VPN Terms
Explained

A symmetric encryption algorithm used by VPNs to secure data. AES-256 is considered unbreakable with current technology.

The process of verifying user identity before granting VPN access, typically through username/password, certificates, or tokens.

The maximum data transfer rate of a network connection, measured in Mbps or Gbps. VPNs may reduce bandwidth due to encryption overhead.

A multi-hop VPN configuration where traffic passes through multiple servers for enhanced privacy.

An algorithm for encrypting and decrypting data. Common VPN ciphers include AES-256-GCM and ChaCha20-Poly1305.

Records of when users connect/disconnect from VPN servers. No-log VPNs don't keep these records.

An attack that overwhelms servers with traffic. VPNs help protect against DDoS by hiding your real IP address.

Translates domain names to IP addresses. DNS leaks can expose browsing activity even when using a VPN.

When DNS queries bypass the VPN tunnel, potentially exposing your browsing activity to your ISP.

Routing traffic through two VPN servers for additional encryption layers. Also called multi-hop.

The process of converting data into unreadable code to prevent unauthorized access during transmission.

Encryption where only the communicating users can read the messages, with no middleman access.

A network security system that monitors and controls incoming and outgoing traffic based on security rules.

An intelligence alliance (US, UK, Canada, Australia, New Zealand) that shares surveillance data. VPN jurisdiction matters for privacy.

Restricting content access based on geographic location. VPNs can bypass geo-blocks by changing your virtual location.

China's internet censorship system that blocks foreign websites and VPN connections. Advanced obfuscation is needed to bypass it.

The initial communication between client and server to establish a secure connection, exchanging encryption keys.

Hypertext Transfer Protocol (Secure). HTTPS encrypts web traffic, but a VPN adds another encryption layer.

A unique numerical identifier assigned to each device on a network. VPNs mask your real IP with the server's IP.

When your real IP address is exposed despite using a VPN, often through WebRTC or DNS leaks.

The company providing your internet connection. Without a VPN, ISPs can see all your online activity.

A VPN feature that blocks internet access if the VPN connection drops, preventing unprotected traffic.

The process of securely sharing encryption keys between VPN client and server.

The delay between sending a request and receiving a response, measured in milliseconds. Important for gaming and video calls.

A VPN provider's rules about what user data they collect and store. No-log policies mean no activity records.

An attack where someone intercepts communication between two parties. VPN encryption prevents this.

OrbVPN's protocol obfuscation feature that disguises VPN traffic as regular HTTPS, Zoom, or other traffic types.

Routing VPN traffic through multiple servers sequentially for enhanced privacy and security.

A method of remapping IP addresses. NAT can cause connectivity issues with some VPN configurations.

A VPN provider's commitment to not record user activity, connection times, or IP addresses.

Disguising VPN traffic to look like regular HTTPS traffic, helping bypass VPN blocks and deep packet inspection.

An open-source VPN protocol known for security and flexibility. Slower than WireGuard but widely compatible.

OrbVPN's proprietary protocol combining WireGuard speed with advanced obfuscation capabilities.

A feature where new encryption keys are generated for each session, so past communications can't be decrypted if keys are compromised.

A virtual point for network connections. VPNs typically use ports like 443, 1194, or 51820.

The rules and procedures for data transmission. VPN protocols include WireGuard, OpenVPN, and VLESS.

An intermediary server that forwards requests. Unlike VPNs, proxies typically don't encrypt traffic.

Servers that run entirely in volatile memory, ensuring no data persists after reboot.

An asymmetric encryption algorithm commonly used for secure key exchange in VPN connections.

An encrypted proxy protocol designed to bypass internet censorship, often used alongside VPNs.

A VPN feature that lets you route some traffic through the VPN while other traffic uses your regular connection.

Secure Sockets Layer / Transport Layer Security. Cryptographic protocols for secure internet communication.

When ISPs intentionally slow down certain types of traffic. VPNs can bypass throttling by hiding traffic type.

The Onion Router, a network for anonymous communication. Can be used with VPNs for additional privacy.

The encrypted connection between your device and the VPN server through which all traffic passes.

A lightweight protocol similar to VMess but more efficient. VLESS Reality provides advanced obfuscation.

A service that encrypts your internet connection and masks your IP address for privacy and security.

A browser vulnerability that can expose your real IP address even when using a VPN.

A modern VPN protocol known for simplicity, speed, and strong cryptography. Uses only ~4,000 lines of code.

A cryptographic method where one party proves knowledge of something without revealing the information itself.