A VPN that still connects when the network is cut down to a whitelist

A whitelist is a filtering mode in which only the sites, services and apps on an approved list are allowed through, and everything else quietly fails to load. The logic is inverted compared to ordinary blocking: instead of “this specific thing is banned”, it becomes “only this specific thing is permitted”. In Russia the list is maintained by the Ministry of Digital Development and covers a few hundred resources — government portals, banks, mobile operators’ own accounts, a handful of large domestic platforms.

An ordinary VPN usually does not survive this, and not because it was “detected”. The address of a foreign VPN server is simply not on the approved list, so the connection is never established at all: the app spins on “Connecting…” until it times out. On top of that, operators in this mode tend to drop unrecognised UDP traffic outbound — and UDP is exactly what WireGuard and everything built on it uses. That is why searches like “vpn that works in russia” spike every time a new region switches the mode on.

PRO runs on VLESS + Reality. The connection is disguised as an ordinary visit to a popular website: the same port 443, the same handshake — the first few packets in which your device and the server agree on encryption. To the filtering equipment it does not look like a suspicious tunnel; it looks like routine HTTPS traffic. And if the filter probes the server address itself, it gets the response of a normal web server, because the server borrows the TLS handshake of a real third-party site instead of carrying a certificate of its own.

The other half of the work is not technical. We stay in contact with users across different Russian regions: when filtering tightens somewhere, we hear about it from people on the ground and adjust the configuration. New servers arrive through the subscription on their own — nothing to re-import.

Where the honesty line sits: nobody in this field has a solution that works always and everywhere. That is exactly why the trial is two weeks and not one day — long enough to test it on your own SIM card, in your own city, at your own peak hour.

AmneziaWG is WireGuard with obfuscation. The cryptography is untouched; what changes is how the traffic looks from the outside — packet headers, sizes and timing no longer carry WireGuard’s recognisable fingerprint, so signature-based filtering has nothing to match. Same speed, same simplicity, no ID badge. This is the choice for ordinary blocking: home broadband, and mobile networks without hard restrictions.

VLESS + Reality is the heavy artillery. The server holds no TLS certificate of its own — nothing to fingerprint, nothing to revoke. Instead it takes on the appearance of a genuine popular website, so even active probing sees an ordinary web server. That mechanism is what lets it work in whitelist mode.

Poland is the closest European site to Russia and the CIS. A short route means low latency, and that is the difference you feel in games and video calls.

The Netherlands means Amsterdam, one of the largest internet exchange points in Europe: networks from all over the world meet there, so traffic to most services takes a direct path. This is the option for volume — video, cloud storage, large downloads.

Switching between them takes one tap. It is a single subscription and both locations are already inside it.

The arithmetic is simple: ten people on PRO comes to exactly what you pay for a month yourself. As long as they keep renewing, your own subscription is effectively free. The bot hands you the link immediately, with no application form and no separate dashboard.