AIVPN: VPN Protocol with Traffic Mimicry and Dynamic Profile Switching
AIVPN is a VPN protocol designed to blend in with everyday network traffic. DPI systems spot VPNs not by peeking inside packets, but by spotting telltale signs like packet sizes, timing intervals, and handshake patterns. AIVPN tackles a dual challenge: strong encryption plus flying under the radar.
At its core is the Signal Reconstruction Resonance method (patent pending, USA 19/452,440, filed January 19, 2026). The server analyzes session stats and automatically adjusts to network changes on the fly.
Packet Structure Without Exposed Session IDs
Every packet skips a fixed session identifier, using a short cryptographic tag instead. This cuts down on metadata noise and makes sessions easier for the server to track.
Simplified structure:
TAG | MDH | encrypt(pad_len || inner_payload || random_padding)TAG is the session tag, MDH is the mask-dependent header. This design lowers the entropy of packet appearances, making them look more natural.
Minimal Handshake
Traditional VPNs rely on obvious handshakes with predictable patterns that DPI loves to flag. In AIVPN, the client kicks off the exchange right away, and the server reconstructs the session from the very first packet. No dedicated setup phase means lower risk of behavioral detection.
Traffic Mimicry Profiles
Masks emulate real-world protocols, including realistic flow stats:
- Packet size distributions.
- Transmission intervals.
- Behavioral dynamics over time.
Available profiles:
- QUIC-like traffic.
- WebRTC/STUN.
- DNS over UDP.
The mask shapes not just headers, but full patterns, making your traffic indistinguishable from legit apps.
Neural Resonance for Monitoring
The star feature is Signal Reconstruction Resonance. For each mask, it builds a compact signature vector to power a lightweight neural network. This monitors:
- Packet sizes.
- Intervals.
- Ciphertext entropy.
- Flow dynamics.
It calculates signal reconstruction error. If error spikes, it signals mask degradation—your traffic's drifting from the profile.
The server detects when DPI starts throttling or blocking, all without heavy LLM inference.
Automatic Mask Rotation
Spot issues? The current profile gets marked as compromised, and the session switches to a backup mask without dropping the tunnel. This keeps things alive: adaptation over failure.
Unlike WireGuard or OpenVPN, which focus on tunneling, AIVPN bakes mimicry into its core architecture.
Cryptographic Foundations
The protocol leans on battle-tested primitives:
- X25519 for key exchange.
- ChaCha20-Poly1305 for AEAD.
- BLAKE3 for hashing.
Session key rotation prevents traffic buildup under one key, boosting forward secrecy.
Current Implementation Status
Ready now:
- Linux server.
- CLI client.
- macOS and Android clients.
- Windows client in alpha testing.
iOS version with full App Store integration coming soon.
Key Highlights
- Short crypto tags: Ditch exposed session IDs to stay stealthy.
- Instant start: No cookie-cutter handshakes.
- Dynamic masks: Mimic QUIC, WebRTC, DNS with lifelike stats.
- Resonance monitoring: Catch degradation without extra overhead.
- Seamless rotation: Swap profiles on the fly.
— Editorial Team
No comments yet.