Tegant - Censorship-Resistant VPN

Hey ProductHunt! 👋

After seven years of development, we’re finally sharing Tegant here.

The Technical Stack That Got Us Banned in Russia:

We run multiple protocols across two systems:

- WireGuard: Curve25519, ChaCha20-Poly1305, BLAKE2s, minimal 4k LOC
- Custom kernel tuning (BBR congestion control, optimised buffers)
- nDPI deep-packet inspection for torrent blocking
- Self-healing infrastructure with automated kernel-module rebuilds
- Up to 2047 concurrent connections per server

- Xray supporting three protocols with four transport configurations:
- VLESS+Vision+REALITY (TLS 1.3 fingerprint with x25519 curves)
- VLESS+H2C+TLS (HTTP/2 clear text via Caddy proxy)
- Trojan+RAW+TLS (TLS 1.2 with ChaCha20-Poly1305)
- VMess+WebSocket+TLS (CDN-compatible, ready for Cloudflare proxy)

Infrastructure Details:
- Caddy reverse proxy with SNI routing on port 443 (multiplexes all protocols)
- Auto-SSL via Cloudflare DNS challenges
- GeoIP/GeoSite blocking (china rules)
- Redis/PostgreSQL back-end with GCM encryption
- Premium CN2GIA route from Los Angeles to China for low latency
- IP-rotation system for China connectivity maintenance

The Russia Story (May 2025):
Russia’s DPI systems could not reliably block our stack. Instead, Roskomnadzor requested that Apple remove us from the App Store. Our protocols have, to date, proven technically resilient. Existing Russian customers retain access until their subscriptions expire, and our Belarusian users continue to enjoy full service.

China Performance:
While many providers struggle in China, we maintain fast, stable connections through:
- Premium CN2GIA direct land routes (expensive but worth it)
- Automated IP rotation when required
- REALITY protocol that closely mimics legitimate traffic
- Multiple fallback transports

UAE Market – Connecting Expats & Families:
We have become essential for the UAE’s large expatriate community and locals who require WhatsApp, FaceTime and social media to stay in touch with loved ones. In a country where VoIP is restricted, we help families bridge distances. Our protocols are specifically optimised for real-time communication, not bulk downloads.

Why We Block Torrents:
We use nDPI to block all torrent traffic across our network. This is not about being anti-piracy police – it is about focus. We are here to help people access information, communicate with family and use social media freely. As a small team, we cannot handle copyright strikes and legal issues from torrent usage. By blocking torrents entirely, we can concentrate on what matters: keeping our service reliable for people who need uncensored internet access.

Privacy Matters Everywhere – Including Open Societies:
Even in countries with free speech, advertisers, data brokers and unsecured Wi-Fi networks harvest vast amounts of personal information. Tegant encrypts every packet, hides DNS queries and strips metadata so your browsing remains yours alone. We do not log or monetise your activity, ever.

Compliance & Responsible Use:
Tegant is intended for legitimate privacy and security purposes. We do not encourage or enable unlawful circumvention of age-assurance requirements or any other statutory obligations. Please use our service responsibly and in accordance with your local laws.

Platform Support:
- iOS/macOS: Full multi-protocol support (WireGuard + VLESS/VMess/Trojan via Xray)
- Android: WireGuard only
- All platforms share the same infrastructure and privacy guarantees

Privacy Architecture:
- Zero logs – we do not collect or store user activity
- Private AdGuard DNS (WireGuard subnet) → Cloudflare DoT
- Configuration encryption: AES (WireGuard), GCM (Xray)
- No IPv6 support by design

Why This Matters:
We have shown that, with the right technical approach, censorship can be overcome through protocol innovation rather than legal manoeuvres.

Built because everyone deserves an uncensored internet. Our users in Russia, China, the UAE, Belarus, Qatar and Saudi Arabia prove it works every day.

AMA about the REALITY protocol, CN2GIA routing or surviving in highly restricted internet environments! 🚀

Phenomenal work, Hermann — this is one of the most technically resilient VPN stacks I’ve seen. The CN2GIA route + REALITY combo and full multi-protocol architecture is just top-class. Respect for building something that genuinely stands up to DPI and censorship.

Quick thought: as users onboard in high-stakes environments (like UAE or China), how are you thinking about supporting them in real-time when something doesn’t connect or config gets tricky? Moments like that can make or break trust.

We’re about to launch Exthalpy on PH — a live AI video agent that helps users take action right when they’re stuck, instead of bouncing between static FAQs and ticket queues. Would love your support when we go live 🙌

In awe of the grit behind this project.

— Udit (fellow PH builder)

The way Tegant keeps connections stable in China with that premium CN2GIA route + auto IP rotation is honestly genius, fr—most VPNs totally choke there. You guys nailed it!