How the internet gets blocked
Network blocking is not one single thing. It is applied through different routes, and each is worked around differently. Here is what they are.
The three common routes
By DNS. The simplest: when you request a domain, the provider answers with a false address or an error. Worked around by using another resolver, for example DNS over HTTPS.
By SNI. When opening an encrypted connection, the server name travels readable in the initial handshake. A deep inspection system reads it and cuts the connection. An ordinary VPN is not enough, because its own handshake is identifiable too.
By IP address. The destination is blocked directly. This is the hardest to work around, because it does not depend on names but on numbers.
What this app does
VPN PRO 89 uses VLESS with XTLS-Reality over Xray-core. On a network that inspects the TLS handshake, that transport behaves differently from a conventional VPN protocol.
The Android app also offers Shadowsocks, plus Tor routing as an option. The desktop client only accepts VLESS with Reality.
We do not promise it will always work on every network: whoever blocks also adapts. What we do is publish which techniques we use, so you can judge whether they fit your situation.
Where to find independent data
We publish no censorship measurements of our own, because that would require collecting network data from our users and we have chosen not to. Instead, these organisations publish verifiable, up-to-date data:
OONI (Open Observatory of Network Interference) — open measurements of blocking by country: explorer.ooni.org
NetBlocks — real-time tracking of outages and disruptions: netblocks.org
Access Now — the #KeepItOn campaign on internet shutdowns: accessnow.org/keepiton
On legality
Using a VPN is legal in most countries, but some restrict or ban them. Checking the law where you are is each person's responsibility.
This tool exists to reach information and communication services. Our servers block BitTorrent, direct outbound mail and access to private network ranges. The detail is in the acceptable use policy.