xray + sing-box protocol stack
the vpn that works
when others don't
bypass deep packet inspection in iran, russia, turkey, and china. built on the protocols that actually survive censorship — not just another wireguard wrapper.
$ brix connect --auto
[ok] handshake: xray-reality
[ok] endpoint: frankfurt-03.brix
[ok] latency: 28ms · throughput: 142mbps
> tunnel active ●
47
countries
1.2M
active users
99.7%
uptime
0
logs stored
features
built for hostile networks
01 /
reality protocol
mimics real tls traffic to legitimate sites. undetectable by deep packet inspection.
02 /
auto failover
switches protocols in under 2 seconds when a connection is throttled or blocked.
03 /
zero logs
no session data. no dns queries. nothing to subpoena, nothing to leak.
04 /
split tunneling
route only the apps you choose through the tunnel. keep local services fast.
05 /
kill switch
drops all traffic instantly if the tunnel fails. no leaks, no exposure.
06 /
obfuscated sni
hides the destination hostname from network-level observers and isps.
protocol stack
not another wireguard wrapper
most vpns use openvpn or wireguard — protocols that great firewall operators flag on sight. brix uses xray with reality and vision, plus sing-box as fallback.
the traffic looks like tls to cloudflare.com. because it is.
- xray-core with reality handshake (tls 1.3 mimicry)
- vision flow for udp-over-tcp resilience
- sing-box fallback with shadowsocks-2022
- domain fronting on restricted networks
client_hello200 ok
reality_authverified
vision_flowactive
ech_extensionenabled
sni_obfuscationon
dpi_signatureclean
tunnel_mtu1420
encryptionchacha20
> status: operational ●
pricing
three tiers. no tricks.
POPULAR
plus
$4.99/ month
- all 47 locations
- unlimited data
- reality + xray + sing-box
- priority support
// ppp pricing available in 40+ countries
stop losing connections
to the firewall.
7-day free trial. no credit card. cancel in one tap.
> download brix_vpn