A VPN protocol determines how an app establishes an encrypted tunnel, moves packets, responds to congestion, and recovers when a network changes. RelyVPN's protocol is designed around ordinary security and reliability goals: protect traffic on the path between the device and the VPN gateway, reduce stalls on unstable links, and reconnect with minimal user intervention.
Protocol design goals
- Encrypted transport: protect data sent between the RelyVPN app and the selected VPN gateway.
- Responsive connections: reduce setup time and avoid one delayed stream holding up unrelated streams.
- Network adaptation: adjust sending behavior as bandwidth, latency, and packet loss change.
- Continuity: recover when a device moves between Wi-Fi and cellular networks or when a node becomes unavailable.
These are engineering objectives, not guarantees of a particular speed. Actual results vary by device, local network, route, server load, and destination.
Encryption and its boundaries
The protocol uses TLS 1.3 to encrypt traffic carried between the app and the RelyVPN VPN gateway. This helps protect data from observation on local networks such as public Wi-Fi. A VPN tunnel is one part of connection security: websites and apps should still use HTTPS or another end-to-end encrypted protocol for the path beyond the VPN gateway.
Encryption also does not mean that no operational data is processed. Licensing, network delivery, security, diagnostics, support, and payment functions require limited information, described below and in the Privacy Policy.
Why QUIC
QUIC combines encrypted setup with multiplexed streams. If a packet for one stream is delayed, unrelated streams can continue instead of waiting behind it. QUIC also supports connection migration, which can help preserve a session when a device changes networks.
These characteristics can improve responsiveness for browsing, messaging, software updates, and video calls on networks with changing latency or packet loss. They do not remove the physical limits of the underlying connection.
Adaptive congestion control
RelyVPN's BBR Max component estimates available bandwidth and round-trip time, then adjusts its sending rate as conditions change. The goal is to maintain useful throughput without building an unnecessarily long queue at a congested link.
Adaptive control is especially useful on shared Wi-Fi and mobile connections, where capacity can change from moment to moment. Performance should be evaluated on the actual network rather than inferred from a protocol name alone.
Transport fallback
QUIC normally uses UDP. Some managed networks do not provide usable UDP connectivity, so the app can use an alternate TLS-based transport when needed. Automatic selection reduces setup work and lets the app choose a compatible path based on current network conditions.
Node selection and recovery
The app can measure candidate nodes and select one based on current responsiveness and availability. If conditions change, it can reassess the choice. Multi-node operation may distribute traffic or preserve service when a node stops responding, subject to capacity and plan availability.
Node selection is a reliability feature. The closest node may not be the fastest because routing and load also matter.
Operational data
Providing these functions may involve a device or license identifier, subscription entitlement, connection status, traffic counters, source IP during network delivery or security checks, diagnostics, website analytics, referral information, payment events, and information submitted to support. The exact processing depends on the feature and channel used.
See the Privacy Policy for purposes, recipients, retention periods, choices, and privacy-request methods. RelyVPN's account-free setup removes the RelyVPN email login step, while limited data processing remains necessary.
Trying the protocol
The free plan lets one device use a one-time 300 MB allowance without the free-tier 160 kbps cap. Actual throughput varies by device, local network, route, server load, and destination. After the allowance, the free tier applies a maximum rate of 160 kbps. No RelyVPN account or email login is required to start. Paid-plan details are available on the pricing page.
Frequently Asked Questions
What does the RelyVPN protocol encrypt?
It encrypts traffic carried between the RelyVPN app and the selected VPN gateway. HTTPS remains important for protection between the gateway and a website or service.
Why does RelyVPN use QUIC?
QUIC provides encrypted setup, independent streams, and connection migration. Those features can improve responsiveness and continuity when network conditions change.
What happens when UDP is unavailable?
The app can select an alternate TLS-based transport. Availability and performance depend on the local network, route, device, and server conditions.