone deserves an uncensored internet. Our users in Russia, China, the UAE, Belarus, Qatar and Saudi Arabia prove it works every day.

AMA about the REALITY protocol, CN2GIA routing or surviving in highly restricted internet environments! 🚀