What is the Reality transport?
Reality is a transport for the Xray core, usually paired with VLESS. Its job is disguise: it makes your connection look like an ordinary HTTPS visit to a real, well-known website, and it is specifically built to defeat active probing — the technique where a censor connects to a suspicious server to test whether it is a proxy. Unlike older camouflage methods, Reality does not need you to own a domain or run a certificate.
The problem Reality solves
Earlier TLS-camouflage approaches (like the "TLS + web server" trick) had two weaknesses. First, you needed a real domain name and a valid certificate, which is extra setup and cost. Second, a determined censor could actively probe the server: connect to it directly, poke at the TLS handshake, and notice it did not behave exactly like the real site it claimed to be. Several national firewalls do exactly this.
How Reality works, at a high level
- The server is configured to borrow the TLS identity of a real, unrelated website — a large, stable site that is not itself blocked.
- To anyone probing it, the server presents that site's genuine certificate chain, so the handshake looks authentic.
- A client that knows the shared key gets routed to the proxy. A probe that does not is transparently passed through to the real site, so it sees a normal website and nothing suspicious.
- There is no separate domain or certificate to buy or leak.
The effect is that the server is hard to distinguish from a normal web server both passively (traffic shape) and actively (probing).
What Reality does not do
Reality is a disguise layer, not magic. It does not change the fact that a network can still block whole IP ranges, throttle sustained traffic, or restrict access during an event. And censorship tooling adapts over time. On any given network the honest position is that a Reality-based service has a better chance of connecting than plain WireGuard or OpenVPN — not a guarantee. This is why testing on your own connection matters.
For the broader picture of what networks detect, see how ISPs block VPNs.
Where AVEE fits
AVEE uses VLESS + Reality as its default transport on Android and Windows, so the anti-probing camouflage is on out of the box rather than a setting you have to find. If you want to see how it holds up on a particular network — a specific carrier in Pakistan or Turkey, say — use the free trial (about 1 GB, up to 3 days) before paying.
AVEE uses VLESS/Reality and lets you test compatibility on your connection before paying.
FAQ
- Is Reality a VPN protocol?
- No. It is a transport/camouflage layer for the Xray core, normally used with VLESS. Together they do the job people expect from a VPN, but the design goal is evading detection, not classic site-to-site tunnelling.
- How is Reality different from "TLS + website" camouflage?
- It does not require you to own a domain or manage a certificate, and it is built to survive active probing by borrowing the TLS identity of a real external site and passing unknown visitors through to that site.
- Does Reality mean a VPN always works in China or other heavily censored places?
- No. Reality improves the odds against detection, including active probing, but IP blocking, throttling and event-time restrictions still apply, and censorship methods change. No VPN can honestly promise it always works somewhere.
Sources
- Project X (Xray) — REALITY documentation — checked 2026-08-29
- Top10VPN — VPN censorship methods including active probing — checked 2026-08-29