How we built the public status page — and why it's worth doing honestly
Warrant canary, p95 measurements, incident timeline — how this stack helps us sell trust.
Our first external security audit: what they found and how we fixed it
Seven findings, two critical. A straight-up write-up of what was wrong and what we shipped.
How we survived the March 2026 TCP RST wave in Russia
A breakdown of the filtering patterns and what we changed in the adaptive strategy in 36 hours.
Split-tunneling on Android: three approaches, two failures
From VpnService to VpnService extensions to userspace packet filtering — what actually works in 2026.
China mode: how hardened obfuscation works
A step-by-step look at how we hide frame lengths from DPI in hostile networks.
honesty· 5 分钟
Why we publish p95 instead of "up to 500 Mbps"
A short take on why honest metrics sell better than marketing puffery.
What we saw on Iranian networks in February 2026
Two new Iranian DPI patterns and how hardened mode closes both.
How the Telegram-bot purchase flow works
A step-by-step flow: from /start to an active subscription without touching a card.
QUIC migration: what half a year in production taught us
MTU surprises, unexpectedly high server CPU, and how we stopped fearing the 0-RTT handshake.