Common VPN, protocol and networking terms — explained in plain language for Iranian users.
ویتوری
An open-source platform for building censorship-resistant tunnels that supports several protocols (VLESS, VMess, Trojan, Shadowsocks) under one roof. It is the most common core used by VPN services in Iran.
ولِس
A V2Ray protocol that is lighter and faster than VMess, typically paired with TLS or Reality. Currently the best-performing option for bypassing Iranian filtering.
Related
ویمس
The original V2Ray protocol with built-in encryption. Now largely superseded by VLESS+TLS because its fingerprint is easier to detect on the Iranian network.
ریالیتی
A camouflage layer for VLESS that makes traffic look identical to a real website (e.g. Google or Microsoft) without needing your own domain or TLS certificate. Currently the most resilient option against Iran’s national network.
ایکستیالاس
A speed extension for TLS in V2Ray that avoids double encryption and noticeably improves download throughput. Reality is the newer, safer member of the same family.
شدوساکس
A simple, lightweight encrypted proxy that was the most popular censorship-bypass tool before V2Ray. Still works in Iran, but without plugins its fingerprint is easy to detect.
تروجان
A protocol that wraps VPN traffic so it looks indistinguishable from regular HTTPS website traffic. Runs on port 443 and requires a domain with a real TLS certificate.
وایرگارد
A modern VPN protocol with a tiny codebase and excellent speed that runs on UDP by default. Great outside Iran, but typically blocked inside the country without an obfuscation layer.
Related
اوپنویپیان
A legacy, battle-tested VPN protocol that runs over both TCP and UDP. Severely throttled or blocked in Iran today and usually not a good fit for Iranian users.
آیکِیایوی۲
A standard VPN protocol natively supported on iOS and Windows that handles mobile-network roaming well. Unfortunately almost entirely blocked on Iran’s network.
هیستریا
A QUIC-based protocol designed for lossy, high-latency networks. On Iranian mobile carriers (Irancell, Hamrah-e Avval) it often delivers better speed than plain V2Ray.
توایک
Another QUIC-based protocol focused on low latency and NAT traversal. Like Hysteria, a strong choice for weak mobile networks inside Iran.
دیاناس
The system that translates website names (e.g. google.com) into IP addresses. Iranian ISPs tamper with DNS, so a secure DNS resolver is the foundation of any bypass setup.
دیاواچ
DNS over HTTPS — wraps DNS queries inside HTTPS so your ISP can’t see which domain you’re resolving. Easy to enable in Firefox and Chrome.
دیاوتی
DNS over TLS — similar to DoH but on dedicated port 853. Android 9+ supports it natively as “Private DNS”.
امتییو
The largest single packet size that can travel across the network without being fragmented. A wrong MTU on WireGuard or V2Ray causes slow speed or disconnects.
تیسیپی در برابر یودیپی
TCP is reliable and acknowledges every packet (better for downloads); UDP is faster and unacknowledged (better for streaming and gaming). VPNs use one or the other depending on the protocol.
تأخیر (پینگ)
The time it takes a request to travel from your device to the server and back. Measured in milliseconds — under 80ms is good for gaming and calls.
پهنایباند مؤثر
The actual amount of data that passes through a connection per second. Differs from theoretical bandwidth because network loss and protocol overhead reduce it.
پهنایباند
The maximum capacity of a connection per unit of time, usually in megabits per second (Mbps). Your VPN server’s bandwidth is the absolute speed ceiling for your config.
رمزنگاری
The process of converting data into an unreadable form that only the correct key can decode. The core job of any VPN is encrypting traffic between your device and the exit server.
ایایاس
The Advanced Encryption Standard, a symmetric cipher used everywhere (banks, HTTPS, VPNs). AES-128 and AES-256 are the common variants — both are considered secure in practice.
چاچا۲۰
A modern stream cipher that runs faster than AES on mobile devices without hardware acceleration. WireGuard and many newer protocols use it by default.
تیالاس
The protocol behind the green padlock (https) in your browser that encrypts traffic between you and websites. Many censorship-bypass VPN protocols (VLESS, Trojan) hide themselves inside TLS.
اسانآی
A field in the first TLS message that reveals the target domain name in plain text. Iranian carriers use SNI to filter domains — Reality is designed to hide exactly this.
لینک سابسکریپشن
A URL you paste into a V2Ray client to auto-download a fresh list of configs. The advantage: when servers or configs change, you don’t need to re-enter anything manually.
