What problem it solves

VPN traffic can expose protocol characteristics that are examined during network inspection. The project addresses this by encrypting UDP tunnels, applying configurable traffic masks, and rotating session keys while providing bounded packet handling and live traffic-quality checks.

Key features

• Encrypted and forward-secret sessions — The InitialV2 exchange confirms a fresh server key, after which data and management commands require Perfect Forward Secrecy. An X25519 ratchet rotates session keys during an active connection.

  Source: README

• Configurable traffic masking — Mask profiles control outer protocols, packet sizes, and send intervals across QUIC, STUN, and media-channel styles. Clients can sample stored packet-size and inter-arrival distributions.

  Source: README

• Live mask quality checks — The Neural Resonance module monitors live traffic statistics with a per-mask micro-MLP. A high reconstruction error causes the server to rotate the mask without disconnecting clients.

  Source: README, crates

• Cross-platform VPN clients — The workspace contains command-line and graphical clients for Linux, macOS, and Windows, plus native applications for Android and iOS. Platform integrations include TUN drivers, SwiftUI, Kotlin, and Windows GUI components.

  Source: README, platforms

• Web server management — A web management panel supports client administration, pool topology, mask management, logs, backups, and live metrics. It exposes a role-based API and a realtime event stream.

  Source: README

Quick start

Copied verbatim from the project's README.

cd platforms/aivpn-web
cp .env.example .env          # fill JWT_SECRET, TOTP_ENCRYPTION_KEY, ORIGIN
bun install && bun run build
bun run start                 # listens on PORT (default 8080)

Who it may suit

This project may suit network researchers, developers, and operators who want to study encrypted UDP tunnels, traffic shaping, and client administration across desktop and mobile platforms. It is also relevant to users evaluating protocol-masking research under their applicable local laws.

Topics to discuss

• How should traffic-mask profiles be evaluated without assuming that protocol resemblance proves indistinguishability?

• Which measurements are most useful for validating live mask rotation and traffic reconstruction errors?

• How should deployment guidance address coordinated client and server upgrades for InitialV2?

Written by ReadmeX AI from the project's README, source and public GitHub data; it may contain mistakes.

Read the original README https://github.com/infosave2007/aivpn#readme

ReadmeX opened this community for a trending project; it is not run by the project. Maintainers can claim it from the community page.