Not a consumer VPN. SetaLink was engineered for regions with active Deep Packet Inspection. VLESS+Reality. DNS-over-HTTPS through the tunnel. Real HTTP probe validation. 1 GB free.
Three layers of anti-censorship protection working together.
Layer 1: Undetectable Transport
VLESS+Reality uses TLS 1.3 with real certificates from legitimate domains. Deep Packet Inspection sees a normal HTTPS connection — not a VPN. This defeats fingerprinting-based blocking used in Iran, China, and Turkey.
Layer 2: Encrypted DNS
DNS queries travel through the encrypted VPN tunnel via DNS-over-HTTPS (1.1.1.1, 8.8.8.8, 9.9.9.9). ISP DNS poisoning — a widely used censorship technique — cannot intercept or redirect your domain lookups.
Layer 3: Real Validation
TCP-connected is not enough. SetaLink sends a real HTTP/HTTPS request through the tunnel and verifies data is received before declaring connection success. Fake "connected" states that deliver no real internet are rejected.
Automatic Adaptation
When a blocking pattern changes, Remote Config pushes new SNI priorities and protocol orders to all devices — no app update required. Typically within minutes of a new blocking event being detected.
FAQ
Anti-Censorship VPN — Technical FAQ
DPI is a network analysis technique where ISPs or governments inspect the contents and patterns of network packets — not just IP addresses and ports. VPN protocols like WireGuard, OpenVPN, and Shadowsocks have identifiable packet structures and TLS fingerprints. VLESS+Reality generates traffic that looks identical to a TLS 1.3 connection to a legitimate domain, defeating DPI pattern matching.
Standard DNS queries are sent in plaintext to your ISP's resolver, which can modify (poison) the response to redirect blocked domains to fake IPs or return NXDOMAIN. DoH encrypts DNS queries and sends them as HTTPS requests through the VPN tunnel directly to trusted resolvers (1.1.1.1, 8.8.8.8). Your ISP cannot see or alter these queries.
Most VPNs declare connection success after a TCP handshake with the VPN server succeeds. But a TCP connection to the server doesn't mean internet traffic is actually routing through it — NAT may be broken, the server may not be forwarding packets, or the connection may be throttled. SetaLink performs an HTTP GET request through the tunnel and verifies a data response before declaring success.
SetaLink targets users in heavily censored regions — primarily Iran and Turkey — where standard VPN protocols fail. It's useful for anyone who needs reliable internet access: journalists, students, researchers, activists, or anyone who values unrestricted access to information.
The Xray-core engine used by SetaLink is open source. The SetaLink Android application is available on GitHub for community review. The server-side configuration and admin infrastructure are proprietary, but no security claims are made that rely on secrecy.
