A fallback when VPN is already blocked in your country.

Prosvetech Proxy

What it is

Prosvetech Proxy over the VLESS Reality protocol. Unlike a VPN, Reality disguises your traffic as an ordinary connection to www.icloud.com — from the outside, the connection looks exactly like an iPhone or Mac syncing with iCloud in the background. Practically impossible to tell apart from legitimate HTTPS traffic from the outside.

Reality is a fallback in case AmneziaWG isn’t handling its job. Only the apps you pick go through it — unlike a VPN, which routes the whole system. Less convenient, but today’s best option in tough network conditions.

How to set it up

  1. Send a direct message in the channel. The administrator exports a VLESS URL (vless://...) and sends it over a private channel or as a QR.
  2. Install a client with VLESS Reality support:
  3. Import the URL or QR into the client → turn the connection on. The client will show a list of apps you can route through the tunnel.
  4. Also recommended: set up Prosvetech DNS on the device. Reality hides the contents of your traffic, but DNS queries leak straight to your ISP by default — see the FAQ below.

FAQ

What’s the difference from a VPN? A VPN (WireGuard / AmneziaWG) uses its own network protocol and tunnels all device traffic — both TCP and UDP. Reality proxy disguises itself as ordinary HTTPS to icloud.com and only handles TCP. On mobile clients (Happ, v2rayNG, Hiddify) both typically install as a system tunnel via the OS VPN API — the difference isn’t in how you connect, it’s in the protocol and what gets tunneled.

VPN or Proxy — which one? If the VPN works, use the VPN — it’s more functional. If AmneziaWG isn’t working on your network for any reason — Proxy. Nothing stops you from keeping both and switching between them.

Does UDP traffic go through the proxy? No, Reality proxy is TCP-only. WebRTC video calls, online games, QUIC (HTTP/3), and other UDP-based applications don’t go through the proxy — they go directly through the device’s regular connection. If you need to tunnel everything including UDP, use VPN (WireGuard/AmneziaWG).

Why masquerade as icloud.com? Because every iPhone, Mac, and iPad on the planet hits iCloud continuously: photo sync, backups, Keychain, Find My, push notifications, update checks. Hundreds of millions of devices talk to Apple’s infrastructure every second. An HTTPS request to iCloud dissolves into the background noise of the network, indistinguishable from any other iCloud sync.

Can my ISP see what sites I open through Reality? Not fully. The traffic itself is encrypted and masqueraded as iCloud — your ISP can’t see the contents. But there’s a catch: DNS queries (translating rutracker.org into an IP address) go from your device straight to your ISP’s DNS by default, bypassing Reality. Your ISP sees the list of domains you resolved, even if not what you did there.

To close this leak, set up our private DNS alongside Reality: Prosvetech DNS encrypts DNS queries with DoH/DoT and routes them through our server. Configured once per device, works regardless of whether Reality is on.

Can I use Reality together with MTProxy? Yes, they live on different layers: MTProxy is a setting inside Telegram itself, Reality (via Happ / Hiddify) is a system-wide tunnel over the VPN API. With both on in default mode, Telegram traffic gets wrapped twice (first through MTProxy, then again through Reality) — it works, with a bit of overhead. The optimal setup: in the Reality client’s routing settings, add Telegram to the exclude list so Telegram goes directly through MTProxy while everything else rides Reality. More detail on the MTProxy page FAQ.

Why do I need a separate client — why not just a system VPN? VLESS Reality runs on a client-proxy architecture: a local process accepts connections from apps and forwards them through the tunnel. The system VPN stack doesn’t speak this protocol.

Source code