کانفیگ QR کد
A QR image that encodes a full V2Ray config (vless:// or vmess:// URI). A mobile client scans it and imports the config in one second — the easiest way to send a config to family.
پنل 3x-ui
An open-source web panel for managing V2Ray/Xray servers — creating users, assigning traffic and time quotas, viewing usage stats. v2route uses 3x-ui for account management.
ویتوریانجی
The most popular Android client for V2Ray configs. Open-source, free, and supports all modern protocols (VLESS, Reality, VMess, Trojan).
استرایسند
A free iOS client that combines V2Ray, Shadowsocks, WireGuard and OpenVPN in a single app. The current best option for iPhone and iPad in Iran.
بازرسی عمیق بستهها
A technique where the ISP inspects packet contents (shape, signature) rather than just destination. Iran's DPI recognizes OpenVPN, WireGuard, IKEv2 signatures and blocks them. Reality evades it by mimicking real HTTPS.
Related
اوبفاسکیشن
Disguising VPN traffic so it doesn't look like VPN. Reality is one of the most advanced obfuscation techniques — making traffic appear identical to real HTTPS from a real site.
اثرانگشت پروتکل
The unique pattern each protocol has in its initial handshake — like a signature. DPI uses fingerprints to identify protocols. Reality's goal is to copy real sites' fingerprints rather than having its own.
شبکه ملی اطلاعات
A government project routing Iran's internet through domestic infrastructure. When active (e.g., protests), most known VPNs get cut. Reality stays stable because it mimics ordinary HTTPS traffic.
Related
سیدیان
A network of geographically-distributed servers caching site content. Cloudflare is the largest CDN. Reality handshakes through CDNs — copying the CDN's cert instead of issuing its own.
کلودفلر
The world's largest CDN and public DNS provider. v2route uses Cloudflare in front of its servers for DDoS protection and faster delivery. Reality also handshakes using Cloudflare's cert.
شناسهی یکتای کاربر
A 36-char string (e.g., `a1b2c3d4-e5f6-...`) identifying a user on a V2Ray server. Works like a password — anyone with the UUID can use the subscription. Rotate from the panel if leaked.
مالتیپلکس
Sending multiple data streams over a single TCP connection. Reduces round-trips and speeds things up. V2Ray supports Mux — typically enabled on clients but disabled with Reality handshakes (it breaks the anti-DPI camouflage).
اِکسری
An advanced fork of V2Ray-core where most modern protocols (Reality, VLESS XTLS) ship first. v2route's servers run Xray, not classic V2Ray.
سینگباکس
An open-source universal proxy core supporting all major protocols (V2Ray, Shadowsocks, WireGuard, Hysteria2, TUIC) under one roof. Clients like NekoBox and Karing are built on sing-box.
کوئیک
A modern transport protocol by Google (TCP replacement) running over UDP. Faster than TCP/TLS and resilient to packet loss. Hysteria2 and TUIC are both built on QUIC — that's why they're faster on lossy networks.
Related
ساکس۵
An old, simple proxy protocol that just forwards data. Has no encryption of its own. Most Android filtershekan apps are SOCKS5 — neither secure nor DPI-resistant. V2Ray is much stronger.
هندشیک
The initial negotiation between client and server before data flows — exchanging certs, agreeing on cipher, exchanging keys. DPI primarily inspects the handshake because protocol signatures differ at that moment.
محرمانگی پیشرو کامل
An encryption property where even if the server's long-term key is later compromised, past sessions can't be decrypted. Each session uses an ephemeral key. TLS 1.3 (used by Reality) always provides PFS.
صفر-RTT
A technique allowing data to reach the server in the very first packet without waiting for the handshake. Supported by TLS 1.3 and QUIC. Makes subsequent connections much faster.
کلید قطع اضطراری
A feature that blocks all internet traffic if the VPN suddenly drops, preventing data leaks through the plain ISP route. Both V2RayNG (Android) and V2Box (iOS) support this.
تونل تفکیکشده
Choosing which apps go through the VPN and which connect directly. E.g., Iranian sites direct, blocked sites via VPN. V2RayNG and V2Box both support this — by app and by domain.
نشت WebRTC
A browser issue where WebRTC can leak the user's real IP even with VPN active. WebRTC is used for browser video calls and sometimes sends STUN/TURN requests outside the tunnel. Can be disabled in browser settings.
ترون / TRC20
The TRON blockchain is a popular network for transferring USDT (Tether) due to very low fees. v2route accepts crypto payments on TRC20 — fees are usually under $1 and transactions settle in minutes.