Censorship bypass¶
Open Settings → Censorship bypass. These options are available on all platforms and are off by default. After changing them, disconnect and reconnect the VPN.
Try one change at a time, using the same server and network. Check that several websites and your usual apps load. If a change does not help, turn it off and reconnect before trying another option. These settings cannot fix an unavailable server or guarantee access on every network.
Your subscription may supply its own values. Those values take precedence for that subscription, so changing a local switch may not change the connection. Ask your provider if you are unsure which settings it requires.
REALITY: disable post-quantum key exchange¶
Available from Apple 2.0.39 (375), Android 2.0.6 (502), Windows/Linux 2.0.2 (258).
Try this when a VLESS/REALITY connection appears connected but websites stall on a particular network. It makes the opening handshake smaller for fingerprints that include a post-quantum key exchange.
- Select your VLESS/REALITY server.
- Open Settings → Censorship bypass and enable REALITY: disable post-quantum key exchange.
- Reconnect and open the same websites that failed before.
- If it makes no difference, disable it and reconnect.
This applies only to REALITY. Conventional encrypted key exchange remains, but hybrid post-quantum protection for that exchange is disabled. Other protocols are unaffected. You do not need to change the server or choose an older fingerprint. A smaller handshake does not guarantee that it fits in a single packet.
The connection log shows whether the option was applied and whether the value came from the subscription or your local settings. If the selected server does not use REALITY, the option has no effect.
TLS fragmentation¶
Splits the opening TLS handshake into smaller pieces. This can help on networks that interfere with connection establishment.
- Enable TLS fragmentation in Settings → Censorship bypass.
- Keep the initial values below for your first test.
- Reconnect and check the same sites. Adjust values only if your provider recommends them.
| Field in the app | Initial value | Meaning |
|---|---|---|
packets |
tlshello |
Fragment the opening TLS handshake |
length |
50-100 |
Size range of the fragments in bytes |
interval, ms |
10-20 |
Delay between fragments in milliseconds |
maxSplit |
Empty | Optional limit on the number of fragments |
Very small fragments or long delays can slow down connections. Fragmentation and the REALITY option above are separate switches; test each separately first.
Noise packets¶
Adds extra data before the connection handshake. Enable Noise packets only when your provider recommends it for your network and server, then reconnect.
| Field | Initial value | Meaning |
|---|---|---|
| Type | rand |
Random content; str and hex are alternatives for a provider-supplied setup |
| Packet | 50-100 |
Packet size range in bytes |
| Delay, ms | 10-20 |
Delay in milliseconds |
Keep these values unless your provider supplies different ones. Noise can be used with fragmentation, but enabling every option together makes it harder to tell which change helped.
If the server name cannot be resolved¶
Server address over DoH is in Settings → DNS, not in Censorship bypass. It looks up the VPN server itself before connecting. See the DNS guide for setup and the difference from DNS used by websites.
Provider integration formats are documented separately in the developer reference.