Protocols
OpenNet VPN leverages multiple open-source protocols to provide flexibility, strong security, and reliable access in different network conditions. Each protocol has its strengths, and all are designed to keep your data encrypted and help bypass censorship. Below is an overview of the key protocols we support:
Shadowsocks is a lightweight, fast proxy protocol originally designed to circumvent internet censorship. OpenNet VPN uses the Outline implementation of Shadowsocks, which is user-friendly and backed by Jigsaw (a Google initiative). Key points about Shadowsocks/Outline:
Encryption: Shadowsocks uses modern ciphers to encrypt your traffic. It provides a good balance of speed and security, making it ideal for everyday VPN use.
Evasion: It’s effective at bypassing censorship by disguising traffic patterns. Many users in restrictive networks (schools, offices, or certain countries) find that Shadowsocks connections remain unblocked when other VPNs fail.
Use Case: We often recommend the Outline (Shadowsocks) method for users who want a one-click setup via the Outline client app. It’s simple: you import an access key and connect. This is great for beginners or anyone who values ease of use.
VMess is the primary protocol of the V2Ray framework, which was created for advanced network routing and obfuscation. It’s a versatile protocol supporting various transports (TCP, WebSocket, HTTP/2, gRPC, etc.):
Dynamic Encryption: VMess includes built-in encryption and user ID authentication. Each access code contains a unique ID that the server recognizes, preventing unauthorized use.
Flexibility: It can operate over different ports and camouflages (for example, over WebSocket on port 443, which looks like regular HTTPS traffic). This flexibility helps it blend in with normal traffic and bypass filters.
Use Case: OpenNet VPN’s VMess connections are useful if you need a bit more stealth or if you want to use advanced client apps. Tech-savvy users on Windows or Android might choose VMess for fine-tuned control and potentially better performance on certain networks.
VLESS is a modern, streamlined protocol derived from VMess (part of the Xray project). It removes some complexity (like VMess’s built-in encryption) in favor of using external encryption like TLS:
Lightweight & Fast: VLESS was designed to be efficient. By relying on TLS for encryption, it reduces overhead, which can improve speed and latency.
Strong Obfuscation: VLESS is often paired with transports like TLS or XTLS (Xray’s advanced TLS encryption) to make VPN traffic practically indistinguishable from normal secure web traffic. This makes it highly resistant to blocking.
Use Case: OpenNet VPN utilizes VLESS for users facing aggressive censorship or deep packet inspection. It’s an excellent choice when Outline (Shadowsocks) or VMess isn’t connecting reliably. VLESS is typically used via clients like v2rayNG (Android) or Qv2ray (Desktop) by importing the provided access link.
Trojan is another protocol supported by OpenNet VPN for its strong focus on camouflage. It works by imitating standard TLS (HTTPS) connections:
Looks Like HTTPS: A Trojan connection uses a real TLS handshake, appearing to network observers as if you are simply visiting an HTTPS website. This makes it extremely difficult to distinguish from normal web browsing.
Stability: Trojan connections run on port 443 (the default for HTTPS). Many firewalls allow this traffic through since blocking it could disrupt legitimate websites. Trojan takes advantage of that tolerance.
Use Case: We recommend Trojan protocol if other methods are failing due to strict blocking. It requires a compatible client (for example, Shadowrocket or Streisand on iOS, or v2rayNG on Android). Users who need maximum stealth can use the Trojan access details provided with their subscription.
Protocol Selection
All these protocols – Shadowsocks (Outline), VMess, VLESS, and Trojan – are available to OpenNet VPN users. You will receive access details (keys or links) for one or more of them after subscribing. In practice:
For most users, the Shadowsocks/Outline option offers a quick and easy setup with robust privacy.
If you encounter connectivity issues (e.g., the Outline server is blocked by your network), you can switch to a VMess, VLESS, or Trojan configuration using a suitable app.
Security is high in all cases. Regardless of which protocol you choose, your traffic is encrypted with strong algorithms. The differences lie mainly in how the traffic is packaged and disguised to evade blocks.
OpenNet VPN’s multi-protocol support ensures you have alternatives if one method is slow or blocked. In our setup guides, we’ll show you how to use each of these protocols on various devices. The flexibility of having multiple protocols means you can stay connected to a free and open internet, no matter where you are or what network conditions you face.
Last updated